Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/87c9a5e0-ee78-3dae-bd2f-6fc59efd3ed9.roa
File:                     87c9a5e0-ee78-3dae-bd2f-6fc59efd3ed9.roa (raw, json)
Hash identifier:          tKrqF6vOocFaIydC8cHx6PIvNqNYKC+6ao+wE6d9MUU=
Subject key identifier:   7B:DD:B2:FC:53:6C:51:5F:1E:5D:35:35:26:1E:3D:2E:85:E4:6F:7B
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F432858495D896730C51A5C181D201D80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/87c9a5e0-ee78-3dae-bd2f-6fc59efd3ed9.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     22652
IP address blocks:        208.84.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:67:30:c5:1a:5c:18:1d:20:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=dc321ee6-530a-4363-99db-cada6819e416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ba:80:fd:10:39:3e:d8:03:93:fe:c2:23:71:
                    06:d2:fa:c6:57:0b:06:6c:7a:80:4a:74:be:6d:4d:
                    24:e0:3e:95:eb:3a:26:ee:ac:93:f9:b4:72:11:5c:
                    9d:23:c8:eb:f6:69:21:b4:0a:53:a6:c7:6a:1e:ef:
                    14:ea:02:f8:0f:1d:42:dd:e5:ee:78:78:2f:fb:01:
                    87:3f:f2:7f:67:6b:88:b6:7e:bf:92:10:c7:cf:c8:
                    a9:9f:bf:8d:43:10:3b:18:54:9b:3b:21:f2:f8:48:
                    bf:53:f5:2f:c4:20:62:bf:9b:69:9b:8a:56:fd:d9:
                    9d:a7:9b:74:3e:d4:ec:43:39:7c:97:22:b1:19:cd:
                    60:7b:9b:87:2e:0a:e3:71:74:27:eb:d5:02:d6:37:
                    88:78:fe:b4:92:9f:68:7f:98:99:87:d7:b6:66:2e:
                    7e:81:6a:91:19:22:b3:3d:2a:fa:3f:89:a7:24:ec:
                    0c:34:70:73:40:ed:50:36:47:9c:d8:66:fc:27:bb:
                    be:67:c9:02:1e:f6:25:5d:e2:90:42:ef:bb:fd:b5:
                    24:6e:d9:47:3a:5b:70:64:0d:25:6a:de:66:47:5d:
                    df:48:1a:31:f5:50:67:6c:5e:43:4a:51:cc:bd:1f:
                    19:24:e0:ff:c3:fb:ff:af:22:ad:cd:30:50:5f:57:
                    60:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DD:B2:FC:53:6C:51:5F:1E:5D:35:35:26:1E:3D:2E:85:E4:6F:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/87c9a5e0-ee78-3dae-bd2f-6fc59efd3ed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.84.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:e3:2c:6a:fb:4b:21:b7:ca:b2:b8:db:89:f2:87:45:c6:f3:
         2f:24:4c:f5:23:8f:bf:42:06:63:a1:5e:74:b1:b6:eb:b8:7c:
         e0:9f:17:99:df:05:f5:74:b9:a5:49:d6:78:c3:1a:62:f3:73:
         b9:f1:8b:4b:5e:c9:a4:f7:da:3b:a9:1e:4f:11:1c:2e:aa:d9:
         8a:2d:67:23:12:e2:ab:9d:7a:d8:ba:1b:99:7e:de:b9:5d:fd:
         cb:11:13:0e:44:77:20:7b:39:6b:c3:42:15:04:cc:06:d2:ba:
         b8:57:af:ba:8b:a9:18:e8:17:5c:60:38:01:0e:33:c3:46:01:
         ab:0a:2e:83:c5:63:06:b8:4e:8f:e0:a2:91:e7:4d:b6:14:ac:
         68:23:b3:57:c3:da:f9:56:a4:86:53:94:91:2b:b0:7f:2d:87:
         11:75:08:7e:2b:69:8c:a5:68:6e:8d:34:9d:be:4c:4f:54:91:
         ab:0f:8b:65:fb:6a:84:7b:92:b9:09:f4:ea:0b:85:bd:9a:51:
         d7:95:5e:3e:a3:96:99:29:5a:92:89:ce:27:c3:c2:55:59:22:
         8d:d2:d6:9d:3d:ab:bc:1e:b6:99:15:9b:83:ba:d0:5f:b8:7f:
         6f:23:52:b5:36:b3:2c:90:2e:e1:68:dd:42:2d:73:65:7f:07:
         04:82:8d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:01 2025 by rpki-client