Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/203d4c5b-39cc-31ee-9546-b82bfe541856.roa
File:                     203d4c5b-39cc-31ee-9546-b82bfe541856.roa (raw, json)
Hash identifier:          v58HBXzNBwmxTywVz/LhHDIYK1uaYWvTOejc0L2ohIc=
Subject key identifier:   7A:4A:09:85:B5:8B:75:A4:73:D1:0D:BD:C3:90:6E:E4:5F:92:0D:05
Certificate issuer:       /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Certificate serial:       010D0C9F4328584ABD4BA3B51C617BD3EFC7EF80
Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/203d4c5b-39cc-31ee-9546-b82bfe541856.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     8014
IP address blocks:        204.236.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a3:b5:1c:61:7b:d3:ef:c7:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=e32b1d17-3faa-4753-bbe4-e9f53c1f32f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:2d:59:9e:86:d9:ae:6c:7f:47:e9:5c:a0:
                    a0:cf:ba:46:d4:b8:05:31:7a:9a:e2:d6:0d:9e:d3:
                    ad:ab:05:a8:c6:1d:17:b1:e3:88:b5:a1:63:03:9c:
                    69:9c:44:f2:00:f0:a7:da:cb:c6:85:7c:e1:40:0e:
                    71:08:27:82:4d:66:2f:b6:37:c8:fa:5c:28:a4:e6:
                    2c:80:de:15:ba:66:73:c8:e6:f1:5c:bb:6b:37:ea:
                    20:7b:36:1c:46:a1:a8:de:06:55:8b:12:10:62:7a:
                    ad:d7:f0:9e:d4:4c:22:b4:52:c5:5e:89:84:62:c6:
                    48:94:c0:36:4b:07:2b:78:51:b8:18:a8:46:40:90:
                    15:3a:9d:72:fb:ed:04:35:6a:c8:b0:8d:67:19:e9:
                    a7:73:76:9a:58:ce:e5:53:ea:42:d7:10:e8:4b:b4:
                    b7:c7:66:26:92:93:79:c3:b1:55:4e:9b:90:60:c7:
                    56:ca:9f:17:a7:a4:ea:10:8b:d9:95:ad:71:e9:82:
                    cb:d2:1d:f2:c5:ad:58:7e:f2:2d:ba:f1:89:f0:78:
                    19:98:f9:ff:7b:10:09:e0:9b:49:5d:1a:0b:38:d5:
                    0d:3a:d3:da:53:8a:4c:79:21:15:e7:85:2c:f9:26:
                    d3:1a:59:b2:75:9a:26:3b:cc:42:a8:f5:7b:6a:ec:
                    a7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4A:09:85:B5:8B:75:A4:73:D1:0D:BD:C3:90:6E:E4:5F:92:0D:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/203d4c5b-39cc-31ee-9546-b82bfe541856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:bc:5d:23:43:66:b8:66:03:31:7b:15:e7:a2:71:c0:53:35:
         3a:fe:e9:d9:5e:34:10:26:d7:82:ba:3c:1b:64:00:b6:82:b9:
         d8:c8:7f:48:55:de:14:53:c3:23:04:5e:22:49:19:1e:e2:00:
         b2:eb:53:57:4e:a3:b4:76:d1:e4:82:59:fb:b4:8c:01:85:f3:
         a4:0a:2e:93:02:90:94:d7:e3:4d:ea:0c:51:16:d7:c9:75:37:
         3f:d5:18:c5:73:8a:55:81:8d:45:4a:9f:43:e4:20:44:0c:c4:
         2d:2f:47:e7:de:6c:51:c6:cd:52:f9:87:93:e3:65:d5:b0:a0:
         ec:b9:d5:3b:be:43:aa:02:90:23:0e:bf:60:36:b7:9e:e4:a5:
         ef:63:e2:20:e2:e8:5f:e2:95:9f:90:6f:42:41:83:2a:1a:ce:
         63:b5:bb:88:c5:3b:81:f9:59:d7:1a:2a:be:56:50:5e:a1:32:
         18:94:04:24:26:88:57:b4:d8:40:50:36:ef:59:8d:16:e4:7a:
         17:b6:e2:dc:87:74:04:3b:0e:07:77:dd:43:0a:99:ce:a6:1b:
         ab:57:b4:94:17:51:98:04:99:93:9f:38:f2:b8:66:f8:71:c1:
         c5:e5:91:13:e9:25:70:8a:c8:fa:ff:36:c6:af:db:3c:9e:04:
         e3:e0:75:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:00:09 2025 by rpki-client