Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa
File:                     04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa (raw, json)
Hash identifier:          UhYUpsa+QHqMI2T1nKWRohyWZ8rpBfdGmT8cpsgZxwE=
Subject key identifier:   C0:A1:BF:90:4F:56:6C:BC:43:04:4D:EE:BD:0B:FE:0A:D4:9C:3B:46
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584A3480234EA5AAF316BB62F0A0
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     4540
IP address blocks:        204.8.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:23:4e:a5:aa:f3:16:bb:62:f0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=78f0d674-a9cd-4481-8207-3543a640d607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:71:62:e8:ae:84:ca:5e:86:7d:b2:9b:df:
                    b4:2a:1a:5f:03:fd:47:24:39:ec:16:d1:cf:fc:11:
                    09:0b:a4:89:17:03:11:8e:0e:55:65:4d:1d:c4:3b:
                    86:bd:5c:23:46:b1:c3:18:c2:b5:33:a5:fb:15:17:
                    96:6e:3a:42:13:c0:11:d2:66:f3:da:57:71:28:89:
                    0c:e6:7f:b0:ca:15:f9:60:03:b1:7f:29:95:45:1a:
                    0b:dc:c4:22:d0:11:b3:a9:74:b7:b6:c4:9b:bf:c0:
                    0e:8b:bd:1c:38:95:8b:1e:b8:ae:04:24:25:ba:c9:
                    2d:12:60:b9:d3:b7:82:44:6d:40:e8:59:09:73:99:
                    34:ed:66:04:91:36:64:ba:0e:d0:03:25:6b:f7:22:
                    b7:e9:5e:f6:99:57:8a:ac:e4:98:33:69:a5:7a:e8:
                    cd:1a:df:09:6a:4a:7c:41:0d:63:bd:7e:9f:ed:35:
                    89:28:49:2b:24:13:d9:f2:b0:f3:20:d5:80:5c:fc:
                    e5:19:b2:42:92:7a:1a:61:5f:75:67:16:ae:c5:11:
                    b5:f8:f2:d9:29:02:dc:6f:f0:cc:fd:52:e9:75:0a:
                    80:64:d6:22:dc:b7:46:5f:ec:89:ba:7e:c7:46:86:
                    e9:76:7f:91:a0:c2:0d:57:74:33:40:92:4c:41:2d:
                    6d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A1:BF:90:4F:56:6C:BC:43:04:4D:EE:BD:0B:FE:0A:D4:9C:3B:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e4:12:24:bb:ec:6b:19:f0:c1:0c:e2:9b:b6:7c:1d:2f:9f:
         10:59:5e:b3:28:5b:bd:2a:b8:a2:7a:3f:13:71:03:6d:59:c5:
         8f:6a:13:da:7e:06:53:99:e8:17:45:06:1d:d6:29:8d:43:04:
         bd:ca:a2:88:c6:ab:3e:3d:37:ae:cb:7f:30:a6:c0:3e:ca:78:
         b5:f1:14:ee:52:7f:62:19:55:0d:a9:28:71:eb:05:b8:6a:cd:
         84:60:1f:dd:1b:1a:48:5f:63:59:f5:3e:3e:2e:c1:ce:a6:60:
         7d:d4:68:c6:18:f9:c6:16:4c:62:51:e0:2e:89:88:1c:4c:3c:
         65:f6:4c:37:c3:e6:69:4b:1e:c3:59:14:68:77:da:65:bc:83:
         e4:ad:3f:68:cf:c1:59:c5:d6:d5:eb:85:a9:06:16:04:f1:ed:
         ee:59:36:bf:9b:01:26:93:f5:1c:66:04:eb:c6:de:89:06:6d:
         1e:02:6e:35:6d:ec:18:26:0b:04:56:91:df:2b:17:9e:f8:76:
         34:14:cc:d7:75:33:0f:8c:dd:ae:0b:3e:6f:08:33:40:bb:c0:
         e3:f4:90:eb:f1:5c:d5:d1:5d:7d:55:4c:ec:9f:1e:91:a6:8a:
         12:a2:3a:0b:33:e0:a6:45:aa:05:b2:ed:d8:a6:9b:f9:d9:e8:
         ef:c3:7c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:26:46 2025 by rpki-client