Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/6ca0719b-0f97-39cc-88ec-f8763d684de5.roa
File:                     6ca0719b-0f97-39cc-88ec-f8763d684de5.roa (raw, json)
Hash identifier:          W/gWNl8J50+Mb0MhA6B9NS3bte9atozPtaXwLINZCsk=
Subject key identifier:   FE:1B:C2:61:4A:C5:78:3E:E2:33:FD:EE:57:7F:E4:B1:26:82:01:81
Certificate issuer:       /CN=a40fbee7-5dae-4a5d-a79b-cf60cd73e49d
Certificate serial:       010D0C9F4328584A0D6A98E59D63624E1F11ED80
Authority key identifier: 72:AE:D6:7B:2F:27:2D:67:12:6E:C5:B1:00:D2:F8:25:08:E0:00:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/6ca0719b-0f97-39cc-88ec-f8763d684de5.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        199.247.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:98:e5:9d:63:62:4e:1f:11:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40fbee7-5dae-4a5d-a79b-cf60cd73e49d
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=1f4b6d18-4b43-4553-a44e-ede1c360d2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:f0:21:de:7e:8c:e9:d2:b0:7e:ae:2a:27:
                    82:74:7f:36:12:0d:86:69:6f:08:d5:f4:07:ed:7b:
                    ca:83:df:d6:b2:eb:f4:66:2e:8a:7b:c3:70:06:d1:
                    43:d0:e4:e6:2b:80:f5:15:a4:67:d0:c5:f6:82:a3:
                    f7:30:d1:49:fb:8a:a6:cb:b8:31:64:2e:3d:8b:1f:
                    b8:02:69:15:a3:c5:c4:f2:88:b4:58:0f:4e:10:71:
                    7a:4e:d8:0a:18:30:70:4e:83:8b:e5:18:87:10:46:
                    ef:2b:10:90:b0:21:15:48:e8:5e:e3:d3:20:7f:63:
                    79:11:bb:d7:3a:b1:de:aa:ee:d5:bd:9e:2a:30:f8:
                    10:de:86:17:b0:89:6b:74:85:8b:67:c5:9f:5d:94:
                    82:54:ad:ea:9e:3a:c7:5c:2c:dd:3f:f7:a3:d8:f4:
                    b1:3b:48:fd:67:89:95:5f:72:0b:6f:7e:3a:98:88:
                    d9:04:0c:c2:b5:ef:29:3e:3d:36:b3:c1:5d:a7:56:
                    d0:a3:81:5f:3e:9d:22:b4:9a:87:e1:40:8a:5f:8e:
                    30:19:1a:92:85:a3:de:9b:35:9b:5d:55:1a:4a:22:
                    26:81:ed:56:eb:2e:7c:04:f9:50:1a:38:f1:95:6b:
                    2c:8e:7a:0d:b6:e3:21:bb:01:2b:b3:06:a2:90:19:
                    56:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1B:C2:61:4A:C5:78:3E:E2:33:FD:EE:57:7F:E4:B1:26:82:01:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/6ca0719b-0f97-39cc-88ec-f8763d684de5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.crl

            X509v3 Authority Key Identifier:
                keyid:72:AE:D6:7B:2F:27:2D:67:12:6E:C5:B1:00:D2:F8:25:08:E0:00:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.247.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:54:43:dc:23:51:3e:d3:48:dd:96:eb:cd:cf:b1:30:c9:56:
         f6:df:22:85:77:67:95:4c:d5:25:db:90:95:e9:f0:c0:64:35:
         1f:3e:4c:5c:7e:2f:d2:a6:da:7d:c4:d5:a8:66:2b:e8:8d:71:
         91:f9:25:82:3d:38:53:49:88:6f:f0:ac:f8:97:68:c7:47:00:
         cd:f6:d0:3a:d5:ef:dd:31:f4:91:3d:c9:05:97:21:31:11:c4:
         20:61:c0:4c:73:12:8e:e5:08:58:a5:2a:82:9f:85:78:72:1e:
         71:fe:41:13:fa:ff:a0:e4:08:f6:11:5d:88:e4:aa:6a:78:b0:
         fe:7b:0b:40:27:bb:78:50:48:58:01:e0:80:ed:aa:33:0b:5b:
         5b:4c:aa:2a:a1:b7:6b:67:0b:4d:0a:5a:28:22:a0:d4:3f:e7:
         ab:dd:43:ea:60:6f:1a:ba:69:c0:78:b8:9e:e9:df:dc:ba:ac:
         56:0c:1e:a9:6a:75:17:76:79:3a:9e:73:61:af:ed:31:40:df:
         99:b0:4c:b0:3e:2c:5a:8b:66:ef:58:e4:95:88:1f:a4:75:9c:
         e3:75:54:87:ab:04:2a:83:e8:44:01:84:64:69:ef:45:52:f4:
         b5:e8:cb:60:2a:eb:37:a0:79:56:bd:37:35:6e:49:ef:5b:f2:
         c2:36:ab:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:28:19 2025 by rpki-client