Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/ad067239-3490-361f-9eec-c90214e105bf.roa
File:                     ad067239-3490-361f-9eec-c90214e105bf.roa (raw, json)
Hash identifier:          9WulAE6Vl30LJpaZQAN7JqKt178wJBYcFlY1pcbEg+o=
Subject key identifier:   CC:41:FA:17:3A:25:DC:EB:F0:79:B9:71:97:B2:A0:2C:BA:1B:7E:B6
Certificate issuer:       /CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
Certificate serial:       010D0C9F4328584A6AF08FC09D982A5882CF6A80
Authority key identifier: 58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/ad067239-3490-361f-9eec-c90214e105bf.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     36236
IP address blocks:        162.208.108.0/22 maxlen: 24
                          2604:ab80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:8f:c0:9d:98:2a:58:82:cf:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=ae13ee54-d397-4e95-bdf0-649073ae6f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:0a:8b:39:32:12:cc:6a:c5:7f:5c:8b:ee:
                    77:6d:ee:38:ab:65:77:56:0b:d1:c7:1f:1c:7f:54:
                    01:ac:0c:27:39:05:ba:d4:63:97:9f:f6:6b:43:95:
                    53:21:a9:97:74:5e:0d:31:fd:0a:ad:19:e0:ea:b5:
                    d0:12:75:76:c3:f9:dc:0a:92:fb:7a:f2:74:c3:99:
                    e1:b1:58:28:48:c5:16:e6:4a:49:03:c4:ec:b2:19:
                    94:be:d2:e5:9f:73:34:d4:6c:54:84:c2:04:24:b7:
                    1e:58:df:6f:a0:69:1b:a7:90:cc:30:ae:89:ee:ad:
                    a8:17:9b:d0:28:fa:c8:08:59:07:c1:fb:41:6f:c6:
                    23:44:ce:d7:8e:a1:62:d5:e5:70:42:15:2e:9f:71:
                    9c:17:32:88:50:60:6d:6f:5b:c8:2e:33:a3:4b:ff:
                    34:b7:ac:8e:7d:26:e7:ad:fc:5a:e0:c9:0b:5d:25:
                    35:09:23:b1:f1:23:cb:63:be:61:18:ed:b8:7c:33:
                    65:6e:ee:15:d8:76:f7:50:74:86:49:31:9e:16:01:
                    02:42:c2:3c:ed:dd:0e:8c:6f:1d:9a:77:59:80:9a:
                    d0:38:18:e5:9f:81:28:2c:50:4f:75:75:d4:9a:c8:
                    3d:51:ee:6a:a4:f6:fe:e8:70:c9:90:a2:c1:69:e2:
                    e4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:41:FA:17:3A:25:DC:EB:F0:79:B9:71:97:B2:A0:2C:BA:1B:7E:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/ad067239-3490-361f-9eec-c90214e105bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl

            X509v3 Authority Key Identifier:
                keyid:58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.108.0/22
                IPv6:
                  2604:ab80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:04:0c:36:b4:f1:08:1d:68:ca:7c:89:0e:02:97:c9:fd:6a:
         55:09:94:aa:2f:ad:4d:25:32:a1:ff:68:0a:5a:75:05:7a:f7:
         79:f2:32:c4:8b:40:01:f4:54:e3:89:3b:5d:69:ef:91:e5:1c:
         d6:a0:77:2e:b6:7c:3b:bc:42:b5:16:1f:56:ec:78:4c:1f:e3:
         98:f6:29:d5:0b:5e:ef:dd:9c:ce:d0:da:50:0e:6a:2d:df:bc:
         44:4a:0a:5e:63:4c:ff:f1:79:43:31:a5:7c:03:e9:d4:90:ff:
         4e:c4:c0:99:3f:76:bf:5d:a0:68:eb:92:ad:6b:26:e7:e2:5a:
         c2:b6:a8:06:23:9d:f7:5b:fd:4c:93:e7:5a:01:f7:68:35:56:
         e9:73:c4:13:a0:36:1e:9b:c1:8a:45:f9:79:1b:56:24:8e:48:
         61:5f:6c:d0:1e:5b:12:63:21:10:cb:93:da:af:db:00:6c:41:
         a9:95:d6:8c:ae:32:ae:35:dc:e8:32:04:2d:80:a7:7c:96:75:
         4c:6c:81:83:b3:81:8e:4d:33:36:c0:01:10:b3:1b:42:64:3b:
         42:a1:9f:5a:d5:f4:12:a9:aa:b3:31:49:4a:72:f5:40:8c:9d:
         ac:2a:31:bd:48:4a:ca:8f:8f:d7:51:ce:14:9a:dd:c3:d4:2f:
         1d:53:9d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 10:41:12 2025 by rpki-client