Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/d12f724d-1d73-3b19-aab4-6b67d3b7ef7a.roa
File:                     d12f724d-1d73-3b19-aab4-6b67d3b7ef7a.roa (raw, json)
Hash identifier:          VqLdzLb/wuCyaBY1v8E2kr7hSbLxBOB6uQIFZNLyvDY=
Subject key identifier:   C9:7E:3E:7C:E2:5D:BB:B1:E4:E0:A7:5A:53:1E:A5:05:BD:25:C4:8B
Certificate issuer:       /CN=e1fca709-9829-483c-a335-41bcfa34ee4e
Certificate serial:       010D0C9F4328584AADF11F9211D5068FD473AD00
Authority key identifier: 6D:D1:1A:73:4B:14:07:01:55:9D:F0:29:6D:F6:5F:6E:BA:0F:27:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/d12f724d-1d73-3b19-aab4-6b67d3b7ef7a.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     62989
IP address blocks:        204.108.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/e1fca709-9829-483c-a335-41bcfa34ee4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/e1fca709-9829-483c-a335-41bcfa34ee4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:1f:92:11:d5:06:8f:d4:73:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1fca709-9829-483c-a335-41bcfa34ee4e
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=73c62dc4-0527-4a0c-9e06-a7e60557e097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:3c:74:ec:53:9c:53:81:54:df:90:62:9c:
                    9b:ca:e4:78:7b:5b:1a:23:07:05:8a:6d:7b:f4:3b:
                    07:b9:22:b9:35:20:90:b8:52:de:0a:b3:ff:75:5e:
                    6d:de:66:28:a9:49:7a:fd:c8:b0:0d:92:e3:ce:2c:
                    70:5d:7a:2c:bb:99:64:e7:e5:eb:4f:e7:19:6e:b9:
                    90:14:4a:0a:74:7e:be:6b:28:ef:b6:ac:c9:30:5b:
                    a8:ef:04:b3:1f:a6:0c:64:c4:65:f0:68:9c:9a:98:
                    74:ea:fa:5f:63:1b:0d:c2:74:dc:18:07:65:06:89:
                    56:d2:91:3e:97:18:9b:63:47:8b:13:e2:a2:cb:c0:
                    ed:d7:db:0b:01:60:cc:02:21:02:74:6c:e0:11:31:
                    fb:3c:00:6d:99:d6:c6:8f:bb:ac:b6:18:64:a0:20:
                    58:2f:70:1f:00:46:e6:da:42:93:13:81:d5:8b:30:
                    c0:d6:d3:b2:38:87:24:65:71:d4:fb:4e:fb:49:cc:
                    ae:48:8f:80:32:f6:30:56:09:d1:78:f0:2a:6c:e4:
                    61:cb:47:c4:4c:fe:c3:a1:b3:0a:c6:86:ee:3f:2d:
                    83:ec:cf:1d:7a:c7:aa:2a:cf:24:34:5c:ed:f0:1f:
                    cd:39:ac:8d:19:e1:b8:61:88:62:46:33:dd:6f:7c:
                    5b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7E:3E:7C:E2:5D:BB:B1:E4:E0:A7:5A:53:1E:A5:05:BD:25:C4:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/d12f724d-1d73-3b19-aab4-6b67d3b7ef7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/e1fca709-9829-483c-a335-41bcfa34ee4e.crl

            X509v3 Authority Key Identifier:
                keyid:6D:D1:1A:73:4B:14:07:01:55:9D:F0:29:6D:F6:5F:6E:BA:0F:27:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.108.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:97:9c:69:18:bd:bb:b5:4f:f9:52:ed:9a:e8:0d:90:05:c1:
         13:d7:d9:4a:04:dd:39:2d:f7:17:bd:e0:a3:fa:f3:5d:20:8d:
         4d:33:6b:c3:43:77:43:b9:ef:23:ed:46:51:02:75:4b:fc:e4:
         45:99:32:3d:38:c9:7e:6f:a5:05:b9:6c:a6:d6:c2:72:79:7d:
         d2:ff:0d:10:80:a4:e4:a5:50:6e:a7:30:e0:a7:cd:54:5b:a5:
         f2:e6:01:ca:f5:34:91:01:41:be:45:2e:b9:5e:76:bc:0b:ad:
         66:31:16:2b:3e:13:5c:88:2d:d4:eb:15:f5:fb:8a:58:f4:3a:
         31:70:30:c8:7d:3a:06:d8:83:5b:99:95:4e:61:c9:b7:80:b5:
         13:03:68:6a:6f:5e:4e:11:f7:cc:1c:f7:af:92:78:f2:c9:81:
         8e:13:cd:63:b6:4e:d1:ba:05:bc:cb:04:7e:89:16:d1:58:f4:
         c9:c0:41:9a:9f:c2:df:cb:6f:8b:3a:85:06:a5:93:1a:7c:be:
         05:55:f6:1c:5b:17:37:89:5e:e8:9b:91:62:b5:41:41:7b:90:
         a7:27:af:c7:5d:aa:b8:68:18:5e:63:ce:70:f6:88:fa:a1:fc:
         ed:b1:7f:54:a9:10:58:55:83:a9:08:be:97:e6:7f:25:21:eb:
         6d:3c:ce:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 3 00:43:18 2025 by rpki-client