Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/4a053d94-f778-3cf3-98a9-c6ea0a32091f.roa
File:                     4a053d94-f778-3cf3-98a9-c6ea0a32091f.roa (raw, json)
Hash identifier:          QFU+j0nW0IU5wlh0Iytt0ji2FwfgipYCT+RiqVxsNy0=
Subject key identifier:   32:32:14:19:E2:33:E6:00:9E:2A:58:C6:A2:B7:D0:02:DE:00:B1:DB
Certificate issuer:       /CN=2a093e3f-1d9b-4e68-9317-1de77daf9698
Certificate serial:       010D0C9F4328584A29556CF8A73638285FB43B00
Authority key identifier: C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/4a053d94-f778-3cf3-98a9-c6ea0a32091f.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     174
IP address blocks:        204.114.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:6c:f8:a7:36:38:28:5f:b4:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a093e3f-1d9b-4e68-9317-1de77daf9698
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=0fce4621-74e9-4394-988a-117c0f64c27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:b1:6a:21:4c:bf:4e:57:06:9b:92:35:55:
                    e6:a9:31:cf:5e:4b:6f:21:d1:71:ae:66:10:40:25:
                    98:f2:7b:a7:0d:cf:76:a8:f4:17:d5:0b:47:97:7c:
                    93:60:eb:e9:2b:3e:6c:e0:84:94:46:de:74:a5:d2:
                    46:74:66:48:d7:7d:0b:88:a7:b4:61:a6:93:28:ff:
                    ce:20:5c:8f:ce:1d:1b:9f:64:c0:87:31:8e:e7:ae:
                    fd:1d:fa:0d:7c:47:8b:18:bf:5c:59:37:56:97:16:
                    39:9c:8b:65:05:9b:87:68:44:97:81:cc:00:c8:56:
                    74:00:b9:5c:ca:c7:1b:e7:b3:d5:93:b8:a4:7c:af:
                    81:8e:c1:16:77:33:c8:2e:bc:67:da:7a:d9:85:d8:
                    97:8f:4c:0b:bd:3b:e4:ba:74:e8:0d:80:fc:6e:3d:
                    1b:76:44:52:06:5f:15:cb:86:5f:09:00:cf:80:b2:
                    95:8d:e3:4b:b2:91:04:6f:ad:7d:64:2d:46:a7:3e:
                    2d:02:fe:77:86:7e:8a:5d:17:b5:cd:00:06:95:90:
                    26:4f:c8:20:9c:28:0e:e0:8e:2b:bc:8c:ae:01:21:
                    66:17:30:ca:c6:b3:58:ea:29:58:f1:d1:41:3c:09:
                    ff:4c:c8:24:51:be:c7:05:c0:1b:60:7f:8f:69:2d:
                    a8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:32:14:19:E2:33:E6:00:9E:2A:58:C6:A2:B7:D0:02:DE:00:B1:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/4a053d94-f778-3cf3-98a9-c6ea0a32091f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.crl

            X509v3 Authority Key Identifier:
                keyid:C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.114.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e5:c1:71:58:5b:cb:0a:d0:56:6d:04:fb:09:be:ec:f4:bb:
         b1:41:19:d8:3d:c0:cd:ad:a1:82:b5:2c:e2:ad:8d:e0:a0:5d:
         35:af:4c:28:54:fb:b9:7f:cb:fa:7b:42:d9:8a:2b:7e:3e:26:
         37:29:c6:d7:ac:d3:69:cc:b1:66:2a:ba:a4:c9:9f:d3:2f:3b:
         e1:9a:7b:4b:30:8d:0b:1f:71:66:57:51:6d:d5:f5:b1:70:76:
         e2:5d:ec:07:95:7a:b3:f4:ac:ef:2c:6d:93:4e:59:b9:d9:f4:
         09:af:70:8f:31:83:60:f1:88:70:84:d2:2a:23:ab:d8:e6:96:
         88:4c:1a:d7:f0:63:16:ed:ec:b3:4d:aa:c5:9c:70:d0:9d:26:
         92:0d:50:96:00:d3:54:48:3f:c3:6c:da:50:f3:b7:aa:12:d5:
         b8:16:a3:ae:8f:4d:a1:9d:66:70:b5:61:c1:a0:ed:ac:0f:4c:
         65:a5:0c:ad:0c:03:7b:28:cd:a4:54:1e:e8:50:8b:88:4a:1a:
         a8:3b:68:52:24:c8:8d:8f:5d:60:20:e6:18:8e:d0:6b:1f:c1:
         ee:b6:12:54:92:95:f7:6b:55:53:87:c1:73:4c:76:cb:bd:aa:
         e6:b7:fc:67:6e:25:77:09:ef:e8:7f:de:56:19:bd:3e:a6:1f:
         2d:14:c3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:04:11 2025 by rpki-client