Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/679482f3-81c1-31cd-a4db-6bedbb6072a4.roa
File:                     679482f3-81c1-31cd-a4db-6bedbb6072a4.roa (raw, json)
Hash identifier:          FZc/ARfG6uWyNPCtm1PYlN3AuTGdxy747QRi+Ukkt6M=
Subject key identifier:   52:4C:7C:01:C5:74:B8:22:48:03:86:6B:74:5E:23:E1:DE:B2:A2:87
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F4328584AADF121267CDF31D2F8BADF00
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/679482f3-81c1-31cd-a4db-6bedbb6072a4.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     10317
IP address blocks:        204.155.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:21:26:7c:df:31:d2:f8:ba:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=ce6b38ce-c551-4c94-b571-0ab4cb9aa55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b5:7c:0d:b7:82:c3:8a:d8:09:1b:99:81:c1:
                    a6:7b:e7:bc:89:d0:1a:f4:de:33:9a:70:0f:2f:d9:
                    02:64:61:4b:13:3f:d2:0f:ea:28:dd:e4:46:0c:86:
                    8d:ab:73:44:53:12:db:c9:b3:e7:eb:12:00:02:2d:
                    00:d3:d6:4e:fe:d1:02:1b:92:de:bc:91:eb:f0:1c:
                    d3:87:85:87:b7:e9:2d:96:f1:bd:df:71:16:7d:85:
                    87:73:e9:4a:50:95:71:51:e7:50:f7:0a:2c:83:a2:
                    e4:83:2d:a0:06:59:64:08:7e:02:d4:90:25:c8:52:
                    f2:5e:5d:50:d9:5b:8c:09:73:9a:fc:eb:0d:1c:6a:
                    cc:c0:01:b9:22:1c:51:a6:99:fc:08:61:64:01:04:
                    d6:08:3c:7b:54:26:d4:3a:92:51:16:72:46:05:a7:
                    6c:52:cc:1d:f7:cd:61:6d:a8:45:dd:d0:b5:27:cb:
                    43:50:f0:88:cd:84:88:d6:d9:a2:a8:f4:d8:b8:d6:
                    b1:f4:ec:79:59:57:3c:34:4c:1e:30:cd:c6:f6:85:
                    10:bc:98:d1:a1:6e:fd:40:dd:3f:7d:1d:ac:ec:48:
                    60:e4:8b:97:30:81:2f:f5:e0:d8:63:d8:86:7c:8b:
                    3c:0a:70:84:ee:d7:f0:60:c1:b1:e0:da:0c:2d:8c:
                    11:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4C:7C:01:C5:74:B8:22:48:03:86:6B:74:5E:23:E1:DE:B2:A2:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/679482f3-81c1-31cd-a4db-6bedbb6072a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:47:b1:87:91:62:d2:82:46:35:78:20:32:62:bf:76:10:ad:
         c8:6a:64:6e:5b:a5:54:28:60:ff:ef:c2:46:e5:27:a8:58:51:
         7f:62:9f:1e:c1:3e:03:0d:4a:ec:43:ff:b1:41:d6:55:4b:84:
         a6:20:5e:55:a9:e5:15:49:13:6c:07:6e:be:2e:6a:b5:a2:19:
         13:20:fb:34:b5:54:d8:74:ba:4e:6c:c5:cf:09:80:a8:8a:0c:
         3b:1f:b0:8c:da:ba:1f:6b:ca:1e:f7:d3:3a:71:71:4d:b2:2b:
         6a:31:72:57:ca:45:22:da:b4:04:c2:f5:fa:18:6f:07:e0:47:
         ef:9f:da:21:ff:1e:97:96:c4:66:91:12:7b:18:72:88:44:78:
         46:9d:fe:97:23:e3:59:c1:04:23:51:bb:92:f2:f2:b3:8e:c5:
         ec:47:fb:83:c8:48:aa:01:80:65:e0:23:81:1e:29:10:3a:a2:
         37:56:db:62:0f:2b:de:ad:42:2a:66:71:21:ac:15:89:4a:a7:
         de:70:f3:00:1f:6c:18:24:0b:f9:53:9d:59:cf:ee:e7:38:55:
         7e:85:06:9a:2e:24:a8:ae:b4:bd:bf:55:d3:e6:87:b2:f4:ab:
         c1:30:21:cf:68:ee:bb:fc:a2:fd:be:59:cd:cb:c8:33:46:fa:
         24:2c:9b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:03:53 2025 by rpki-client