Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa
File:                     f73b5053-f5db-33cf-aecf-f99a7cff535a.roa (raw, json)
Hash identifier:          izDkBr6jI5wyS5uzZ5/lFYby+0rnfv5/sJiFMKZ7Kw8=
Subject key identifier:   D0:59:71:56:49:1A:07:98:B4:CD:26:E4:37:70:B1:2E:DF:7A:B0:BD
Certificate issuer:       /CN=f97b644e-a01f-43c5-83e0-146254941d5f
Certificate serial:       010D0C9F4328584A82AB4CBAE21FA251AD1351B0
Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     36290
IP address blocks:        204.16.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:4c:ba:e2:1f:a2:51:ad:13:51:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=90b23f7e-cf0b-4b75-8a58-ccb11eeb41c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:00:11:ac:49:35:f3:30:a0:1d:ec:07:30:
                    46:b7:e5:fb:66:c2:06:86:63:16:8b:a5:26:de:18:
                    2f:74:18:de:98:f3:e3:75:39:d9:f6:92:f2:80:c6:
                    42:01:cb:c5:cc:99:e4:ed:46:22:cc:0f:11:f3:5e:
                    d2:e2:8c:1b:35:77:ec:0d:23:d8:7a:57:7a:c5:68:
                    55:23:2c:7c:a4:b6:da:ba:5b:21:8a:eb:b4:05:77:
                    d2:70:0a:5e:a6:ee:c6:0d:4d:2d:5a:c5:ee:2d:a7:
                    aa:34:bc:d8:e3:98:c1:18:b6:23:0d:18:29:fc:0b:
                    30:bf:bb:1b:9a:86:c0:e8:39:c9:ea:a0:fc:b8:d3:
                    21:94:21:2c:b9:4f:45:9f:36:fd:d3:3a:c3:b1:df:
                    e1:4e:82:69:95:28:1e:e4:e2:aa:e6:a5:3e:68:e3:
                    30:65:37:c1:eb:76:08:60:10:fd:21:bc:15:00:c7:
                    76:ae:8b:7c:22:03:87:fa:d7:86:63:ad:54:12:eb:
                    f3:ea:b9:03:34:1d:da:0a:09:db:db:c7:23:d4:b0:
                    73:07:4c:21:16:92:35:ac:49:65:a5:e7:96:47:c2:
                    b2:73:a4:14:ba:6c:74:29:9e:7d:b1:31:64:34:06:
                    de:c2:4b:7e:35:7d:b3:a1:a1:8d:c2:ad:d8:56:6b:
                    12:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:59:71:56:49:1A:07:98:B4:CD:26:E4:37:70:B1:2E:DF:7A:B0:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl

            X509v3 Authority Key Identifier:
                keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:a9:e1:5b:d6:6d:e8:30:20:03:49:59:90:13:7d:f3:3a:4c:
         1f:ba:25:72:af:ea:dc:7b:c9:d1:f7:c3:af:d4:80:88:5c:10:
         b9:a8:34:8c:c4:38:1a:d1:09:80:ae:b5:31:eb:59:f1:aa:b1:
         e4:e4:e4:fb:f8:c4:e4:87:6e:1f:f8:69:ec:b2:8b:6b:8f:6c:
         ce:ec:5f:9a:6c:41:fc:bd:e3:d4:12:98:87:4e:b5:97:0b:7a:
         57:5b:c2:e1:45:e8:0b:a9:fe:62:dd:52:07:e2:ea:d6:19:3b:
         8d:87:21:c7:b7:6e:9d:9f:85:14:2c:cc:86:cb:df:7d:71:1f:
         d8:a8:50:f6:ed:df:8a:d9:c4:7d:f8:d5:2b:8f:1a:ca:4a:fb:
         6d:df:ee:50:e4:d0:2b:d0:4c:9d:4a:7b:02:a6:61:9e:66:6b:
         a7:02:f8:48:1e:f7:b7:7f:ec:be:16:8b:b3:4d:11:dd:11:94:
         a2:ca:04:03:b1:6f:8a:c4:13:72:66:2b:b7:4b:0f:56:05:e2:
         95:65:64:7a:30:bc:17:34:7a:2d:69:0c:b5:95:ed:ab:b7:29:
         89:fc:b8:bd:67:26:8d:e5:1e:2d:06:8a:bf:5a:ab:0a:b5:44:
         a3:95:d2:9b:1f:8b:2c:43:3c:38:5f:88:c6:4f:e0:2d:60:71:
         97:4c:79:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:41:44 2025 by rpki-client