Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/be1bace1-e30b-339a-b6e9-cc05aa9090a7.roa
File:                     be1bace1-e30b-339a-b6e9-cc05aa9090a7.roa (raw, json)
Hash identifier:          n1WY3JZ7qqCAWIwyRauNTYCu0c7jJ5K0ap/IeSdY11M=
Subject key identifier:   F9:F9:A9:25:6C:BB:99:51:45:E3:EA:CF:0A:EF:72:5A:66:AF:C9:D9
Certificate issuer:       /CN=564c92f5-eb04-448d-8939-379434b228b3
Certificate serial:       010D0C9F43285849DC8FBAE55CE5F088E21C2300
Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/be1bace1-e30b-339a-b6e9-cc05aa9090a7.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     397894
IP address blocks:        204.83.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:ba:e5:5c:e5:f0:88:e2:1c:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=bef48ca6-a1c2-4ecb-935a-04f0cef56904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3c:15:58:9c:18:4f:89:a3:71:51:f9:b8:b6:
                    b8:7d:bb:87:38:27:c6:61:c0:84:63:55:e5:45:ea:
                    83:5f:12:94:65:ba:f0:fb:8f:25:d2:10:d1:39:1a:
                    bd:94:1a:c3:ad:7f:fd:c2:b3:2a:03:fd:8d:c3:a5:
                    c1:10:d1:b6:56:d6:5c:a3:9a:e3:4c:61:f7:b9:90:
                    a9:5f:0f:cc:08:47:f5:c9:3f:c9:fb:f2:32:23:16:
                    bc:1b:79:69:07:36:9c:03:1a:4f:78:3e:fd:2c:51:
                    0e:75:7f:e1:9f:a3:96:09:69:1b:ce:98:4b:38:2f:
                    32:ad:ad:43:82:b7:b8:9e:8a:83:24:84:a3:5a:49:
                    db:34:a8:43:6a:55:aa:b6:03:80:93:ca:01:41:ca:
                    54:6b:2d:8d:86:45:f7:c0:9b:1b:ff:47:4c:85:31:
                    3a:f6:67:e0:a2:86:11:51:ff:de:7a:2c:35:08:24:
                    55:18:33:9b:e6:00:2c:e5:21:fc:aa:8b:72:45:82:
                    0a:a7:36:b9:22:7f:d7:b7:4c:d4:95:d5:a4:0c:93:
                    5d:d5:21:44:e4:41:7e:2f:7b:92:bb:ed:cf:dd:e2:
                    80:92:75:0f:af:2e:72:b8:4b:a0:3a:a7:62:30:a8:
                    f3:80:e1:f5:75:c7:c5:2c:19:e9:21:dc:0f:65:ee:
                    a6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F9:A9:25:6C:BB:99:51:45:E3:EA:CF:0A:EF:72:5A:66:AF:C9:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/be1bace1-e30b-339a-b6e9-cc05aa9090a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.83.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:8f:29:35:9d:b3:6e:f6:4a:e0:5a:0a:e8:b4:68:66:fc:b0:
         57:dd:0c:a8:62:58:a8:bb:95:c6:28:60:fe:ad:28:7f:fd:c0:
         c5:1f:36:98:39:87:61:41:e2:a9:b5:39:89:8b:5d:cc:1d:37:
         7e:8f:5d:9c:60:77:62:61:fa:87:08:4f:16:e8:30:68:69:77:
         47:dd:77:8c:9d:bd:3e:b5:af:19:24:b8:bf:91:4a:88:90:c1:
         ea:3a:41:63:79:c5:24:5c:ae:55:ed:82:6c:62:df:37:3c:08:
         1f:d2:30:86:0d:76:13:11:fd:46:ea:5d:ee:86:3c:f5:70:3c:
         19:b9:ef:64:91:2f:c8:57:0f:e4:eb:8c:a5:23:c3:f9:59:1d:
         2f:11:62:7f:68:f9:84:90:3e:4a:53:8d:a2:c1:9e:69:2a:25:
         11:80:c0:e7:51:81:c4:b9:84:26:68:b5:80:df:95:2d:f5:59:
         cd:72:50:fe:67:d7:23:06:24:9a:d2:03:95:79:f3:62:d3:56:
         32:e1:ea:97:6f:c0:ec:82:09:1d:eb:94:ef:dd:e7:a6:25:da:
         8b:72:b5:cd:4d:e8:49:ce:f9:41:86:b9:b0:4f:c5:a1:33:be:
         d6:c5:28:0e:f4:17:bd:5c:7f:8c:3c:08:0b:34:e8:7d:cc:2f:
         4f:f1:71:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:07:50 2025 by rpki-client