Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa
File:                     dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa (raw, json)
Hash identifier:          6j6CaAyWUAGjO55lokCcUnV6bB1D4bosguQdxZ43wvI=
Subject key identifier:   FE:4D:91:CA:46:A7:12:80:B6:68:D9:F4:0B:A5:61:D4:03:92:4C:B6
Certificate issuer:       /CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42
Certificate serial:       010D0C9F43285849806F191AA2DA90804B034D00
Authority key identifier: 94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        198.204.9.0/24 maxlen: 24
                          198.204.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:19:1a:a2:da:90:80:4b:03:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=f8ad23af-66f0-4e32-ad8e-386339ba4dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:97:19:43:20:18:b6:b7:fb:67:b1:84:5d:b1:
                    2d:55:59:0d:7a:4b:b5:3c:52:e7:cd:c6:f3:28:42:
                    ee:ee:0f:40:14:49:2c:74:2c:ea:8a:96:45:a6:9c:
                    74:88:d8:84:51:14:0b:6f:65:fd:20:f3:5a:6b:1a:
                    ba:4b:e3:99:29:55:ab:10:ce:f8:08:65:8f:22:c1:
                    4f:22:5a:3e:56:be:0f:a3:19:a5:82:0e:aa:63:f7:
                    54:38:ca:6b:e4:65:5c:88:d2:a7:b4:0e:a6:7c:70:
                    09:38:83:5c:67:99:a8:14:ea:85:80:d9:18:26:dc:
                    5c:df:30:f4:fd:6e:1c:74:23:3f:b1:88:48:06:74:
                    ee:56:b9:d3:4b:82:4b:76:61:f6:a2:e3:b2:68:dd:
                    61:8a:d9:3c:ae:f5:07:9f:32:3f:28:74:e9:ab:dc:
                    d2:83:57:c8:30:c9:f7:5c:b9:15:21:6a:56:c7:c2:
                    8b:09:d3:dd:4f:4a:df:93:02:2b:bf:52:83:14:f6:
                    86:ab:27:16:fb:ba:cb:c7:a6:71:83:39:4a:21:5e:
                    71:b6:4e:ad:b1:a1:c1:09:9c:2c:b0:a5:30:15:6c:
                    95:36:b2:53:73:98:15:fd:b7:ba:2b:5b:36:cb:c0:
                    20:71:7a:87:59:4c:20:52:7a:83:9e:52:fa:1f:07:
                    47:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4D:91:CA:46:A7:12:80:B6:68:D9:F4:0B:A5:61:D4:03:92:4C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl

            X509v3 Authority Key Identifier:
                keyid:94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.9.0/24
                  198.204.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:cc:9a:94:b8:9a:b7:3a:01:c5:db:81:80:63:8a:ee:31:53:
         53:cb:b4:96:bc:a0:1f:e9:3f:ed:22:bd:bd:59:75:36:c1:ff:
         ec:f8:2b:1f:f9:47:6e:a8:50:c3:43:1e:6a:ac:5a:5c:f4:de:
         32:c6:fb:6d:b8:29:cf:14:6f:30:42:96:0e:9d:63:59:34:a4:
         30:e8:68:7e:4a:3b:2c:e1:bd:b2:88:db:13:be:7e:d1:b0:99:
         7f:d3:84:c5:33:7d:ff:a3:c2:e2:71:18:9b:91:2a:5a:ac:5a:
         64:6f:f7:ee:71:7d:0c:0a:1f:40:32:a6:fd:ca:0f:53:ae:6b:
         bb:80:87:86:81:57:42:c7:ea:28:b1:48:19:53:b9:82:04:00:
         c8:26:9f:68:7c:a7:26:e4:0c:be:b4:1d:b5:9c:66:d7:e5:97:
         7b:1f:6c:52:7b:c5:e8:17:f1:ad:5e:5f:29:ed:f8:ab:4b:76:
         11:07:17:a4:62:30:96:ee:ff:a2:4b:0f:17:36:36:bf:70:d9:
         90:0e:b5:27:41:6b:8d:0b:df:aa:bf:fa:42:e6:06:f2:3b:33:
         cd:82:5e:be:d1:49:19:7f:5b:77:6a:8f:5b:bb:01:26:97:04:
         d3:06:78:84:60:07:01:48:ee:a7:ae:90:79:17:e5:25:99:e9:
         ee:ac:a3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:27 2025 by rpki-client