Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/35f7ada9-1c77-3d7e-8e32-048a015c2c12.roa
File:                     35f7ada9-1c77-3d7e-8e32-048a015c2c12.roa (raw, json)
Hash identifier:          QhNDi57CYxAXivHmGn8zqaxF4BmWorm1poBZQb9olQI=
Subject key identifier:   4A:5F:3D:16:0D:DF:65:40:97:4E:21:5F:ED:BD:4E:58:6E:E4:69:1D
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584A7A595FC31706F76E5717B880
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/35f7ada9-1c77-3d7e-8e32-048a015c2c12.roa
Signing time:             Fri 11 Jul 2025 01:29:28 +0000
ROA not before:           Fri 11 Jul 2025 01:29:28 +0000
ROA not after:            Thu 09 Oct 2025 01:29:28 +0000
asID:                     16417
IP address blocks:        204.15.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:59:5f:c3:17:06:f7:6e:57:17:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jul 11 01:29:28 2025 GMT
            Not After : Oct  9 01:29:28 2025 GMT
        Subject: CN=9c3bf6ad-a415-41e9-895e-17b53518b7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:74:38:2c:fd:33:14:08:e7:89:e0:4d:81:9c:
                    52:c2:3f:f5:91:5f:32:f1:b0:89:dc:91:dd:cd:c5:
                    a4:05:39:bc:9b:6f:ea:f4:0f:11:58:0f:47:82:3f:
                    9f:ad:4e:ec:e9:94:07:8e:11:8f:fc:86:5b:31:a3:
                    25:cb:c1:2a:14:a9:ba:07:66:04:b4:da:37:82:2c:
                    22:aa:1e:f5:53:f3:35:1c:15:3c:c9:28:f9:46:c5:
                    ad:61:ed:ed:19:7f:56:e0:e0:47:0d:81:2e:d1:82:
                    c3:70:18:d6:55:f5:59:b0:aa:44:91:38:d4:f1:73:
                    e5:56:0f:7b:c0:34:41:57:c6:0b:30:a3:14:68:4c:
                    a7:19:db:61:3c:88:9e:a7:41:a8:be:b7:30:ee:c1:
                    d7:a5:9d:22:3e:4d:b0:fc:86:24:60:ee:56:36:d1:
                    c1:ce:74:60:65:74:32:8c:97:7f:bd:3c:78:c2:80:
                    d3:85:27:c3:30:3c:b7:fb:a1:16:23:3f:f7:15:17:
                    0b:ad:cc:db:8f:d5:4b:3e:d6:84:d3:12:36:5f:b0:
                    c7:2e:a8:f7:43:e2:32:9b:5e:62:e3:1f:3d:eb:79:
                    cd:d9:36:65:18:a1:ca:03:ec:96:72:db:e0:ef:a9:
                    13:ed:47:ec:71:42:ec:1e:31:32:12:fa:84:5e:ea:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5F:3D:16:0D:DF:65:40:97:4E:21:5F:ED:BD:4E:58:6E:E4:69:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/35f7ada9-1c77-3d7e-8e32-048a015c2c12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:77:b0:ec:d8:d5:be:b3:7a:90:53:b7:ef:09:97:65:66:9c:
         1d:7c:08:d2:9a:c8:51:8a:45:ff:72:54:e9:d8:ba:21:a3:62:
         b0:eb:36:ac:3e:1c:6f:54:79:14:77:f2:2d:2b:c0:4c:75:09:
         c7:db:10:97:60:e5:a5:5b:ce:4f:fd:97:dc:a0:35:33:58:de:
         73:bd:b3:f1:18:83:29:0a:2e:4f:41:a1:ea:4c:f6:be:d6:57:
         9c:77:f3:06:80:c4:a7:e3:66:8f:9e:9d:10:c1:37:86:02:01:
         10:c8:5e:a0:cd:a1:24:b4:ff:3b:9b:77:56:6f:07:2d:c7:e7:
         fa:d8:45:f4:89:10:25:53:7f:0b:9b:ce:50:42:f3:df:de:75:
         cf:3e:b1:45:ab:52:60:e9:6a:61:9a:a7:ba:38:e6:22:3e:4f:
         35:ee:85:0d:13:87:f9:83:07:b1:a5:a0:cd:31:1a:f3:c3:f8:
         54:22:2c:06:d8:5c:ae:f0:93:77:05:33:0a:85:b1:91:e7:eb:
         34:ee:2b:98:1d:33:7d:f4:7c:dd:9d:78:00:7e:2b:01:c6:8d:
         0b:bc:d3:d4:6b:e7:e0:1e:76:0b:3b:cd:de:ab:0f:3d:f1:ee:
         04:27:b3:b5:31:b9:ff:cf:72:f8:e2:49:25:2f:eb:ae:79:44:
         ac:b7:0f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:34:00 2025 by rpki-client