Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/696be498-e165-346f-bdfa-eba3ceb26950.roa
File:                     696be498-e165-346f-bdfa-eba3ceb26950.roa (raw, json)
Hash identifier:          Bm098CC6b9bResJ8RTlSSHNiDqlukiMIzU0vNl+yk+4=
Subject key identifier:   09:E3:53:63:F3:D8:0D:DA:8A:F0:E2:58:C6:69:63:6A:23:40:E6:35
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584AF7EBD516510D4E85F1BCDA40
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/696be498-e165-346f-bdfa-eba3ceb26950.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     36511
IP address blocks:        208.103.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:d5:16:51:0d:4e:85:f1:bc:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=4ce6014c-c672-4fe9-bdbd-d12a134291f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c8:d8:82:14:1b:3e:c7:5c:1b:d7:ac:95:7e:
                    e9:17:f3:97:7e:84:86:1b:9b:ec:18:61:b2:e3:f2:
                    38:03:07:e4:80:d8:fb:cf:5f:1e:98:ae:05:05:cd:
                    d3:59:13:c5:3b:3e:74:4c:31:96:b5:80:bd:54:ca:
                    f6:71:34:d7:fb:51:c2:1c:79:42:fb:d4:74:e5:5a:
                    d6:f4:bf:37:bd:86:72:0d:df:9e:8c:45:3a:8d:29:
                    d8:e1:08:9e:eb:4c:2b:03:f5:4f:f2:56:d5:ac:a1:
                    66:3f:80:12:a9:8e:c2:fd:58:75:92:eb:50:24:93:
                    5b:56:4a:79:0e:37:10:8e:8c:fa:87:a9:d1:04:7f:
                    18:c7:42:19:43:e9:a6:64:b3:ed:29:df:5a:ae:29:
                    8e:d3:61:79:1d:8c:24:bc:cf:c3:89:f6:79:af:10:
                    10:fc:91:85:2f:54:1f:1a:32:28:90:d9:52:f9:e0:
                    72:d9:da:6e:48:4e:9a:30:65:1d:3a:fc:8e:a2:93:
                    cb:00:2b:5b:cb:dd:93:a7:d7:2a:fb:ae:3d:0d:51:
                    eb:3b:01:8a:1f:96:08:60:73:79:33:47:08:17:bf:
                    e4:2f:87:76:fe:f2:07:68:16:8d:a8:52:08:87:18:
                    4c:34:10:2f:ac:fb:3c:51:b4:63:9a:3f:e4:49:23:
                    10:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E3:53:63:F3:D8:0D:DA:8A:F0:E2:58:C6:69:63:6A:23:40:E6:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/696be498-e165-346f-bdfa-eba3ceb26950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:46:32:b5:4e:fa:26:50:c7:a5:58:2f:ad:53:fa:5d:58:4a:
         d5:90:6a:10:55:7f:80:bb:29:e1:93:9a:be:f8:80:e9:db:3b:
         06:f5:3b:39:3d:e5:ab:ea:2b:29:d6:c1:12:fe:e9:a1:42:f6:
         0b:60:57:77:f8:c6:cf:27:f8:5b:ba:f1:88:0b:bd:30:e6:3a:
         5b:ec:3d:e9:c1:ec:26:da:5a:86:45:71:2d:da:9a:32:3e:26:
         3a:7c:ce:94:9a:ce:fb:88:15:c4:de:39:34:1e:1a:83:e6:eb:
         f1:44:a0:ae:67:9f:93:51:e5:8b:7d:7a:7a:d0:5b:8b:b4:ec:
         9d:b3:4a:1a:bf:68:4f:16:b7:c9:ac:cb:da:20:e0:75:76:41:
         0b:01:58:a6:ab:57:8f:4b:fb:a9:5c:58:30:38:fa:a8:43:b6:
         6c:45:b8:9a:91:b0:10:69:e8:af:c2:3c:7d:07:4e:43:25:60:
         32:b1:c6:2d:b9:ac:95:4d:7d:92:72:55:a3:c1:f4:3c:db:b3:
         56:52:7e:35:58:59:3e:5a:00:32:44:a2:7d:35:77:33:80:4e:
         6d:11:87:09:15:4d:f9:24:28:76:83:c1:47:26:f4:3b:16:6b:
         bf:d6:f6:e5:44:f4:82:4b:3a:55:e8:c8:b6:e7:ff:44:87:58:
         65:90:84:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:05:18 2025 by rpki-client