Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa
File:                     4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa (raw, json)
Hash identifier:          CLe96RzW4IEK08FPAb8XcDGDSzUec70hhpog/m/tdz4=
Subject key identifier:   82:67:01:CB:34:44:29:F5:E4:6B:45:7D:05:BB:92:4F:F0:8B:8A:15
Certificate issuer:       /CN=0c924434-62f4-44d5-b440-476f5c675f3d
Certificate serial:       010D0C9F4328584A5335A0A8FAEED7934ED9E900
Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     46878
IP address blocks:        208.81.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:a0:a8:fa:ee:d7:93:4e:d9:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=c39e522c-200c-4c68-a999-3f98ca868fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e0:3e:56:14:14:bf:9c:c5:a5:f2:b1:8f:85:
                    18:bf:d0:ed:58:8c:6c:1f:cb:02:e0:75:9d:b0:d1:
                    f2:ed:89:fb:bc:c6:4d:85:e5:81:84:3b:71:88:8e:
                    69:ec:58:e8:2c:3b:c8:92:0a:3b:7b:e9:3b:9e:0d:
                    be:c2:da:36:95:aa:42:7a:01:7e:d3:86:73:74:80:
                    40:f2:80:29:19:48:85:1f:3a:90:0c:f6:9d:58:59:
                    bd:8b:24:a9:a2:46:46:95:c6:f9:ab:60:ed:7b:77:
                    28:0b:47:f3:fb:e0:0b:e1:aa:d5:86:1d:6a:95:fd:
                    ee:b9:38:5e:3e:aa:23:d0:ad:d4:b8:27:7b:44:79:
                    5d:12:09:e6:0c:9d:92:54:81:19:78:28:ed:ae:66:
                    52:0f:80:6d:e3:ff:06:ba:fa:f0:69:f6:48:a0:92:
                    0e:33:60:d6:a4:f1:88:5f:35:78:36:56:98:f2:2b:
                    61:47:00:e3:1c:89:33:b9:c0:73:26:49:98:48:fe:
                    8f:59:68:ec:b1:53:95:3a:42:78:84:ce:2b:a6:d2:
                    bc:04:6b:59:3a:d5:e1:1b:0c:fe:45:9b:cb:d7:44:
                    87:c6:6e:49:e1:df:0b:79:10:39:65:0b:d1:60:d6:
                    c9:3a:e6:04:f4:e3:32:dc:fb:c8:d9:ae:e0:58:e8:
                    38:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:67:01:CB:34:44:29:F5:E4:6B:45:7D:05:BB:92:4F:F0:8B:8A:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl

            X509v3 Authority Key Identifier:
                keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:99:f0:e6:37:3d:10:03:e0:43:5d:7b:e4:ae:9a:7e:2c:83:
         3c:1a:4f:b8:96:e9:b3:ba:49:53:0a:06:a8:67:e7:85:0a:39:
         5a:b2:c1:f7:46:0d:59:be:18:43:6b:d7:30:ce:70:5c:2f:3a:
         6d:5a:fc:94:56:2b:9a:22:0e:51:a9:49:26:16:e4:10:47:52:
         c5:e5:4b:da:26:be:0c:ab:de:2d:a0:8b:bb:c7:20:a8:7c:a2:
         6b:bc:f6:da:ff:c4:b3:62:a1:71:6f:6d:29:4d:53:65:dc:74:
         4a:a7:a4:5b:1b:75:49:12:1b:e1:1f:f9:6d:63:ce:47:8d:4b:
         30:19:c9:7c:0e:47:d2:6c:5c:ba:6e:00:a4:c2:66:27:a7:96:
         67:f7:0f:a7:f8:5b:59:25:56:7f:5e:53:e2:ee:0f:79:ef:b0:
         29:d0:6f:1a:57:8a:6d:b4:3d:4a:54:e4:73:40:56:dd:91:ac:
         24:ea:87:ee:b3:b9:0c:f7:52:41:a6:eb:5b:8c:77:e7:5a:65:
         69:01:f6:4b:f1:1e:76:53:8d:8e:c0:56:37:30:69:0b:82:0d:
         1e:38:31:6e:83:03:74:0b:9b:2f:72:39:2e:a8:72:64:b3:a5:
         fb:c8:3a:26:0e:ec:8b:59:48:e1:f0:c9:cd:00:bb:27:7d:08:
         a0:84:f9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 11:00:13 2025 by rpki-client