Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/81b5a10c-83a6-3faf-af96-9ec3e9316ba9.roa
File:                     81b5a10c-83a6-3faf-af96-9ec3e9316ba9.roa (raw, json)
Hash identifier:          QkeZMW9G2l7RG+ETUH56ARujCOqLjEwp/y7uGbbs4+k=
Subject key identifier:   08:12:AA:47:64:6B:2D:A8:EA:2B:51:19:2A:27:69:FE:ED:EC:BF:99
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FF7ADE8684DAF15822C00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/81b5a10c-83a6-3faf-af96-9ec3e9316ba9.roa
Signing time:             Mon 16 Jun 2025 16:03:18 +0000
ROA not before:           Mon 16 Jun 2025 16:03:18 +0000
ROA not after:            Sun 14 Sep 2025 16:03:18 +0000
asID:                     81
IP address blocks:        204.84.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:f7:ad:e8:68:4d:af:15:82:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:18 2025 GMT
            Not After : Sep 14 16:03:18 2025 GMT
        Subject: CN=1fc1d576-802b-471d-8027-7f36a179999e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4b:0d:45:74:95:c9:2f:35:cc:d0:03:35:ff:
                    b0:8e:d2:f6:ac:40:82:66:7b:e5:b8:f4:12:01:e8:
                    54:27:df:b8:07:9d:ab:c8:c0:ba:f6:ce:05:9a:b9:
                    f9:69:4b:ed:7c:3b:66:b0:e3:59:8e:07:fc:cb:38:
                    15:b5:bd:a3:c6:e8:1d:9a:1f:54:3b:54:ac:99:c3:
                    62:18:f8:d1:8a:57:bd:a3:7b:eb:12:3d:1a:4e:79:
                    6b:ad:87:3b:06:d2:74:42:e1:5f:4f:1c:4e:2e:c4:
                    09:af:90:8f:c1:14:d9:7c:15:ba:71:2a:ab:08:f8:
                    40:af:ee:5e:2f:65:07:fd:9d:f9:de:42:eb:11:7a:
                    32:a6:29:69:e5:72:17:3a:eb:16:0e:02:8f:fa:69:
                    6b:fa:21:ac:f7:9e:1b:f8:c6:b6:1a:40:3a:b9:ce:
                    2d:59:60:21:be:78:3b:35:f4:af:81:20:10:d7:a5:
                    0d:81:91:e8:58:51:6a:7f:d2:0f:76:58:9e:10:0d:
                    f1:0c:ad:3e:e3:83:4a:bf:a0:46:b3:e2:00:d6:da:
                    03:a8:f5:2d:db:92:cb:4f:86:9d:ba:af:8d:04:19:
                    7d:41:91:4c:2a:44:34:7e:4e:6b:2f:74:5e:2e:59:
                    78:61:5b:ac:39:fb:2b:d1:bc:61:30:7b:29:c2:ca:
                    3f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:12:AA:47:64:6B:2D:A8:EA:2B:51:19:2A:27:69:FE:ED:EC:BF:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/81b5a10c-83a6-3faf-af96-9ec3e9316ba9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:3c:2b:1d:74:12:5e:43:94:4b:3e:4c:e4:b2:1a:36:89:a4:
         fa:03:3e:63:06:0a:e6:88:11:5b:63:5f:e3:35:51:7e:35:de:
         43:00:7f:59:c9:50:01:95:77:67:07:5d:eb:11:4d:66:e5:67:
         43:86:40:fd:d7:02:46:84:7e:76:a5:be:94:fb:f1:e1:67:a5:
         63:8d:f6:ad:82:a1:46:64:34:68:de:9b:83:03:c6:74:1a:e3:
         82:50:78:f3:06:a5:33:4e:53:cf:19:27:4c:71:3f:62:cb:3e:
         24:cc:78:fb:ab:51:14:dc:05:a6:06:55:69:6b:5c:bf:14:46:
         eb:13:25:f1:cd:83:06:7e:21:ec:b2:00:f9:68:f5:a9:75:f0:
         7b:52:c1:76:4b:cb:b5:eb:85:85:c5:9c:ab:5f:83:7f:c1:98:
         2a:90:0e:f1:2b:ef:71:54:33:06:3f:03:cd:9d:e2:91:a9:e9:
         5c:97:d1:7d:b0:6e:80:88:26:56:05:4b:c2:d1:b0:13:4a:b1:
         fa:98:02:8f:5c:9c:28:51:7b:d7:10:a7:fb:0f:bd:cf:92:7e:
         92:fd:6f:2f:4f:12:65:0d:5a:88:89:2c:f8:6a:01:a0:a4:27:
         fe:c9:d5:36:da:1f:43:f1:20:a5:ad:bc:05:0f:5c:69:1a:7a:
         16:19:77:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:34:40 2025 by rpki-client