Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/03f8d84d-032e-3202-b530-fb8de57269ad.roa
File:                     03f8d84d-032e-3202-b530-fb8de57269ad.roa (raw, json)
Hash identifier:          Ms8FcIPKLN3nwWjXdtHONx9Icy8//YJ4r/VnivR2fSI=
Subject key identifier:   E9:DD:67:19:AC:B5:11:67:3B:B8:97:28:CD:D6:71:1C:F6:B9:70:C8
Certificate issuer:       /CN=83451658-cf40-47b6-b4dc-03c0565c4a64
Certificate serial:       010D0C9F432858498769B158CA0E03D84206A240
Authority key identifier: 2D:19:59:E8:C9:56:1B:32:DE:A5:D0:0C:BA:E2:09:A2:CD:24:F3:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/03f8d84d-032e-3202-b530-fb8de57269ad.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396982
IP address blocks:        204.44.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/83451658-cf40-47b6-b4dc-03c0565c4a64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/83451658-cf40-47b6-b4dc-03c0565c4a64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:b1:58:ca:0e:03:d8:42:06:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83451658-cf40-47b6-b4dc-03c0565c4a64
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=0b67ce73-80ed-4428-b6c5-830a0fc8c7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:eb:8e:df:f5:da:e9:32:2e:7a:35:92:e4:
                    41:08:b2:fd:64:63:a8:59:ed:77:65:33:fa:31:f8:
                    a3:4f:b9:63:e9:21:a9:4f:31:1d:1c:d2:f1:7f:dd:
                    9a:6f:ec:3e:a5:e2:78:ae:13:70:3c:24:8c:05:f5:
                    74:7e:44:50:cb:58:ab:bf:c4:82:a3:ac:bb:53:6f:
                    ff:4d:4d:e7:31:3b:d0:50:58:5a:bc:89:9b:92:e8:
                    bc:a7:95:b5:8a:24:90:54:58:44:23:dd:0f:cb:e2:
                    2c:73:3b:47:7c:a7:53:ba:c5:56:3c:af:36:72:a8:
                    0d:7a:69:24:4d:76:f7:8f:65:e8:76:a2:ba:39:19:
                    3e:14:87:9b:a1:ff:16:1a:a7:97:83:20:24:59:0a:
                    9a:cc:90:a8:02:e5:38:65:60:2b:ba:18:57:b9:75:
                    6b:7d:72:d3:47:c8:2f:bc:b2:71:f4:30:71:41:2d:
                    2c:f2:4c:25:73:ed:1b:9c:4b:d9:29:67:ea:d2:96:
                    c9:98:44:57:81:11:ba:0c:4f:af:1f:8e:1c:25:90:
                    06:38:0c:dd:7a:75:7c:31:66:ce:e2:a7:ae:4a:e1:
                    ec:d3:3a:32:71:4b:eb:56:05:ee:23:b4:7b:7a:8d:
                    80:ff:d3:39:33:e6:f4:40:91:19:e5:d4:0f:69:9f:
                    85:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DD:67:19:AC:B5:11:67:3B:B8:97:28:CD:D6:71:1C:F6:B9:70:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/03f8d84d-032e-3202-b530-fb8de57269ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/83451658-cf40-47b6-b4dc-03c0565c4a64.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:59:E8:C9:56:1B:32:DE:A5:D0:0C:BA:E2:09:A2:CD:24:F3:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.44.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:fe:bf:28:1e:9a:6f:aa:59:dc:35:67:0f:4e:6b:cc:e2:8f:
         57:97:90:ef:7d:da:66:d1:7c:41:21:f9:68:15:93:34:3f:de:
         b1:f2:2d:be:9c:e1:9b:78:1e:d6:9f:6e:01:44:b0:10:64:33:
         93:40:8d:d9:f6:7d:1f:71:7e:79:92:5a:b5:e2:c1:62:d7:a5:
         c7:9c:2b:8a:10:35:e2:bc:29:ff:1e:65:b6:98:d6:27:ae:f4:
         ab:0f:5e:f0:05:5d:62:2a:c3:c4:af:1f:9d:9a:83:ac:dc:7d:
         db:ad:8a:28:dd:e3:3f:f5:30:3a:a1:b2:1a:f7:39:96:3d:2d:
         45:99:6b:6d:a2:39:d3:7e:6e:a3:68:c2:19:c8:80:ef:2e:af:
         2c:05:30:9d:7e:76:b9:30:1f:2b:c4:a7:59:54:59:0e:e4:e0:
         51:e1:19:a8:5b:d1:3a:98:ee:aa:bc:ac:e5:e4:7c:3b:15:c0:
         31:4e:19:05:8e:01:9c:2a:ad:1a:08:79:a9:2c:bc:3c:00:04:
         df:2d:4e:56:b2:76:eb:ab:f9:22:84:ff:36:dc:7a:ad:da:3a:
         2f:a5:d3:52:13:4d:92:a6:f9:26:be:9f:de:0d:95:6f:81:e0:
         70:09:d8:f5:c2:d2:26:b4:2a:18:11:b4:dd:97:c3:16:2d:42:
         17:fd:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:54:36 2025 by rpki-client