Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/dfc43987-e52e-30aa-857f-3bd6ef64ddb2.roa
File:                     dfc43987-e52e-30aa-857f-3bd6ef64ddb2.roa (raw, json)
Hash identifier:          KQxDRY41npuIH6XlF2otUUlN8v7yMXJqa6jF44EJxWY=
Subject key identifier:   7B:F5:4B:BB:B7:CF:CC:5E:D4:24:AE:B6:71:6D:1F:56:53:6E:46:21
Certificate issuer:       /CN=ce660bcc-5f06-4302-bd04-76a6aff8b40c
Certificate serial:       010D0C9F4328584A94D0CCFCC9F2B860A01EF400
Authority key identifier: DA:75:7B:A4:71:96:8C:F8:F5:CD:04:CC:3F:B8:1A:A5:FE:17:DD:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/dfc43987-e52e-30aa-857f-3bd6ef64ddb2.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     54223
IP address blocks:        204.145.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:cc:fc:c9:f2:b8:60:a0:1e:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce660bcc-5f06-4302-bd04-76a6aff8b40c
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=37db7024-1c86-4138-8d70-3c85bb79d332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:07:cd:ff:e0:99:e1:1e:68:f4:d0:56:72:1d:
                    33:7a:48:4a:c1:2b:da:2d:bb:f2:99:24:33:25:90:
                    53:af:13:2e:3d:d4:86:7a:c9:96:fe:3f:0d:f4:db:
                    3a:4e:41:e0:e2:81:da:51:4e:da:27:a8:4f:95:b8:
                    15:f2:b0:10:c7:3b:98:e2:02:a7:fd:bc:dd:f6:05:
                    b3:7a:ea:7d:8d:62:f0:97:a8:33:61:e1:bf:5e:42:
                    91:98:de:bc:a2:c2:db:2a:69:df:b6:60:ec:b6:ee:
                    18:26:2a:d2:f4:0f:e3:96:6a:77:64:5a:c8:ec:41:
                    3d:ab:08:af:88:f0:15:c4:1d:52:54:da:18:c9:49:
                    30:81:6f:0b:1b:cf:fc:f8:9f:2f:ae:59:2d:b6:c1:
                    f0:ab:49:fb:fb:a6:56:5d:19:4e:13:4d:60:3f:3c:
                    c5:54:48:eb:25:84:b4:08:52:ee:12:12:74:b6:29:
                    f5:20:59:02:96:72:48:8f:0b:59:90:5d:c9:76:05:
                    fa:ba:25:4e:02:db:e8:b2:e4:ff:0d:83:9d:54:e4:
                    5d:48:0e:95:94:34:23:15:26:96:1b:6e:3d:d7:fd:
                    44:46:48:93:4a:b7:1a:f7:0c:7e:5b:04:ea:d2:2e:
                    55:2b:29:60:dd:38:f6:a4:5d:d0:c4:fc:2e:6c:84:
                    33:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F5:4B:BB:B7:CF:CC:5E:D4:24:AE:B6:71:6D:1F:56:53:6E:46:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/dfc43987-e52e-30aa-857f-3bd6ef64ddb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.crl

            X509v3 Authority Key Identifier:
                keyid:DA:75:7B:A4:71:96:8C:F8:F5:CD:04:CC:3F:B8:1A:A5:FE:17:DD:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.145.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:0e:07:a5:e6:9e:dc:09:d4:4c:2a:29:c3:3e:b5:6c:38:b8:
         98:32:30:0f:f8:e5:3f:ea:19:51:01:9a:f2:ba:88:59:8c:ce:
         ac:70:6e:37:f4:39:33:36:69:d3:5d:7d:52:37:39:5a:d7:c9:
         4b:d1:d5:c9:a2:fd:56:f7:74:b0:cc:1b:e0:69:d4:84:95:f5:
         38:64:67:b4:c9:e0:20:06:74:2e:b0:a8:64:2d:5d:21:7e:0d:
         00:84:6c:3d:27:be:a2:96:fb:42:b1:11:c4:36:5b:fb:c5:82:
         9c:60:a5:6e:81:25:f1:7c:2c:72:33:23:b3:cd:d4:f4:7a:78:
         c8:44:17:04:38:90:f1:bf:82:fd:28:83:78:b1:e7:78:e6:ae:
         07:68:96:99:e0:6a:3f:16:c7:fc:b2:18:2f:0d:42:bf:f8:f1:
         e5:86:29:7d:77:12:b8:85:41:3b:9e:8c:e2:bd:47:0f:56:d7:
         f7:bb:b2:41:e1:f0:35:0c:0e:9e:9b:78:01:09:ec:9b:cc:58:
         37:a3:0c:b2:43:17:1c:74:42:a7:bd:f8:da:47:55:82:a8:17:
         ba:fe:dc:57:fe:2a:d0:45:eb:1a:c3:6a:11:e2:ec:70:f4:68:
         05:22:46:6d:5b:35:a2:6d:c9:27:13:ab:83:be:02:c5:7a:0f:
         db:47:a8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:18:10 2025 by rpki-client