Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/79c5f43d-784b-3f3e-8a0b-d94e129bd755.roa
File:                     79c5f43d-784b-3f3e-8a0b-d94e129bd755.roa (raw, json)
Hash identifier:          u1VDzm1R2vOEP2O7o5/Ca1LeLPJvUjR+M+HTSVUJJec=
Subject key identifier:   83:03:12:E4:4D:F0:86:CE:61:1B:CC:AA:BE:AC:DD:73:AF:3A:D9:BB
Certificate issuer:       /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
Certificate serial:       010D0C9F4328584ABD4B9BABD6B49C6FDF3294C0
Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/79c5f43d-784b-3f3e-8a0b-d94e129bd755.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     16509
IP address blocks:        204.79.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:9b:ab:d6:b4:9c:6f:df:32:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=dcfa854c-126d-4707-abc7-4ce8c876fd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:90:5a:de:fa:9f:cc:e3:e0:55:5e:ee:a2:dd:
                    a4:57:8e:6b:b4:e3:3a:5d:5d:19:28:82:16:94:d1:
                    fd:1a:d1:b6:85:84:65:f3:26:37:c9:c3:e4:86:eb:
                    92:7d:f5:dc:dc:3d:d8:f4:d0:32:82:2d:d0:4a:6c:
                    f8:d2:1f:16:01:c0:83:27:69:c2:05:6c:97:c5:1f:
                    40:6c:6f:74:98:67:78:1c:d7:01:26:40:46:88:00:
                    c2:b4:40:20:72:15:77:e5:15:c1:52:07:d0:f6:18:
                    a7:70:9e:19:7c:f7:1a:c4:cc:59:8c:05:37:cd:d1:
                    75:9e:b1:a8:a1:ae:44:2a:ad:6e:f9:d6:09:03:c2:
                    1d:f2:0a:02:25:cc:05:44:96:b3:20:4d:c8:6e:78:
                    79:ba:54:85:54:64:89:70:f6:5b:59:f6:7b:3d:cb:
                    c4:88:28:8d:a7:b9:65:a5:1f:e2:7e:bb:f0:ae:68:
                    44:8f:42:13:11:62:c6:c6:26:95:e8:ca:38:b5:27:
                    ba:04:f0:f2:cc:31:e3:6b:4c:54:51:8c:d8:f3:b6:
                    63:55:a9:d5:6b:c4:c5:b1:eb:1a:9c:54:9a:32:f5:
                    e5:6f:0b:ba:56:d4:73:69:21:b2:77:0f:a9:0c:90:
                    82:dc:dc:a5:45:7c:16:8a:21:0e:79:54:57:df:d9:
                    24:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:03:12:E4:4D:F0:86:CE:61:1B:CC:AA:BE:AC:DD:73:AF:3A:D9:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/79c5f43d-784b-3f3e-8a0b-d94e129bd755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl

            X509v3 Authority Key Identifier:
                keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.79.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:71:13:b0:7c:dc:91:dd:dd:1c:d8:7b:6d:41:65:b4:e0:95:
         55:8d:01:11:57:bc:99:83:7b:0d:5f:be:10:aa:96:6e:13:25:
         1b:d8:d4:96:d6:9f:04:7c:a5:e2:3b:a3:60:a7:ff:7e:df:56:
         e4:ee:0b:5f:f9:39:49:81:1b:d8:30:41:88:88:c2:8c:f1:0a:
         44:5e:0b:ac:bf:c9:10:34:ee:a6:22:98:ab:e1:b7:e8:17:f3:
         71:2b:e9:75:82:e2:a6:11:8a:d9:94:18:5a:a2:2e:4a:12:fa:
         c6:4f:65:b9:0e:85:12:a1:ae:ee:38:92:cf:b4:5e:ad:8a:f5:
         5b:f3:3f:de:ec:8a:3b:7f:e0:66:0d:64:c1:25:65:f7:f8:f6:
         86:95:26:82:aa:2f:bd:b1:f9:76:e4:83:9a:00:0d:5f:ad:1b:
         d4:63:ee:55:fc:36:71:68:f0:e0:bc:65:42:f1:6e:5e:22:76:
         f4:55:2d:4e:4f:ab:aa:96:a7:30:f6:d6:d0:ab:50:13:20:96:
         d5:24:b5:6f:61:02:55:90:50:1d:e2:48:2e:6a:d9:63:0a:5d:
         93:bd:fd:51:19:47:11:2a:12:e9:58:0b:8f:19:fa:a7:98:bf:
         4c:c6:6b:b4:8a:a0:70:a4:85:8e:ef:4a:49:3f:8b:26:ed:a1:
         2e:9b:0e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:17:30 2025 by rpki-client