Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/fbe03f0d-2592-32d1-9e8e-50bd46f95a2e.roa
File:                     fbe03f0d-2592-32d1-9e8e-50bd46f95a2e.roa (raw, json)
Hash identifier:          dsIfpiQDkyY6tpdezry1tA66069NB7pI6Zjrf7PuB6U=
Subject key identifier:   FE:B0:39:45:B8:3F:3F:6C:F7:4D:BD:7B:EE:FE:87:B8:DA:31:76:3B
Certificate issuer:       /CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
Certificate serial:       010D0C9F4328584A6AF08F8DA8EA55246DB0DD00
Authority key identifier: 58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/fbe03f0d-2592-32d1-9e8e-50bd46f95a2e.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     20473
IP address blocks:        162.208.108.0/22 maxlen: 24
                          2604:ab80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:8f:8d:a8:ea:55:24:6d:b0:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=b2aa04d7-e2c4-4905-b11a-bd6c42ce9f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ef:4b:75:9e:3a:10:49:6f:78:a2:90:a8:0e:
                    ff:f2:c2:15:64:b5:e1:a3:6e:8f:d8:63:b8:d9:02:
                    59:f7:ab:4b:2f:6d:c1:ef:1f:95:79:4a:c6:22:d6:
                    8a:7b:4f:b1:4c:ea:97:84:af:ce:20:97:d5:a2:17:
                    54:98:95:90:58:29:19:25:5a:98:49:86:e8:57:3a:
                    4c:95:e2:83:86:91:88:d2:55:ea:21:f7:ab:62:cf:
                    86:bc:be:5c:5d:23:ef:27:5f:ec:3b:ab:49:6e:c7:
                    28:91:f1:1e:45:e6:79:4c:42:14:f7:a1:00:16:5f:
                    ff:1b:7b:2f:8c:68:53:49:ce:c7:e1:43:a9:e4:21:
                    26:02:97:2e:a2:30:03:81:d8:ab:f0:b9:31:9a:f3:
                    d6:56:f2:d2:00:de:83:23:f8:00:fa:69:8a:32:14:
                    64:26:1a:f1:a4:34:fe:5e:eb:35:25:08:ab:a3:01:
                    a6:16:67:fb:1f:f6:1d:df:49:74:f3:86:58:eb:3c:
                    60:27:f1:73:d0:8f:12:e8:bb:54:f1:d1:03:bc:1f:
                    32:03:27:a8:0b:78:b8:ff:0a:ac:65:4a:26:b7:b9:
                    4c:c4:0c:2c:19:3b:05:70:f2:94:5b:ee:7b:d1:f6:
                    c5:19:2d:51:69:c0:8e:51:10:a6:2a:35:0c:e0:6f:
                    38:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B0:39:45:B8:3F:3F:6C:F7:4D:BD:7B:EE:FE:87:B8:DA:31:76:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/fbe03f0d-2592-32d1-9e8e-50bd46f95a2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl

            X509v3 Authority Key Identifier:
                keyid:58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.108.0/22
                IPv6:
                  2604:ab80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:cd:9e:52:b7:67:af:c3:15:1e:87:b6:ad:0e:5c:14:75:62:
         8e:b7:dd:53:e5:59:5f:ff:82:bd:84:d4:3d:78:b9:6c:bb:01:
         15:b2:0f:84:cd:7a:e0:82:5e:f6:42:7f:fd:65:86:66:b0:61:
         48:38:bc:e6:12:ff:ee:f7:bb:bf:8f:52:03:31:cf:e2:9c:7e:
         e0:4a:ba:59:29:65:09:1a:30:8b:f0:05:0f:5e:68:ee:3a:03:
         86:95:f2:81:a6:1b:49:85:96:4c:0a:81:32:68:8a:cc:49:32:
         20:77:60:3d:de:fa:3d:0e:bf:21:c0:84:14:3c:5f:1a:e7:b3:
         e8:5f:a6:da:7c:53:fd:94:4f:19:85:c3:9c:0a:87:5e:d7:49:
         f4:db:49:79:2e:f4:94:9f:40:35:8f:f5:22:29:d6:55:46:31:
         c5:c3:21:a1:b1:45:05:9d:60:80:80:1a:d3:b1:16:71:29:bb:
         dc:a1:00:b2:fd:0f:d7:dd:93:02:8a:99:e8:c9:42:15:fa:19:
         5f:53:b2:c8:70:7d:85:38:7a:1f:f9:86:19:63:76:56:fd:87:
         07:7d:4e:bc:c0:48:dd:dc:8d:66:e7:5b:4a:ae:48:e5:7e:d4:
         5a:bb:02:d2:87:48:39:d7:ef:50:05:78:a2:e7:fa:9f:ad:b3:
         f1:56:7e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:08:08 2025 by rpki-client