Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0ec188d-bb67-3d7c-bbff-eda5c4669c3f.roa
File:                     a0ec188d-bb67-3d7c-bbff-eda5c4669c3f.roa (raw, json)
Hash identifier:          GD46IQcN1F8PRajSySjs98szt5P67XnrTvHu4cGo1JM=
Subject key identifier:   DC:B6:01:A2:2E:F0:C4:F8:11:DF:3D:E1:63:AF:D9:C6:64:A1:E6:96
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584AD7D11012A4EF0D8ED84A6800
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0ec188d-bb67-3d7c-bbff-eda5c4669c3f.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     20473
IP address blocks:        8.9.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:10:12:a4:ef:0d:8e:d8:4a:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=8a83c772-21ee-4177-925c-851224cfca92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:45:75:8c:45:9b:5e:70:f5:7c:f1:13:35:
                    43:42:74:30:03:79:61:57:26:f3:55:1f:75:33:bd:
                    aa:18:26:5c:89:c8:fb:03:2a:c0:7d:09:9c:b3:aa:
                    73:18:a9:91:9d:a5:9f:81:f2:24:0e:57:0f:de:ed:
                    d8:84:e2:65:b4:b3:07:ff:f3:9f:af:6e:12:9f:d9:
                    8c:0b:36:e2:f0:25:c2:be:49:67:21:a1:30:60:55:
                    6e:8a:e8:ea:fc:e6:ed:84:af:6f:6c:41:80:4f:b4:
                    d9:a5:a6:3c:ad:14:75:21:8a:7d:db:75:01:18:c7:
                    e7:8e:21:cc:d5:3d:71:4b:67:53:9b:e6:45:6a:4d:
                    0c:01:c0:da:4d:36:c5:e8:9c:9c:ff:d1:cf:15:98:
                    5a:34:14:5c:c4:1b:0d:2b:a7:bd:af:25:f0:50:91:
                    88:29:54:65:f8:c0:70:2b:37:66:d6:94:51:fd:7c:
                    59:eb:8f:21:9f:30:8d:87:1e:bf:59:ef:6b:8f:7b:
                    6c:ff:78:66:4a:86:2e:e4:44:0b:6e:84:f3:40:62:
                    e5:32:7c:14:39:06:f3:06:a0:54:f7:b2:08:d1:1f:
                    82:32:aa:96:88:74:3d:bc:41:f1:f1:4a:b6:41:6a:
                    ec:24:22:0c:9c:c9:d4:90:56:2d:0e:c7:e0:57:b9:
                    c7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B6:01:A2:2E:F0:C4:F8:11:DF:3D:E1:63:AF:D9:C6:64:A1:E6:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0ec188d-bb67-3d7c-bbff-eda5c4669c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.9.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:83:74:6a:f8:ce:b2:43:94:c6:29:35:be:8b:ae:81:89:ac:
         a9:9f:45:75:4e:de:a3:4d:51:a6:80:0f:3c:c3:02:a0:5e:48:
         c0:66:da:85:32:07:1d:7e:bf:b9:df:d6:02:de:fe:47:14:c1:
         f5:29:1e:d4:43:b8:01:53:4e:f2:1c:df:3d:5d:5d:99:9c:ac:
         d1:e0:e7:4e:e0:c6:16:78:b6:f6:32:7e:67:e8:2a:38:31:58:
         c4:75:25:7f:b2:8d:1e:f6:35:e0:97:32:de:75:7b:ac:7c:85:
         a8:1f:fe:52:4f:a3:36:b2:b9:b4:3d:65:81:da:24:12:40:f4:
         ce:d3:9d:71:74:f4:45:a0:f8:b7:d0:7b:8c:0f:51:2c:39:b5:
         cd:0e:87:d6:7c:e3:b6:89:29:05:dd:8d:d3:94:28:84:7f:70:
         32:8e:94:96:23:68:82:2d:54:79:ab:e0:6e:0a:77:fc:02:e0:
         85:08:41:d2:b3:3c:9f:60:63:76:42:45:01:1c:ea:58:4b:73:
         97:e2:6f:70:49:ae:ed:92:d2:dd:07:c4:8c:ee:66:f3:24:33:
         bc:c3:6c:b6:9f:1f:ed:ee:b3:fa:62:38:8d:22:04:90:1e:b1:
         89:88:84:1d:b6:02:ba:ca:9d:e9:2b:a2:a4:04:6e:e5:bb:f7:
         f7:d3:11:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:02:46 2025 by rpki-client