Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/d7ab9a51-7207-3919-9940-6a30f9e7b38b.roa
File:                     d7ab9a51-7207-3919-9940-6a30f9e7b38b.roa (raw, json)
Hash identifier:          A5R9H4ATVOyu2SX/IlQvM9HEbuknB9aMh9e0q3ZKyk0=
Subject key identifier:   C5:D7:46:E5:8B:AA:E5:A6:C1:BE:49:83:D3:04:ED:16:D4:56:61:FC
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584A03A54F872A685BDAB326C080
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/d7ab9a51-7207-3919-9940-6a30f9e7b38b.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     2572
IP address blocks:        204.184.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:4f:87:2a:68:5b:da:b3:26:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=a195381b-696d-4817-8d5f-2b472ef671c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:31:67:78:87:33:b0:65:0d:7b:5a:9c:81:43:
                    ca:f6:67:b0:fb:50:50:5b:59:35:eb:6c:ed:9f:0a:
                    67:80:be:27:40:ae:e0:0c:bd:db:09:91:33:e1:f7:
                    a1:36:41:58:1d:c0:5a:f2:7a:3e:04:52:ea:4a:cf:
                    bf:de:f2:89:60:f3:96:60:d6:c0:f2:ba:4f:6e:f1:
                    92:61:63:b2:7d:55:8a:8a:f3:25:3a:67:11:c9:6e:
                    28:2f:78:31:54:90:22:74:94:57:cc:6a:e6:c8:f3:
                    57:a4:08:85:d2:ca:fd:35:7b:64:4e:43:ba:18:31:
                    bf:0c:c2:fc:3e:88:1c:36:9d:e1:5d:64:10:77:b6:
                    49:ca:22:53:44:aa:2d:ac:32:84:80:1b:94:9c:c4:
                    bc:41:eb:b6:c4:40:44:f0:50:88:5d:05:ea:c3:f9:
                    b6:9d:73:89:ca:ae:1d:32:51:81:01:c6:c2:82:8e:
                    6d:1f:14:e7:ec:2b:f3:9f:32:5f:af:24:93:b7:17:
                    b1:a9:04:d8:d4:68:f4:03:4c:53:70:63:ba:68:f1:
                    de:40:da:78:c1:f5:32:04:83:c0:f6:eb:3e:28:ca:
                    91:33:23:dd:a4:f3:c6:44:40:1e:74:37:60:6d:e4:
                    56:49:0d:4d:06:b2:41:d0:f5:b4:8d:49:36:e0:8a:
                    1e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D7:46:E5:8B:AA:E5:A6:C1:BE:49:83:D3:04:ED:16:D4:56:61:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/d7ab9a51-7207-3919-9940-6a30f9e7b38b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.184.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:8b:39:a9:b7:93:36:d9:b5:c2:37:80:cf:57:c3:2d:b8:80:
         59:16:36:00:e7:2f:33:2d:e9:79:61:d5:f2:22:40:7d:96:e1:
         9d:a0:52:5d:59:a1:57:47:dd:de:91:02:e6:2e:04:7f:fb:99:
         de:49:6b:60:51:10:9b:f8:e4:4c:f7:fc:e4:30:48:b0:a2:3d:
         c9:0e:41:c8:2a:dc:70:d3:26:c3:b0:9a:92:99:73:74:b7:4d:
         66:af:8e:43:59:4e:06:3c:84:33:b1:2d:0d:c0:fc:41:ba:ea:
         11:a1:14:6e:4e:63:34:83:ca:1c:1b:1f:ee:06:28:7b:71:3a:
         8c:50:5b:c8:dd:7c:64:95:5e:e9:2f:cc:d6:66:e5:b7:94:0d:
         bd:5b:1d:52:2c:4b:14:25:57:96:8f:8a:f8:45:f8:57:47:b6:
         e7:b9:42:07:bc:05:ef:e5:e2:1c:36:45:95:2a:27:00:04:62:
         81:c4:ba:9d:c3:16:ac:7a:ee:02:62:b1:f0:bc:f1:79:0d:4c:
         2c:79:e9:8a:cd:9c:0a:85:db:7b:86:87:79:5f:96:24:d1:db:
         8d:16:df:db:11:45:3f:55:06:a0:f5:1c:21:a2:63:b0:3f:76:
         85:6e:3d:74:91:f5:52:58:82:ef:af:f8:68:80:0b:3d:0d:e3:
         0a:ca:02:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:49:02 2025 by rpki-client