Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/a6654227-7e4a-384e-aaf7-165cd7a07f42.roa
File:                     a6654227-7e4a-384e-aaf7-165cd7a07f42.roa (raw, json)
Hash identifier:          kfcmDhb7xPcRe5d2BYR1pvhjnQsV+X9cIL3G1I6457k=
Subject key identifier:   16:65:07:7C:59:3F:7B:DE:D6:8E:4A:DB:D2:38:D0:EC:31:95:38:2B
Certificate issuer:       /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Certificate serial:       010D0C9F4328584AADF126CA126ACCD5B36894E0
Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/a6654227-7e4a-384e-aaf7-165cd7a07f42.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     8014
IP address blocks:        204.236.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:26:ca:12:6a:cc:d5:b3:68:94:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=fcd5586d-137d-45c1-8b09-a342f4ee1c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:af:b0:8e:63:e9:f2:ab:9f:fb:73:af:4b:e9:
                    1a:2a:33:8a:6a:f0:0b:45:b2:78:03:c4:76:72:57:
                    a4:e1:97:ef:80:c5:5c:8e:92:95:8c:3d:fe:09:db:
                    3b:17:51:40:da:a1:c8:eb:c3:52:01:b6:86:6e:19:
                    ce:1b:17:fb:c3:21:8a:4d:e8:fe:d3:3e:48:d8:f1:
                    6a:11:3c:82:39:24:2f:2d:e3:ba:69:db:26:5a:83:
                    b6:31:68:9c:18:26:b7:b6:2a:ea:06:5e:d8:51:75:
                    a5:0a:7d:cd:87:46:90:23:0e:13:99:50:9b:2e:86:
                    ef:0e:a6:ea:ba:76:cd:50:40:e5:0d:95:29:75:42:
                    3b:15:96:82:17:3b:7c:45:44:80:7c:d1:7c:9a:73:
                    b1:a9:dc:17:2e:f4:37:e1:bf:08:68:12:ab:a8:0a:
                    67:54:a4:70:8d:8a:7d:d2:57:88:54:df:06:42:bc:
                    06:84:e2:95:f6:01:15:11:6f:0e:b9:60:b5:34:8a:
                    93:da:47:7d:a0:a3:ac:3f:ed:d2:cd:2e:54:5a:85:
                    29:12:bf:c7:e8:88:de:13:bc:a2:9a:de:54:a8:d5:
                    ed:6e:43:32:c5:b6:52:2e:50:dc:44:e5:28:41:fe:
                    00:01:99:01:ac:56:b1:86:38:f3:8d:90:19:a6:41:
                    16:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:65:07:7C:59:3F:7B:DE:D6:8E:4A:DB:D2:38:D0:EC:31:95:38:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/a6654227-7e4a-384e-aaf7-165cd7a07f42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:8e:1a:b1:48:66:d1:7c:48:b6:5c:fd:7e:2d:44:d7:9c:37:
         33:14:54:4d:80:29:1c:b0:e8:bd:d1:28:5b:f7:72:33:c6:5b:
         3b:b3:35:98:9f:9d:8d:8e:8e:19:1b:5c:02:6e:43:c9:02:ee:
         74:93:3a:59:3c:ab:44:e9:80:a5:bc:17:26:4d:af:da:80:8d:
         6d:ae:12:ed:02:4f:61:33:95:66:67:7e:82:8d:4a:1b:dd:4c:
         73:83:87:77:fb:10:86:65:87:6a:7e:27:9d:1e:9b:ab:fd:e2:
         de:1a:7f:ef:f1:74:68:09:ca:44:9f:d7:a7:87:20:46:f4:60:
         09:e3:d7:68:cf:ef:33:f6:fd:1f:b6:b9:ed:27:08:c8:18:d3:
         1a:c7:18:45:61:15:6a:28:86:73:64:84:04:5f:b1:1c:22:70:
         d0:df:6f:35:ce:05:92:73:a1:37:8c:66:5c:44:2b:e8:ee:c8:
         6b:32:70:b6:fa:57:d2:43:e4:f4:85:c6:dc:d1:ea:fc:0f:9d:
         2a:d4:21:78:c8:13:bd:35:1a:b8:c0:7b:11:9b:ae:52:c2:b4:
         fd:17:ec:62:44:27:b9:16:a3:4a:7b:22:8b:89:4a:f5:d8:4c:
         32:94:54:60:11:65:bb:a1:75:8e:2a:c1:e5:b6:1c:b1:62:a9:
         9c:0f:b5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:01:25 2025 by rpki-client