Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/8e4911db-d879-3bac-a73c-6c3896f0b3ca.roa
File:                     8e4911db-d879-3bac-a73c-6c3896f0b3ca.roa (raw, json)
Hash identifier:          fG2UEVSIZm+K4ydXmvzmwrwuDuOGMtfUv3IDS4ZpJA8=
Subject key identifier:   88:8D:86:AD:77:4C:F8:4B:26:5B:0C:37:4E:CD:34:17:56:FE:93:66
Certificate issuer:       /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Certificate serial:       010D0C9F4328584B2E5C4373726B063D353F1680
Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/8e4911db-d879-3bac-a73c-6c3896f0b3ca.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        204.89.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:43:73:72:6b:06:3d:35:3f:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=db03fcb7-6215-400a-bcd5-f1bfdb40a9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:99:e7:67:c8:df:3c:62:0d:29:76:52:57:58:
                    fe:51:0a:1e:a3:2c:48:2f:91:1c:93:4d:88:cb:68:
                    54:30:e5:3d:d2:31:74:2f:41:80:11:69:a9:ff:c2:
                    a3:c6:0e:22:48:26:5c:57:bb:09:13:50:a3:8b:5c:
                    1e:17:9a:dc:c8:d3:a3:0b:fc:3b:41:cd:c7:5f:d5:
                    44:36:e5:d9:8d:a7:cf:3f:f8:c2:25:f2:a1:8b:1a:
                    d5:96:d3:b3:dc:ef:e5:fb:d8:48:99:7f:7e:98:02:
                    9b:60:76:4b:7d:9c:50:6c:b4:83:26:5b:95:c7:47:
                    46:10:03:1a:4e:2a:90:c3:84:85:11:cc:54:ef:dd:
                    79:88:3b:c3:18:32:cf:1d:92:89:0c:fe:3c:ed:7c:
                    ad:89:8c:37:5a:1c:3c:18:0c:77:2e:86:01:85:40:
                    94:0a:ef:a9:65:16:d7:fe:da:3e:11:12:d9:85:e4:
                    b6:7c:0f:c3:92:f8:0d:43:25:a0:cd:c5:2f:c7:55:
                    59:fe:67:15:73:1e:2e:6a:c4:c3:38:6c:c2:84:07:
                    85:0b:ec:8e:39:a0:6a:4f:97:84:71:a8:d8:06:fa:
                    38:ce:ad:11:54:c2:57:59:83:68:ed:d1:81:78:da:
                    17:45:1a:bd:13:8f:f7:12:18:dd:9b:84:e3:e2:d8:
                    68:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8D:86:AD:77:4C:F8:4B:26:5B:0C:37:4E:CD:34:17:56:FE:93:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/8e4911db-d879-3bac-a73c-6c3896f0b3ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl

            X509v3 Authority Key Identifier:
                keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.89.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:24:62:e1:e2:b8:ed:be:5d:cf:2a:5c:0e:a4:75:32:7a:43:
         d6:02:ac:16:f4:03:6b:66:40:24:43:4d:c9:5c:57:85:9d:69:
         8f:c5:ad:e7:3b:e7:3f:9f:da:b2:d1:2f:31:aa:e4:9f:26:d9:
         d8:b9:86:95:4c:1c:61:73:0c:75:81:b1:51:d7:5f:55:be:1c:
         95:3c:48:c1:7a:a6:57:12:ae:de:35:7c:0f:9c:d6:30:68:64:
         48:d6:65:5b:d4:9c:06:80:95:45:ba:66:c1:b7:b0:2e:43:97:
         04:a2:1c:38:9d:57:7e:76:26:12:f4:0a:d6:6e:6d:aa:8b:d8:
         65:5f:aa:2f:e0:f4:44:33:12:99:c0:71:57:b7:7f:a5:d3:5d:
         b1:a0:9c:07:f4:dd:56:39:83:24:d0:b4:2e:e7:9b:b6:8c:b3:
         4d:6d:5a:6b:44:d6:3e:ad:5d:ef:72:e2:76:61:c1:9e:4f:6e:
         d0:49:e6:b5:58:10:41:75:c4:c0:0f:c8:d8:64:41:86:86:0e:
         16:a6:4f:c9:1c:78:cc:13:02:b4:74:e2:02:14:ff:13:e7:c4:
         c9:aa:86:a4:11:90:8f:36:7c:e9:77:c8:a0:90:1a:c8:85:40:
         5b:f6:95:b1:d2:e2:2b:e8:c5:3f:8e:36:a8:d4:04:8b:19:41:
         78:5b:2f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 20:34:17 2025 by rpki-client