Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/34a7eeea-8030-32eb-bd36-cafa44a1e44b.roa
File:                     34a7eeea-8030-32eb-bd36-cafa44a1e44b.roa (raw, json)
Hash identifier:          Wn1DlFkBK6J3feoOkOrUGyJJx7ZcmidX/02jW3qwPBE=
Subject key identifier:   7B:ED:07:54:C2:1B:08:43:B7:E1:7E:55:EE:FA:F5:13:BB:43:81:03
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F43285849E38A39AE5E0DD7C0A8075B80
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/34a7eeea-8030-32eb-bd36-cafa44a1e44b.roa
Signing time:             Sun 18 May 2025 01:00:47 +0000
ROA not before:           Sun 18 May 2025 01:00:47 +0000
ROA not after:            Sat 16 Aug 2025 01:00:47 +0000
asID:                     3257
IP address blocks:        204.9.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e3:8a:39:ae:5e:0d:d7:c0:a8:07:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: May 18 01:00:47 2025 GMT
            Not After : Aug 16 01:00:47 2025 GMT
        Subject: CN=4ee99263-b5e8-4662-a6ca-295e6f2644e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:d9:8d:f7:d4:9d:16:2f:ea:b9:47:78:39:
                    36:33:52:50:51:4e:73:8e:6f:83:2a:e9:98:aa:d4:
                    77:2e:2d:ef:f0:f5:20:9d:ff:c3:90:13:8d:c1:b4:
                    81:53:07:24:c5:59:58:66:1a:60:36:66:69:3e:8e:
                    a2:d0:42:f7:0b:d9:f7:0a:c7:33:d5:ac:ba:c5:1c:
                    39:2e:a6:c3:f0:86:45:bc:0d:ee:fc:1a:b4:5e:ff:
                    68:0d:a4:15:6f:34:cb:e5:c9:3c:cf:2a:2a:80:85:
                    bb:3d:6b:3e:c8:5d:94:04:5f:d5:04:9a:89:74:57:
                    c5:d1:a6:99:0b:c9:69:fb:57:71:9c:23:e2:97:59:
                    c1:28:18:ea:6a:d6:da:35:d2:2c:54:46:f0:62:da:
                    b1:9f:47:c6:2c:3d:03:c2:de:29:91:4c:7e:ea:7a:
                    b2:02:10:dd:27:9a:c9:9d:67:23:cd:4e:19:82:a7:
                    ab:79:12:4a:3c:c1:2f:c2:82:c6:db:56:de:37:5c:
                    94:c0:e2:5f:e7:62:5c:36:f3:ae:7e:5c:48:b4:dd:
                    f3:00:30:44:22:1c:9c:9b:a6:f0:86:11:c5:ad:9f:
                    17:43:e3:c5:05:cd:7e:bc:1c:b1:5c:19:30:25:f7:
                    d6:c1:e2:02:a5:24:2b:fe:65:04:9f:96:cf:9a:e0:
                    c3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:ED:07:54:C2:1B:08:43:B7:E1:7E:55:EE:FA:F5:13:BB:43:81:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/34a7eeea-8030-32eb-bd36-cafa44a1e44b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ec:bf:62:c1:ea:99:a8:95:46:ee:11:31:5f:fb:e5:c1:6e:
         4c:7d:f4:a0:ad:a5:99:a8:c1:1c:f0:7a:2a:8f:68:c2:80:2c:
         ff:e5:47:78:c4:35:b3:4b:25:d6:a2:e0:6b:67:6e:03:f3:3f:
         3b:9f:41:2e:67:de:fe:c5:e5:7c:c3:3e:1f:99:3f:d7:c4:e8:
         5e:75:76:d5:f1:32:91:e3:89:38:19:b2:a0:2d:74:f2:2d:60:
         d5:3e:07:94:09:fa:a7:17:3e:a0:e4:8d:24:2c:ad:3c:51:97:
         e1:e1:d3:4a:f7:8b:b1:06:53:43:78:59:b9:62:fc:ad:ae:8d:
         e2:a3:db:47:d0:67:95:3c:ec:5b:6f:22:e0:0a:0b:0a:32:cf:
         09:d0:9f:87:ab:41:d8:94:7c:ff:de:1c:c6:5c:66:ee:4d:22:
         ce:63:ca:f8:0e:40:b7:8c:17:51:2f:45:b6:ee:85:6a:e0:d2:
         80:06:01:68:19:85:e1:25:a7:c8:41:66:95:a9:ef:d7:58:f8:
         85:a6:4a:c5:48:78:76:7f:ff:68:19:43:67:c3:dd:b2:27:fd:
         0f:ea:fb:be:97:5d:06:e5:9c:7a:f8:c3:6a:d1:93:50:14:e1:
         4e:ea:c1:76:c3:3f:37:5a:1b:12:5c:0c:89:34:2b:de:dd:08:
         31:c7:c7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:54:04 2025 by rpki-client