Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/25641917-7067-3b19-8b48-e46d3b875d9c.roa
File:                     25641917-7067-3b19-8b48-e46d3b875d9c.roa (raw, json)
Hash identifier:          KDNk8l4vgZt8lcPj9eA9j44U5DD37pSp+gZaGcC2Cic=
Subject key identifier:   EC:9F:99:C6:09:33:E9:EA:4A:C1:51:F0:B4:C8:AF:85:F1:D9:6D:66
Certificate issuer:       /CN=564c92f5-eb04-448d-8939-379434b228b3
Certificate serial:       010D0C9F4328584A1B5FF63B0E1E8A8E8FC53B40
Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/25641917-7067-3b19-8b48-e46d3b875d9c.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     399844
IP address blocks:        204.83.1.0/24 maxlen: 24
                          204.83.3.0/24 maxlen: 24
                          204.83.6.0/24 maxlen: 24
                          204.83.37.0/24 maxlen: 24
                          204.83.81.0/24 maxlen: 24
                          204.83.100.0/24 maxlen: 24
                          204.83.150.0/24 maxlen: 24
                          204.83.152.0/24 maxlen: 24
                          204.83.176.0/24 maxlen: 24
                          204.83.189.0/24 maxlen: 24
                          204.83.211.0/24 maxlen: 24
                          204.83.240.0/24 maxlen: 24
                          204.83.241.0/24 maxlen: 24
                          207.195.13.0/24 maxlen: 24
                          207.195.14.0/24 maxlen: 24
                          207.195.44.0/24 maxlen: 24
                          207.195.51.0/24 maxlen: 24
                          207.195.79.0/24 maxlen: 24
                          207.195.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:f6:3b:0e:1e:8a:8e:8f:c5:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=42dbcadc-106f-4a0f-b557-1a8b2a8f332e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a0:5b:79:4d:49:cc:44:e3:5f:5e:09:bf:51:
                    0b:e0:4c:a4:a8:52:e7:e8:26:70:a6:11:13:e3:cd:
                    1d:a4:47:42:c1:4e:23:9d:68:71:03:ee:88:e7:5b:
                    7a:81:d6:94:e2:7f:21:88:dc:2f:7c:a9:bb:59:46:
                    6f:19:30:d3:a1:df:1e:be:ec:e1:e9:5b:3f:a0:62:
                    53:7f:ab:cd:78:c8:e2:e8:fe:23:9b:a2:25:25:7f:
                    29:d3:65:62:9d:e3:a2:7b:4e:19:1b:c6:cb:f7:7c:
                    ad:34:0b:88:b7:3f:72:07:2b:43:1c:4a:c9:ad:0b:
                    9f:a7:6e:03:2a:ed:26:43:92:9e:5b:af:29:29:02:
                    1d:be:ba:a0:ec:ee:e9:22:d0:b0:db:25:d0:ca:39:
                    f4:4f:c3:ab:a4:8e:3e:cf:ca:f4:3a:c5:e0:2b:20:
                    b8:57:18:b2:ab:8a:7d:20:14:4d:35:6b:f4:28:8a:
                    e4:d8:6e:e3:02:18:e9:2a:22:03:ae:5e:08:0e:30:
                    81:2f:51:cb:d9:02:b7:0e:7f:82:74:5b:35:e6:da:
                    41:1b:a2:83:80:28:a5:4d:b6:04:3c:8d:2c:45:02:
                    1a:97:04:82:bf:fe:4b:86:6b:99:da:1d:e6:1f:8e:
                    56:59:af:25:ca:42:14:26:73:31:9e:c8:6f:4e:b7:
                    ed:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9F:99:C6:09:33:E9:EA:4A:C1:51:F0:B4:C8:AF:85:F1:D9:6D:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/25641917-7067-3b19-8b48-e46d3b875d9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.83.1.0/24
                  204.83.3.0/24
                  204.83.6.0/24
                  204.83.37.0/24
                  204.83.81.0/24
                  204.83.100.0/24
                  204.83.150.0/24
                  204.83.152.0/24
                  204.83.176.0/24
                  204.83.189.0/24
                  204.83.211.0/24
                  204.83.240.0/23
                  207.195.13.0-207.195.14.255
                  207.195.44.0/24
                  207.195.51.0/24
                  207.195.79.0-207.195.80.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ec:00:34:12:96:24:ce:e5:34:3b:e3:f7:ec:28:29:68:fd:
         e3:1f:27:47:1c:9e:02:87:05:6b:b7:11:be:72:fc:62:8e:b0:
         5c:a0:83:63:15:be:d9:f3:f9:cd:de:08:72:d9:ec:09:04:7a:
         48:db:68:34:01:32:f7:12:83:fd:7a:cb:cd:62:bc:36:9f:da:
         b9:44:b0:48:2e:bd:8c:4d:26:f4:42:52:0e:e2:af:6f:03:1a:
         bb:31:48:f0:b0:5e:78:f5:a7:d2:aa:94:d6:a0:2b:5e:9b:31:
         ec:8d:b1:15:81:0a:f8:68:b4:3a:8a:db:05:0d:5c:a0:b3:a5:
         02:0c:c7:e3:3b:ae:51:d5:76:34:c6:50:03:9f:78:56:75:dc:
         b4:8a:b5:c4:95:06:d4:20:a6:e7:56:3e:bf:4c:2a:83:85:6a:
         6d:17:b0:7c:b6:5e:e5:58:7c:47:72:d5:82:be:35:49:95:c8:
         d3:2b:22:a0:f0:a8:19:ac:77:b2:69:37:5f:8a:1d:90:7c:17:
         fb:87:9f:3c:d7:34:f7:06:7e:91:09:1c:e7:24:11:02:52:ab:
         f1:a7:4e:ad:05:23:e6:ef:21:bd:75:46:fc:19:50:a3:bf:33:
         d4:b0:21:dc:10:45:1b:87:1c:34:e2:24:05:01:1b:1d:2f:e4:
         99:a4:c1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:29:45 2025 by rpki-client