Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/dcd878df-351d-3045-9ba1-a9aee88944f5.roa
File:                     dcd878df-351d-3045-9ba1-a9aee88944f5.roa (raw, json)
Hash identifier:          jofr3v+1LI2xWW2dYvLZrg0CSG6wMGjiWZwC0KwYpP8=
Subject key identifier:   65:D3:18:9A:DE:A2:C4:90:87:E5:69:E7:ED:77:39:94:EC:FF:5A:33
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F4328584B0746C0FF10B95D68F04E8C80
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/dcd878df-351d-3045-9ba1-a9aee88944f5.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     11248
IP address blocks:        204.8.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c0:ff:10:b9:5d:68:f0:4e:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=94181525-4539-4737-9a45-d40b0a97ec23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8b:1e:62:61:d1:7f:67:e6:61:5f:7e:80:d7:
                    63:78:67:07:ef:33:5a:2f:07:58:9d:83:ca:d0:8e:
                    6f:a3:9c:80:7e:2f:ed:c4:59:84:a7:e4:cb:76:5b:
                    e3:31:a0:1a:41:a2:3b:4d:e0:0f:81:cb:28:e3:77:
                    66:ff:20:ef:87:5e:5c:6c:79:f8:71:0d:f3:81:9a:
                    f5:6d:f9:96:52:15:a9:57:e0:b5:52:9a:6d:b4:e5:
                    32:04:f6:12:4d:f4:c5:af:62:60:92:8b:31:0a:f6:
                    b3:a4:42:91:d1:01:5e:0b:94:2b:a3:c9:3a:e7:53:
                    d2:a8:a6:64:a5:26:cf:12:26:ce:64:29:31:7c:0f:
                    66:0f:6c:44:84:ea:e1:2c:8a:a8:3b:d0:68:74:13:
                    60:ac:d1:2d:7d:d2:39:04:93:f8:79:82:0e:c3:38:
                    9b:4d:65:56:f4:d0:46:45:97:6f:b5:be:e9:86:13:
                    21:2f:c6:ad:21:46:66:c6:cb:82:b0:60:d6:ac:bb:
                    de:64:6f:b7:1b:b9:08:89:d7:20:09:48:22:fa:64:
                    bd:4d:6a:bc:a7:b9:87:10:d9:66:7a:bf:d7:3f:55:
                    c6:3a:d5:f4:5c:e4:80:0d:d5:75:8f:a4:63:83:3c:
                    2e:f5:c6:69:75:bb:f1:6b:c0:70:44:69:c3:38:83:
                    ba:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D3:18:9A:DE:A2:C4:90:87:E5:69:E7:ED:77:39:94:EC:FF:5A:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/dcd878df-351d-3045-9ba1-a9aee88944f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:4a:4e:1e:d7:a4:e0:d2:79:77:ef:4d:b7:43:ce:5c:14:86:
         fc:0f:d9:84:83:77:50:0d:33:9b:49:98:bd:8a:a2:a2:dc:56:
         71:a2:90:ec:05:0b:3e:30:d2:6c:7c:23:8d:88:19:2d:3f:a6:
         89:70:d3:ce:a9:74:50:5e:05:2b:c7:75:1a:b1:88:7f:73:cc:
         ed:8c:5d:83:d8:7e:ea:dc:57:98:98:d2:50:99:79:3f:51:11:
         27:34:c0:08:d4:13:98:ab:0f:09:90:59:ac:f8:3c:06:a9:14:
         fc:a3:64:64:70:dc:ac:42:fb:49:5b:d2:53:46:87:ad:da:36:
         c7:b2:9a:2a:33:91:9a:97:f4:32:4b:98:4e:ba:d5:ea:28:b0:
         cd:33:af:d3:d1:82:16:61:c3:19:45:80:ad:db:38:c3:95:dd:
         4e:ca:13:26:d7:c1:36:c3:ae:b0:e4:74:53:49:6b:f1:5d:3e:
         32:83:6d:3d:93:6f:d1:6a:4d:ef:8a:a3:9f:87:95:c2:ae:e8:
         22:bc:96:26:70:e0:86:4e:45:a2:fa:17:60:e8:52:ea:f1:12:
         a4:d3:2d:c7:6d:5c:fe:ba:b6:91:c1:a6:d0:30:3e:92:72:23:
         1a:bb:36:00:f6:91:d0:50:9c:22:67:4e:16:d0:e6:67:e2:2d:
         e4:e0:7b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:33:47 2025 by rpki-client