Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/ce26f259-c24c-38d7-9d2a-d6b838c767c4.roa
File:                     ce26f259-c24c-38d7-9d2a-d6b838c767c4.roa (raw, json)
Hash identifier:          7gN+RiryGiLtdLOlxcIDbQCN/LFbwlCBC4IIRrL7f9s=
Subject key identifier:   34:5E:5F:F2:BD:03:EC:B0:2E:0F:EE:FC:7B:17:93:43:09:32:B6:A8
Certificate issuer:       /CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
Certificate serial:       010D0C9F4328584A6AF08F42D7CBE1A2726D1AE0
Authority key identifier: 58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/ce26f259-c24c-38d7-9d2a-d6b838c767c4.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     23535
IP address blocks:        162.208.108.0/22 maxlen: 24
                          2604:ab80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:8f:42:d7:cb:e1:a2:72:6d:1a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=0475ee52-d5c3-439b-9070-38d8f0eb4a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:b5:60:0b:27:5d:18:fd:75:8b:07:04:8c:
                    3f:f2:60:a3:64:e2:91:c1:50:d7:94:f5:20:c3:e6:
                    5c:f9:03:64:c8:9f:75:4c:e4:47:a1:5c:56:68:8c:
                    79:a3:ef:aa:ed:91:6a:ab:58:e4:8d:12:f5:5f:84:
                    f0:f9:ca:c7:8c:82:09:6d:17:fe:e6:8a:68:b6:a7:
                    52:89:5b:e8:0d:22:33:4a:5a:70:69:ee:2d:73:2e:
                    7d:97:e2:86:1f:a4:13:a1:44:2f:35:26:06:cd:a5:
                    18:3c:93:9f:60:1c:c0:d1:a8:5c:3d:70:28:fd:03:
                    ee:ff:67:d0:1e:b1:45:03:69:d3:23:92:37:f2:60:
                    37:71:7f:54:84:75:8d:45:6f:eb:ad:35:12:ad:ea:
                    81:be:e8:ef:e2:c6:24:64:b2:10:3e:83:ff:f2:b3:
                    30:c9:a1:13:bc:c7:b5:d4:4e:61:6c:d9:e5:c2:76:
                    43:6c:7d:bd:e1:17:4c:78:00:1d:0b:20:0e:32:e7:
                    32:00:58:8e:e9:50:b9:0c:b2:cc:4a:a2:0b:85:38:
                    d4:db:ff:db:f7:06:69:e2:a2:a1:a9:d6:2e:0a:16:
                    6b:4b:5d:56:04:12:d7:94:0e:c5:dd:0b:01:90:8d:
                    b4:3a:03:00:d6:f3:cc:35:c2:68:0f:f1:6f:01:54:
                    3d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5E:5F:F2:BD:03:EC:B0:2E:0F:EE:FC:7B:17:93:43:09:32:B6:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/ce26f259-c24c-38d7-9d2a-d6b838c767c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl

            X509v3 Authority Key Identifier:
                keyid:58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.108.0/22
                IPv6:
                  2604:ab80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:80:33:2f:bd:96:ab:c0:09:38:b5:49:e3:d0:9e:86:8e:4a:
         e3:ca:9f:69:2c:71:57:e4:bd:19:bc:ba:06:14:f8:52:65:b3:
         ab:c2:a5:1a:21:f8:04:a4:7b:b3:dd:73:b0:8b:f3:d1:a7:94:
         93:0a:7d:1e:4e:67:91:0b:2a:ab:93:1f:6d:66:01:0d:72:6e:
         61:2a:df:49:b4:1e:a4:b1:d5:af:b3:48:d0:cd:2b:db:df:a6:
         25:1f:4d:c2:83:fa:d9:20:12:c7:fa:33:0c:77:64:fd:0e:30:
         b8:8e:5b:30:d8:f4:8a:79:36:cc:92:13:3a:a3:ec:78:24:a7:
         10:92:c4:aa:9b:25:a8:88:cf:c1:8f:30:7f:ce:d1:8b:72:fb:
         c5:09:a5:7e:ef:15:6d:d4:b6:cc:39:20:da:37:0c:95:76:b7:
         07:f1:35:28:d7:4b:ca:24:bd:26:e6:5e:32:aa:82:98:86:0f:
         9f:b6:d2:f7:e3:9b:9f:c3:5a:e1:4a:81:c2:43:a6:04:49:fc:
         63:de:17:cc:b9:03:b0:99:46:81:72:03:c1:c9:e2:00:78:9f:
         84:9d:1f:3f:5b:4f:33:bb:7c:f7:0d:04:10:d6:7c:77:dc:f1:
         2a:60:f0:ca:49:b2:99:70:a3:da:5c:76:ff:bb:61:35:dc:2a:
         74:ed:36:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:21:48 2025 by rpki-client