Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/030641f0-0c4d-36be-9742-c8311f8aac47.roa
File:                     030641f0-0c4d-36be-9742-c8311f8aac47.roa (raw, json)
Hash identifier:          G+U3/MVa2UOQN/dUDyt7Sq8wxMgK4IiOmTXy/T/CSWA=
Subject key identifier:   A4:90:64:A7:21:7C:A6:5D:DE:71:4A:C4:91:2C:2B:9E:EA:19:32:16
Certificate issuer:       /CN=ede01171-c7fd-4563-acce-6f9c23457a8f
Certificate serial:       010D0C9F4328584AADF0F834EFBA6503694F7A40
Authority key identifier: 73:74:EA:4B:7B:2F:74:0A:B2:78:AC:39:BB:05:C5:E9:A4:A7:52:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/030641f0-0c4d-36be-9742-c8311f8aac47.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     397394
IP address blocks:        204.194.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/ede01171-c7fd-4563-acce-6f9c23457a8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/ede01171-c7fd-4563-acce-6f9c23457a8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f0:f8:34:ef:ba:65:03:69:4f:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede01171-c7fd-4563-acce-6f9c23457a8f
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=d483d2a7-b72a-48db-a035-ffb6bf841e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9f:9a:91:f5:01:a9:1f:ad:87:8b:ab:61:0d:
                    7e:3b:39:f3:2c:0c:06:c2:4d:0c:84:43:e8:c8:29:
                    42:6e:20:31:b7:1b:ab:57:e1:98:d2:88:50:3e:81:
                    a3:27:66:cd:b3:85:30:be:f6:db:29:5a:49:0d:e9:
                    1e:ab:2e:e3:58:07:44:db:f9:2a:0b:ec:2a:6d:cb:
                    94:5e:95:d0:b9:3c:a9:06:cd:3e:68:64:5b:f2:9c:
                    ca:d5:8f:05:2e:fc:85:6e:aa:db:c3:a1:eb:8b:d3:
                    c3:d1:d2:d4:c1:e3:09:be:b0:09:9f:48:43:3a:79:
                    9b:86:ec:1a:61:16:28:16:69:5b:2c:db:92:e7:1a:
                    34:71:39:d2:a8:0b:d4:04:2f:11:aa:e1:0a:67:ef:
                    c6:22:9d:63:1a:a0:de:a2:0c:60:2b:78:4b:b7:e9:
                    61:97:54:8e:73:7e:55:d2:ba:ad:88:33:33:4a:bd:
                    60:5e:91:21:7d:c0:f6:58:46:aa:77:7e:62:f2:7f:
                    b3:af:e8:cb:c1:9d:76:57:89:28:b6:c1:bb:07:82:
                    68:0d:26:2d:2f:c3:54:fb:b2:2a:ca:bf:d9:74:31:
                    73:03:d7:13:74:d6:6e:75:b0:89:d2:3e:d8:ce:3e:
                    dc:fb:2f:d9:f6:ec:4d:fe:fa:15:63:24:1a:1b:42:
                    97:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:90:64:A7:21:7C:A6:5D:DE:71:4A:C4:91:2C:2B:9E:EA:19:32:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/030641f0-0c4d-36be-9742-c8311f8aac47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/ede01171-c7fd-4563-acce-6f9c23457a8f.crl

            X509v3 Authority Key Identifier:
                keyid:73:74:EA:4B:7B:2F:74:0A:B2:78:AC:39:BB:05:C5:E9:A4:A7:52:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:e7:f9:4f:ff:32:66:4f:6f:6d:c1:b6:d1:0d:c6:ab:0f:5b:
         29:67:9a:3f:aa:f3:24:32:c7:17:d3:ef:c2:fe:92:f1:f8:50:
         87:9e:ed:1e:56:6f:16:fe:1d:eb:1d:a1:14:ed:88:b5:25:70:
         bb:d4:a6:b7:d6:28:84:66:9d:88:f2:ce:83:c9:a8:0f:9a:b9:
         bd:b9:14:28:ae:ba:11:a6:da:85:05:2e:a9:15:90:60:e6:f0:
         c2:3a:39:c3:74:5b:53:0d:50:ce:69:21:84:1f:5f:17:54:8a:
         58:ad:6d:db:12:0e:33:80:53:da:43:3b:06:54:d6:56:86:0f:
         ce:ab:ef:77:eb:a2:8e:93:8a:69:59:95:80:5f:d3:46:fb:b2:
         fd:6d:b7:1b:6d:d5:a3:d5:e0:3c:48:d8:15:40:9a:b1:66:52:
         7d:c0:2f:12:8f:ca:bc:aa:07:00:c9:f1:ba:6e:ab:e9:55:39:
         4f:74:f4:38:89:08:5f:73:1c:a3:74:78:e8:a9:55:aa:48:f3:
         73:10:f9:4f:79:fc:ab:79:e6:b7:90:d3:5b:9a:4f:75:05:9a:
         f1:29:eb:99:e2:47:9c:83:63:74:d0:b9:ce:5d:c9:ae:ef:85:
         f4:ee:58:62:cd:49:ca:4a:ad:59:e3:8f:f0:5a:c9:b4:4d:31:
         76:50:1c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:09:21 2025 by rpki-client