Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/a3dab3a9-1c33-37ac-9b37-1a214389e6da.roa
File:                     a3dab3a9-1c33-37ac-9b37-1a214389e6da.roa (raw, json)
Hash identifier:          EdAegJSTK6Q5ayMFIJe39qDZcL75Jd0gW6q02EgS5OM=
Subject key identifier:   4D:37:E3:D6:05:03:65:F0:C2:85:A1:94:6D:2B:95:81:97:90:6E:8E
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F4328584A268AC5A63D529DA74FE53CE0
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/a3dab3a9-1c33-37ac-9b37-1a214389e6da.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        204.155.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c5:a6:3d:52:9d:a7:4f:e5:3c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=b1f613f4-8013-47fc-bbe6-651b22b37874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:5f:89:6d:ac:69:0c:5f:d2:91:71:b1:61:
                    90:94:a5:01:d8:d5:ad:ef:0c:aa:7b:d9:a7:ce:0e:
                    57:2e:30:c8:13:f3:7e:9b:38:e6:c7:13:4d:e1:14:
                    18:a0:97:33:3f:ae:95:fe:c0:7d:ca:d5:12:2b:ed:
                    d4:57:cc:25:aa:74:9d:b9:f7:9a:1a:ed:ce:80:c2:
                    5c:f0:ee:07:0a:77:10:51:7e:23:03:37:24:07:b0:
                    61:d5:ca:fa:6a:23:c7:d0:4b:9d:67:53:c1:ab:31:
                    88:c0:40:18:f5:6e:52:62:36:76:64:f9:e2:6b:a7:
                    d7:31:5d:af:f4:9a:fa:55:71:48:20:e8:a3:43:29:
                    36:a0:98:1c:5a:c8:08:d5:ba:10:c0:cd:a7:42:bd:
                    6c:59:12:ec:3a:5f:50:23:58:d6:33:3f:c3:a4:a3:
                    af:e9:ee:d0:8f:7f:51:3d:c4:5a:90:d0:51:98:dc:
                    b6:e2:5f:ff:a0:8f:89:54:c2:fa:59:6e:ac:9a:bb:
                    fe:de:e6:d5:ff:62:18:f0:99:1d:01:51:04:59:e5:
                    ac:05:4e:eb:55:7e:6a:ac:36:45:e4:b5:2a:25:cd:
                    06:48:08:10:ef:ef:0f:33:a5:f5:d1:26:4b:45:7e:
                    3a:e0:a6:0b:b3:d4:fd:b4:91:4a:38:05:f3:8f:8d:
                    1d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:37:E3:D6:05:03:65:F0:C2:85:A1:94:6D:2B:95:81:97:90:6E:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/a3dab3a9-1c33-37ac-9b37-1a214389e6da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ba:3d:00:47:46:e2:55:55:50:8d:07:39:0b:aa:9d:69:bc:
         7b:4d:6f:39:2e:31:16:ef:2d:b3:3e:73:1c:68:87:48:56:2f:
         89:27:48:62:ea:07:a7:fc:44:cd:bc:6f:80:7a:4b:1c:20:6e:
         d6:db:58:40:81:42:68:88:68:a9:78:22:04:8a:4e:d2:c2:e9:
         02:b0:61:15:51:6e:e8:9e:cc:9a:8e:bd:e8:a7:10:59:2b:4f:
         c2:a5:0e:f3:e3:3c:52:4e:74:d6:53:d7:cc:b9:b4:95:97:0b:
         ec:85:94:29:4b:e0:8a:cb:fb:d7:33:43:d9:85:01:9c:c4:6a:
         38:6d:3b:e0:c6:af:92:87:8d:a4:0f:23:1d:f8:ec:b2:4d:7f:
         ea:b2:5d:43:f2:ee:92:f6:57:c3:2a:62:04:03:e5:0a:c9:eb:
         31:65:7e:82:c8:1b:a1:8a:a2:6b:27:ba:5d:25:ff:e4:bb:38:
         c2:56:3a:42:66:b4:17:34:c8:0b:40:84:ee:a9:b3:d9:8c:b8:
         50:4c:e2:4e:55:c5:cb:ac:2a:d1:10:fa:74:dc:5f:77:f8:78:
         de:67:9e:01:2a:4b:0a:4f:8f:21:ba:49:d3:40:b7:0c:5e:af:
         97:7a:d9:e1:f2:1d:24:22:a4:b1:a9:8c:f7:42:fb:cf:37:f5:
         2a:03:ac:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:29:22 2025 by rpki-client