Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/5fe444f0-f1ec-387e-8b87-a12eb0c1815e.roa
File:                     5fe444f0-f1ec-387e-8b87-a12eb0c1815e.roa (raw, json)
Hash identifier:          Xnmn+Hk3TZL1MWk6Ca5f70izlSv+ufL5ghIuYpBA8uE=
Subject key identifier:   87:F0:32:24:A8:3B:DD:82:F4:34:46:06:5A:42:B3:BD:42:73:96:1C
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F4328584A14655F88A3FF70B3EAC41440
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/5fe444f0-f1ec-387e-8b87-a12eb0c1815e.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     398493
IP address blocks:        204.197.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:5f:88:a3:ff:70:b3:ea:c4:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=c58c3c24-0b9a-419b-bd7f-e5b041ced909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6e:6c:c9:61:e2:53:4e:ab:bc:78:94:04:b8:
                    23:52:c5:02:9d:f8:5a:5f:48:5f:32:c3:63:dd:3e:
                    45:0a:75:32:df:b2:35:af:9f:e5:b1:b3:65:c2:9b:
                    a1:ed:ec:bc:74:f4:de:03:e5:13:24:9d:5a:c0:eb:
                    2f:4d:ae:fe:5e:f3:9e:70:49:61:49:dc:85:69:6b:
                    34:a0:31:ee:58:b5:84:90:dd:87:3f:78:94:46:1e:
                    38:04:85:d6:34:e5:ca:7b:95:64:3f:9d:fd:d0:b6:
                    bf:bd:0c:90:08:0b:70:e9:4a:06:5e:22:fa:b3:db:
                    da:ff:48:6f:20:30:cc:23:ba:2d:a1:b7:47:78:1a:
                    33:79:20:72:1d:7f:15:93:9e:2a:0e:8e:43:5e:64:
                    94:28:7a:a4:44:41:cd:48:bc:b3:91:d9:dc:f2:a6:
                    37:6b:14:34:31:d0:4f:5a:83:53:04:e3:b4:6a:9e:
                    75:8b:a6:73:cd:19:e7:3f:8e:21:22:ef:4a:71:25:
                    36:34:60:3f:97:0b:1e:31:f4:a7:4d:17:bc:a6:04:
                    a5:dc:2f:80:06:87:51:c7:4b:95:c7:03:c9:95:d1:
                    b4:e8:3a:e3:96:39:ad:b4:e4:e6:5e:d3:19:60:0f:
                    0b:c1:fd:c5:ce:c2:c8:9a:a1:d7:60:09:fb:7e:2a:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F0:32:24:A8:3B:DD:82:F4:34:46:06:5A:42:B3:BD:42:73:96:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/5fe444f0-f1ec-387e-8b87-a12eb0c1815e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.197.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:de:86:0e:91:95:45:cf:f3:a7:39:12:32:0d:00:49:62:76:
         be:27:12:0f:62:e5:47:0e:24:b2:d8:3c:16:22:26:06:0b:5a:
         02:19:69:d9:de:c6:57:7e:63:86:f2:da:42:98:af:44:5a:29:
         c0:dd:3b:41:ef:50:f6:44:29:20:14:96:74:04:93:07:e5:6b:
         b1:8b:cc:53:8a:6e:56:78:83:af:11:21:2b:a9:e7:99:71:1e:
         04:70:e6:81:9d:cd:89:6f:c5:bd:e3:39:4f:ba:39:55:ab:ef:
         3a:83:7a:67:d1:91:a3:5d:f6:79:4f:3e:e0:d4:2e:e9:61:e0:
         48:6b:6e:65:81:ed:44:ba:09:af:b7:1f:90:b8:11:55:0f:c3:
         3c:18:04:6c:1a:57:a8:23:73:f5:73:b4:87:ce:52:7f:d2:d0:
         cb:b9:96:90:4e:0d:1a:ae:1d:de:42:c3:11:b0:1d:ee:44:be:
         14:27:d8:09:b5:25:7f:dc:bb:5b:37:da:ba:a6:59:74:3f:28:
         f7:70:dd:1e:e5:68:de:17:0d:bb:68:71:ac:bb:ad:7f:5d:9d:
         bc:18:38:c0:3a:ba:12:c5:7a:30:cb:c8:83:e0:53:8d:22:bf:
         57:ad:8e:7e:78:91:3d:d8:65:9f:57:83:ee:49:c0:27:25:7b:
         42:0f:a3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:36:35 2025 by rpki-client