Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/357ebc88-908a-340f-8f67-988f1efd1714.roa
File:                     357ebc88-908a-340f-8f67-988f1efd1714.roa (raw, json)
Hash identifier:          tcT+rItZTbNszKj8gCYw5mPiJgOaGWCb0oiEbehX4P0=
Subject key identifier:   7A:32:C1:D5:F7:98:18:BE:F5:9F:0C:8F:17:1B:81:15:50:64:CA:66
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584A814643E26734EFF358F2BC40
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/357ebc88-908a-340f-8f67-988f1efd1714.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     2914
IP address blocks:        208.80.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:43:e2:67:34:ef:f3:58:f2:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=962cd337-3a10-4dc1-84a1-d61aa3d83fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:2d:ba:c3:a9:88:c2:e7:03:1b:0c:42:90:
                    c8:81:94:f4:91:4c:db:ee:24:bf:9f:43:03:88:65:
                    43:bc:53:5a:ca:29:48:0b:59:79:66:13:60:67:b6:
                    e0:a1:a7:81:97:4a:01:b1:60:11:25:41:5d:9b:88:
                    64:32:c2:63:d5:17:68:11:56:50:f8:f0:73:4e:da:
                    bd:97:e6:0f:9d:ae:0b:66:1b:4a:bb:f1:08:d4:84:
                    a1:2e:7a:17:19:26:c5:a2:24:5f:33:57:cd:d5:02:
                    9e:77:6b:89:53:77:a7:6b:28:7a:25:2a:0b:21:4f:
                    10:a2:3a:07:7c:e6:10:96:95:05:a9:38:3d:45:e7:
                    aa:28:94:53:5d:80:c9:a4:1c:c6:b1:ba:09:96:ad:
                    1a:5c:8b:3a:40:89:4b:b3:be:9a:c5:c6:e4:70:ce:
                    4c:c2:62:99:68:01:a1:be:54:cd:5e:3f:30:7b:ac:
                    a5:70:98:ae:3d:de:63:ba:f6:e6:58:17:67:8c:e1:
                    60:bc:32:c2:67:54:b2:e8:5b:09:e2:ac:d9:f9:2a:
                    e5:26:09:8c:53:6b:7c:cf:44:f3:39:a1:61:26:7a:
                    af:bd:7a:fe:c0:9f:db:d2:6a:be:13:f2:11:15:05:
                    a0:ff:c9:42:29:ab:3a:3f:91:ab:90:13:53:95:96:
                    82:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:32:C1:D5:F7:98:18:BE:F5:9F:0C:8F:17:1B:81:15:50:64:CA:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/357ebc88-908a-340f-8f67-988f1efd1714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:80:d1:69:a4:19:6b:49:58:75:21:f2:a6:19:4c:78:65:9d:
         ef:68:16:ca:f8:47:35:e2:00:25:88:ca:b3:95:da:81:4a:8e:
         3f:b4:f3:ab:3d:d0:ea:fe:87:c0:06:6b:ad:80:79:6b:38:26:
         e3:de:8a:10:83:01:68:04:31:9c:df:54:52:1f:f8:ef:38:d8:
         47:78:65:88:cf:f9:09:c2:09:36:4b:38:6c:2c:32:fa:f9:88:
         83:37:0d:c3:3c:90:60:e6:ad:30:26:ab:a8:ce:0e:c4:44:b0:
         42:da:87:92:65:1b:24:35:e8:56:32:5b:90:13:06:dd:aa:a1:
         00:02:7b:f6:25:a2:0d:d0:28:cb:76:27:10:d3:04:67:ff:10:
         68:74:5a:e4:47:60:2e:28:d4:26:5f:de:2c:53:ce:e7:d1:a3:
         89:28:32:6e:de:cc:58:0c:a3:e8:52:fb:e6:ad:02:e6:42:e7:
         89:5f:dd:6d:82:2b:e4:0b:85:bb:15:a8:e6:49:fc:88:a2:ee:
         c4:98:ab:49:18:58:c4:03:96:fb:40:83:a2:84:c1:0e:2e:75:
         83:85:a6:e8:1a:8b:e3:90:71:46:c0:83:ba:e1:0b:5f:52:ec:
         ce:a4:76:a9:17:02:1a:0f:17:25:d6:70:39:8b:23:c1:97:45:
         4b:7b:69:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:52:57 2025 by rpki-client