Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/55cb20ca-a3eb-341a-ab7b-c818a3ae5a49.roa
File:                     55cb20ca-a3eb-341a-ab7b-c818a3ae5a49.roa (raw, json)
Hash identifier:          AAOTKsUcI6dQ61Ml/+8P9D+pWUhHS2evHyT/XIga8RA=
Subject key identifier:   1C:EC:29:46:92:5E:23:C8:9A:02:E2:F4:C3:1C:9F:E0:43:5D:98:A9
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F43285849FF7512FE91CC365C62F03900
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/55cb20ca-a3eb-341a-ab7b-c818a3ae5a49.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     400238
IP address blocks:        204.8.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:12:fe:91:cc:36:5c:62:f0:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=54c5ea7d-f572-4082-a45a-b2d70aa592a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:72:cf:53:ed:f1:9f:ad:44:24:16:3a:49:21:
                    19:ba:90:f8:04:f8:fa:bc:f0:08:56:8c:c2:6a:80:
                    ee:21:43:57:a1:38:40:40:22:a8:f7:e0:26:a5:12:
                    66:8c:63:07:93:6e:2b:b8:82:9a:bf:60:9d:f3:ca:
                    7b:f2:65:2b:4b:b8:71:a8:54:3d:7b:7f:e9:22:41:
                    f0:61:ac:40:8d:5d:fd:7e:79:79:4a:2d:0f:74:04:
                    2c:ec:e5:2b:d6:8f:df:a5:01:dd:80:1b:70:59:45:
                    87:8d:45:ed:ba:ac:5f:aa:43:1b:06:04:f6:7a:9f:
                    8c:57:c2:e0:b3:e6:3c:77:d8:19:82:bd:4b:a2:24:
                    25:8c:dc:f3:93:b1:b1:0d:6b:da:da:47:ed:9e:cd:
                    52:cf:3e:22:ad:5f:c9:8e:76:18:6a:58:00:3c:fc:
                    0d:b9:04:a2:01:d0:bb:97:92:3e:18:6d:19:92:e4:
                    39:bd:35:73:03:31:4f:ab:84:f3:dc:fb:98:41:af:
                    6c:2f:80:cb:8b:d1:b0:39:b2:e0:06:0d:4c:4c:77:
                    e4:61:80:7a:c9:d7:27:55:9e:a9:ff:6f:c9:d9:3a:
                    e3:db:fe:d1:62:e4:30:2b:86:96:3a:83:48:8b:6f:
                    1b:be:97:bb:c4:ac:5e:f8:47:95:30:1f:c1:0a:dc:
                    16:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EC:29:46:92:5E:23:C8:9A:02:E2:F4:C3:1C:9F:E0:43:5D:98:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/55cb20ca-a3eb-341a-ab7b-c818a3ae5a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:29:08:97:9c:01:3c:b1:dc:ce:89:36:7d:36:c7:dd:ac:16:
         ae:d3:3e:92:67:6b:6b:71:68:40:f8:93:97:33:bf:99:c2:32:
         22:a8:e4:6e:60:20:75:87:53:33:66:f0:a7:74:48:41:40:34:
         35:76:b1:aa:e4:db:7d:40:d8:d5:da:4f:8a:6f:fc:c4:5e:0e:
         e5:c8:a5:35:07:9d:f3:f2:92:4e:8d:be:d9:93:20:2c:59:90:
         27:3e:10:d9:62:83:8a:3b:64:6d:9c:3a:0b:0d:15:7f:0d:78:
         3d:bf:ca:93:70:00:3e:25:a0:fd:23:22:49:86:b2:79:a6:0b:
         23:a7:89:b2:52:68:56:c5:38:f3:df:4b:03:2b:0d:45:a9:ee:
         c0:44:cd:54:cb:77:01:05:60:6f:47:53:3a:47:8e:19:37:ce:
         a1:fa:f3:b9:5d:3e:b4:ea:b9:88:ef:68:48:fa:58:53:16:67:
         58:91:0a:df:bc:ea:6a:9b:64:47:38:4f:4d:72:bc:f5:d8:2f:
         b6:8b:0d:af:8b:c6:bf:2e:ed:41:93:5e:ed:af:7b:bd:17:c7:
         7f:01:77:a0:c3:d3:18:5e:d2:a7:fb:61:d6:dd:bf:35:42:93:
         43:14:ec:a5:1b:d2:b0:9c:13:28:b5:6e:02:23:d5:7b:85:9c:
         78:37:01:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:09:20 2025 by rpki-client