Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/004974bc-41a6-36de-a2a0-31e9f831f6d4.roa
File:                     004974bc-41a6-36de-a2a0-31e9f831f6d4.roa (raw, json)
Hash identifier:          VBkDXePUL3G77pBHTDXTfOWsbvDNVjfIZp7hzZVDYQ4=
Subject key identifier:   DB:83:C9:D2:23:89:D6:F1:13:E0:B0:51:0D:79:78:BD:B7:F7:8A:09
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A4A3893E908C5AAB08597EF60
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/004974bc-41a6-36de-a2a0-31e9f831f6d4.roa
Signing time:             Mon 23 Jun 2025 19:44:35 +0000
ROA not before:           Mon 23 Jun 2025 19:44:35 +0000
ROA not after:            Sun 21 Sep 2025 19:44:35 +0000
asID:                     20001
IP address blocks:        208.52.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:38:93:e9:08:c5:aa:b0:85:97:ef:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 23 19:44:35 2025 GMT
            Not After : Sep 21 19:44:35 2025 GMT
        Subject: CN=d90d4cd2-39f6-4e09-b4c8-27f8967bd52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ce:08:94:31:06:8a:cd:ff:94:df:e1:1c:c5:
                    94:8c:62:78:8f:08:7a:d7:23:c5:6f:09:e2:53:83:
                    b9:87:f1:ac:09:83:d4:ab:ab:a4:41:07:27:be:73:
                    cd:6a:10:fc:b3:c3:6b:ee:6e:a4:3a:96:d8:34:90:
                    90:25:d7:af:94:58:ac:e2:ce:66:a0:28:07:11:cb:
                    af:5e:f7:b9:cd:dc:82:50:6b:15:1f:a5:59:30:8d:
                    52:18:e1:46:b4:a8:9c:33:f1:86:ae:a2:35:68:39:
                    e4:4e:e7:57:ba:83:ee:2f:f3:84:48:34:23:83:4d:
                    9b:1a:67:55:f4:cd:87:01:c9:3e:4c:52:de:4c:47:
                    51:be:62:a7:77:7d:f7:56:01:cc:fa:ea:03:f0:2a:
                    84:6a:fb:a0:04:00:43:a2:ef:c0:9e:38:28:32:f8:
                    9c:3a:e6:28:41:a6:3f:a1:77:2b:ad:4d:bd:08:d3:
                    b7:ef:1a:ac:10:20:fd:32:02:e6:7f:11:82:b4:da:
                    a9:e4:29:56:b3:ae:8f:5d:80:87:a4:5f:44:81:73:
                    47:3d:46:9a:32:c8:0e:a6:73:9e:36:35:ea:e2:f2:
                    29:dc:85:02:57:38:9d:3c:f7:38:8b:90:b0:a1:08:
                    87:50:93:b9:b9:5c:7c:4b:72:a6:a1:ce:61:15:ec:
                    a2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:83:C9:D2:23:89:D6:F1:13:E0:B0:51:0D:79:78:BD:B7:F7:8A:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/004974bc-41a6-36de-a2a0-31e9f831f6d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1d:c8:07:67:3c:49:fb:63:5a:e7:1d:50:92:68:7d:65:11:
         9b:8c:91:c1:76:74:5e:80:c0:6d:3e:02:f4:df:e2:f4:31:d6:
         5c:cf:c2:11:c3:7f:ba:da:22:c4:1b:c7:ce:33:e9:1f:ce:a1:
         cd:03:45:ee:84:4d:00:3b:0a:3d:d5:55:6b:d8:04:15:47:9b:
         a4:d6:68:16:c3:81:cb:55:7e:62:ce:c5:16:e4:6b:a2:bb:cf:
         dc:23:b7:1a:e6:56:14:32:2d:f7:fb:93:df:a1:16:b5:0d:07:
         96:81:ab:75:0f:ee:52:ba:bf:1e:7b:f6:39:cd:91:bb:9a:1e:
         56:e9:0f:d8:32:b5:b9:97:4f:39:4f:72:73:bf:1a:12:19:ad:
         b0:99:87:4e:71:90:e7:fc:47:66:19:4d:39:53:56:73:b4:a2:
         37:dd:a5:d1:7a:3a:00:01:95:c4:c9:ff:40:4b:c8:3f:c7:b2:
         bd:70:b6:b1:9b:76:47:d7:f4:c3:7e:6e:88:d8:4e:89:a6:e2:
         74:67:33:71:0e:72:3d:d5:bf:e3:2c:a8:77:cd:7a:cb:0c:68:
         72:a0:8c:3b:2e:79:0d:b3:8f:46:3e:ac:11:d8:52:79:e1:fc:
         04:d0:fc:d1:c0:45:2e:11:d4:93:13:3e:f5:31:57:b5:8d:51:
         c0:c1:8b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:56:56 2025 by rpki-client