Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/d149e89f-1913-3a58-ba83-45458087b151.roa
File:                     d149e89f-1913-3a58-ba83-45458087b151.roa (raw, json)
Hash identifier:          m0KOq5L9zvdlDOtiutIyjm7Aq9hbCgZIzSKDQ6oIdyA=
Subject key identifier:   7A:07:45:03:FD:41:EB:9A:09:B1:1A:DE:23:0A:19:C0:C9:C8:F8:B7
Certificate issuer:       /CN=564c92f5-eb04-448d-8939-379434b228b3
Certificate serial:       010D0C9F4328584A0C0571DF178D013B38E9CF00
Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/d149e89f-1913-3a58-ba83-45458087b151.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     393607
IP address blocks:        204.83.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:71:df:17:8d:01:3b:38:e9:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=caca60c7-595c-4d6e-b4db-9d5278b84b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:80:c7:8f:f1:62:ed:95:5b:37:bd:88:b4:
                    6f:8f:ef:92:56:71:24:90:03:a2:e3:65:25:ca:1c:
                    68:bc:1c:c0:00:c4:3c:f7:c4:cd:61:19:02:4b:c7:
                    ce:2c:48:07:87:1f:8e:90:56:8f:8f:50:72:dd:9c:
                    9c:6f:4a:62:9b:37:c4:b0:2f:d4:78:e2:ef:26:73:
                    08:f9:b9:5f:8f:97:2c:23:04:5d:6c:e9:2a:7d:be:
                    cc:19:3c:39:7d:e0:b8:d2:e5:e3:96:7c:dc:ef:1f:
                    f0:02:61:14:11:a0:02:58:be:0f:e2:27:17:16:f7:
                    a6:08:93:9e:d3:f3:35:bb:f3:bc:2f:14:48:81:6c:
                    6e:68:aa:94:67:98:ad:9d:d2:6d:31:3f:f0:8e:38:
                    68:a8:40:b6:fa:c1:be:53:26:f4:7a:68:27:ea:8d:
                    70:d8:59:67:f9:7a:47:70:78:b2:25:b8:20:7f:d6:
                    ce:f5:79:ab:e0:37:5a:ba:22:47:aa:a7:ce:61:e3:
                    7f:af:b3:0d:cd:1e:e8:13:20:6c:c2:f1:de:1c:bc:
                    c6:39:67:91:9c:8f:05:7b:82:b5:53:48:e7:54:5d:
                    01:13:88:30:fc:46:f2:3f:98:d5:21:21:a9:b9:62:
                    50:fb:76:b0:a4:55:53:3d:f1:73:91:cd:49:2a:06:
                    7d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:07:45:03:FD:41:EB:9A:09:B1:1A:DE:23:0A:19:C0:C9:C8:F8:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/d149e89f-1913-3a58-ba83-45458087b151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.83.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:36:49:b9:eb:0b:54:ab:75:7f:4f:b8:5f:39:ed:26:7c:a9:
         ee:81:be:e5:54:dd:56:f8:51:f0:1d:e0:e2:29:50:4e:1b:97:
         57:1d:22:04:5a:24:96:10:41:0f:1b:ce:37:7f:c9:c8:9b:0e:
         70:cc:8e:58:c2:95:b1:6b:3b:f6:25:f8:b6:3f:51:7c:69:11:
         40:91:91:32:e3:25:e3:a5:2e:33:53:08:c3:c9:5d:fb:f3:30:
         92:97:df:dd:4e:02:94:98:98:87:f5:44:7d:65:40:de:bf:6b:
         24:24:2c:ef:06:16:92:19:4a:dc:80:d1:f4:cb:95:44:6e:8f:
         64:4c:02:ae:e5:32:24:f2:04:16:fa:8e:9b:91:7f:e9:27:ec:
         84:3d:7c:3c:6b:88:24:e4:54:85:25:e4:c7:32:54:82:81:1d:
         17:97:87:f4:8f:63:28:98:a3:f7:42:ba:a7:99:2d:30:b6:e1:
         28:1c:b3:6a:98:54:f0:b3:b0:b5:17:be:a5:16:2e:11:13:a9:
         fc:1c:91:ca:83:f2:c4:ae:76:6f:42:19:d3:f5:d9:a3:d5:83:
         84:48:d5:02:45:ae:ab:1e:3f:c3:2b:c9:28:47:b0:54:98:a1:
         c8:0e:7a:3f:69:d6:c5:e4:e6:65:8d:52:6a:23:7f:c7:51:0c:
         06:db:f2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:02:35 2025 by rpki-client