Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/46619392-b89b-30ad-aaa8-1b908d91e183.roa
File:                     46619392-b89b-30ad-aaa8-1b908d91e183.roa (raw, json)
Hash identifier:          sXEJQ/ko482dwsS1ahtiClMHE+kfxO1Wsjh5pXGhPow=
Subject key identifier:   F3:9F:58:1B:F1:67:39:A6:40:57:BF:41:94:2D:15:E9:D7:61:8F:19
Certificate issuer:       /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b
Certificate serial:       010D0C9F43285849CE9A4053AA0AF605A335BC00
Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/46619392-b89b-30ad-aaa8-1b908d91e183.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     46408
IP address blocks:        204.13.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:40:53:aa:0a:f6:05:a3:35:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=8e60fa1c-b12d-4218-ba23-48a5d218fff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d4:96:60:be:78:0d:b4:da:dc:28:b0:96:46:
                    8e:04:60:25:9b:86:b0:4f:d5:3f:b0:5f:7a:50:6e:
                    c9:ce:0d:91:14:88:02:45:82:fd:66:ff:b9:c6:53:
                    2c:53:94:2a:66:ab:38:5c:92:59:74:09:56:d6:d4:
                    88:2f:c4:56:1d:7e:c2:60:b8:47:1c:df:8b:9c:86:
                    15:fe:e4:fd:58:9a:5a:18:81:b3:74:87:35:d0:70:
                    32:3b:3c:54:b0:22:cb:c0:1a:88:83:f4:6b:c5:94:
                    14:f0:29:50:d9:a4:ff:b2:4a:b7:56:af:af:55:fa:
                    ae:23:c7:48:b6:9b:30:1d:ce:8f:3a:f2:cd:5d:76:
                    99:02:33:e3:1b:b3:74:91:b6:65:67:73:cc:1d:84:
                    19:28:7e:55:0c:46:e0:61:84:c1:0e:66:ad:af:01:
                    36:ef:c1:76:be:64:b0:a8:fb:3f:37:ba:20:72:a4:
                    b6:25:8f:f1:d5:73:1a:b5:10:c5:65:ff:93:8e:d0:
                    d8:68:23:2c:9e:be:9e:cb:54:eb:29:15:05:ec:29:
                    94:05:58:e9:a4:09:f3:c1:d9:bb:f7:78:a6:a4:09:
                    2d:3f:7a:2d:8e:0a:00:fd:9f:7c:cd:61:6a:20:4a:
                    95:ac:c0:5d:25:42:15:94:4f:ee:36:33:8a:e4:39:
                    83:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9F:58:1B:F1:67:39:A6:40:57:BF:41:94:2D:15:E9:D7:61:8F:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/46619392-b89b-30ad-aaa8-1b908d91e183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl

            X509v3 Authority Key Identifier:
                keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:6e:83:cf:19:9d:1a:ac:0e:38:29:a5:d2:4e:14:a4:b0:88:
         68:1c:91:f3:d9:f5:45:fb:d6:13:87:93:ff:9a:38:e1:24:68:
         91:68:19:91:78:47:f4:c9:c0:a7:db:5c:28:92:7e:d7:93:49:
         63:fe:bb:88:bc:3a:77:ba:9d:53:fb:c2:1f:f9:d0:95:6b:3f:
         b2:ed:e2:2c:8e:03:fd:32:e4:9c:53:47:64:df:0f:38:a5:f5:
         51:71:2d:84:ca:b4:dd:1e:17:3b:b5:b4:03:5b:f2:5e:ae:55:
         86:5d:14:66:59:b0:88:ee:59:bc:f3:1d:0e:82:9a:7d:95:3e:
         be:25:e6:53:89:bd:9b:55:4d:79:08:e0:8e:f9:e9:54:d6:5f:
         dc:7d:b4:21:52:5e:64:88:63:1e:17:2e:4e:2a:75:a8:5d:1a:
         cc:b9:f5:90:96:a1:c9:c0:8a:13:78:80:52:c7:2b:cd:dc:29:
         16:50:62:25:80:80:2d:bf:89:f6:d0:5f:f9:c3:31:02:38:8e:
         e7:0d:a3:63:ca:77:b7:94:57:ae:3a:24:86:61:db:95:ad:ca:
         46:e8:7d:bb:50:ee:f7:0e:11:69:f2:8e:af:d4:6b:8d:e8:07:
         69:76:b3:aa:9f:f0:31:bb:2a:8d:40:fa:15:a0:63:2f:2e:cd:
         d6:a3:98:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:03:13 2025 by rpki-client