Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/1f0dd83d-e2de-3941-8dc1-f0abf30f28a5.roa
File:                     1f0dd83d-e2de-3941-8dc1-f0abf30f28a5.roa (raw, json)
Hash identifier:          1D18JMN15EW5jwG+gvDYGU+USmT4SXP4R0knaBgH940=
Subject key identifier:   80:EF:B3:DD:1B:EA:C5:87:3A:B1:EA:6E:E3:14:A8:A5:0D:CB:21:32
Certificate issuer:       /CN=564c92f5-eb04-448d-8939-379434b228b3
Certificate serial:       010D0C9F4328584AA42B7C65ADDF7184E1AAE680
Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/1f0dd83d-e2de-3941-8dc1-f0abf30f28a5.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     27628
IP address blocks:        204.83.154.0/24 maxlen: 24
                          204.83.155.0/24 maxlen: 24
                          204.83.183.0/24 maxlen: 24
                          207.195.54.0/24 maxlen: 24
                          207.195.64.0/24 maxlen: 24
                          207.195.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:7c:65:ad:df:71:84:e1:aa:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=6ac07dbc-2072-4897-ba33-e8d2440578b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:74:cf:2d:79:b3:61:60:ab:40:ca:a1:fa:
                    53:71:a7:80:84:7b:e7:4d:34:3e:af:81:53:27:8b:
                    e5:34:48:11:72:2b:51:1a:65:95:cc:72:b1:ac:2a:
                    dd:e4:d9:12:52:01:d8:0f:03:ff:00:02:15:e9:71:
                    94:86:0e:ee:10:54:38:04:e6:a2:a4:1f:72:6c:8b:
                    78:02:60:81:2a:f0:59:0c:62:39:65:ee:fe:74:90:
                    13:4d:2d:ac:eb:b3:09:e9:54:7c:ae:bd:dc:2e:10:
                    dc:22:22:38:a6:49:23:1c:28:38:ef:68:b2:3b:85:
                    d9:81:04:12:ff:a5:b6:31:16:c6:0c:98:5a:e9:d6:
                    ee:63:25:4f:74:e9:d5:1d:3e:d9:9a:41:b9:56:42:
                    66:aa:bd:9a:c3:c0:bc:3e:3e:01:e3:45:c3:29:cc:
                    45:85:fb:05:e5:d7:a3:b9:e0:75:80:01:33:71:78:
                    c6:8e:f9:ee:ff:c0:e5:ee:92:7d:3a:09:af:c3:7e:
                    5c:d1:b5:61:a9:de:cd:2d:65:42:cf:80:97:ef:28:
                    8a:c4:02:25:ab:43:bf:6e:8b:fb:a0:eb:cf:ac:bb:
                    d5:04:62:1b:07:47:c8:41:3f:f8:1d:6a:f8:6e:c3:
                    9d:87:54:83:63:77:a8:a4:48:93:2e:e7:62:fe:23:
                    e6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EF:B3:DD:1B:EA:C5:87:3A:B1:EA:6E:E3:14:A8:A5:0D:CB:21:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/1f0dd83d-e2de-3941-8dc1-f0abf30f28a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.83.154.0/23
                  204.83.183.0/24
                  207.195.54.0/24
                  207.195.64.0/24
                  207.195.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e8:55:c2:49:8e:90:f6:5e:7d:00:f7:3a:8d:52:41:b2:da:
         90:63:41:e0:61:31:21:ed:95:91:c1:51:69:c8:09:33:37:db:
         dd:69:91:f2:91:91:a5:17:ff:af:fc:34:74:3e:13:59:ca:ab:
         2c:2a:10:bc:8d:03:18:f5:7d:1f:7e:d9:57:f2:92:aa:c9:86:
         99:bc:53:41:5b:5a:b2:cc:1c:7b:d9:40:6a:34:fc:c9:ff:b0:
         c1:b6:30:bc:7c:73:04:72:a4:74:ca:9c:78:9c:04:dd:e9:bd:
         2a:db:00:36:0c:7d:95:5b:e2:89:ed:eb:69:31:d4:1b:db:2a:
         8e:e8:9a:96:52:1a:99:0b:dd:91:68:92:59:f5:7f:dc:28:1a:
         b4:f4:0a:41:83:0f:cc:8f:49:17:b3:0a:e5:42:9a:6a:ef:63:
         b8:72:56:ce:b3:c1:f7:7c:1b:29:62:7f:2e:72:1b:79:d9:96:
         d4:02:0d:8a:6e:82:c3:6d:58:34:37:45:11:27:d8:d6:af:6c:
         3f:84:6d:dc:7c:08:9f:80:7c:a7:30:8f:af:d1:a5:fe:fe:9f:
         b8:d0:e2:d3:16:b5:41:0f:11:d1:d6:fc:79:9b:01:29:dd:2d:
         c3:85:92:eb:ae:08:a9:b9:d2:c8:c9:45:f7:27:42:bb:7b:fb:
         d2:95:9e:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:42:33 2025 by rpki-client