Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/3cf9dcb4-faa7-3d21-a4d5-84a285d7655f.roa
File:                     3cf9dcb4-faa7-3d21-a4d5-84a285d7655f.roa (raw, json)
Hash identifier:          /EbTVarOe8ID6bxJZe8JSet4eEcwI5VgBer9xZVKL0M=
Subject key identifier:   3D:F2:AC:DE:76:3C:3B:D3:7B:42:E2:DD:17:BF:14:40:F3:A6:2D:39
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584A9D30EADABAEA32E30ACA8300
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/3cf9dcb4-faa7-3d21-a4d5-84a285d7655f.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     23470
IP address blocks:        208.67.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:ea:da:ba:ea:32:e3:0a:ca:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=ccc32139-dec4-4845-9392-874794f416f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5d:13:2b:e4:bf:b4:25:31:6c:ac:0a:8b:3f:
                    da:c9:d9:4c:c9:26:22:5d:52:dd:32:ee:4b:e3:17:
                    c0:1c:8f:89:3f:f1:ae:02:26:1d:f6:7a:7b:53:8e:
                    a8:34:55:12:3d:75:8d:bb:9d:b1:99:24:1f:e6:d4:
                    06:2e:fe:31:a3:ba:6a:80:61:3b:da:db:3f:03:68:
                    9f:c9:97:10:c7:3a:94:79:20:81:cc:61:94:f3:7e:
                    71:3e:00:15:ca:27:a5:6a:87:ea:01:4d:3f:bc:fd:
                    6e:3e:0a:b0:d4:38:f0:1f:2e:19:c9:22:2e:42:30:
                    cd:e1:1f:63:58:8d:fe:08:66:d9:3a:2f:57:8b:7e:
                    09:2c:cd:b2:aa:3b:22:ee:a4:e6:c5:56:96:2d:85:
                    31:50:1f:4b:b9:d7:5a:bf:98:17:b2:29:54:e4:2c:
                    5e:ff:62:47:86:d0:25:f1:3b:f4:e5:e2:d9:be:27:
                    59:85:78:b3:f2:50:02:af:00:65:6b:92:1c:0f:6b:
                    75:c8:71:18:1a:6a:87:16:43:73:af:51:26:a9:75:
                    3f:93:49:26:09:cc:9b:65:79:b9:4a:bc:d7:a5:ee:
                    c1:30:27:d8:19:ed:24:db:b8:cb:de:dc:0e:48:48:
                    26:c1:0d:d7:78:94:d5:61:cd:b4:c1:1d:db:17:54:
                    02:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F2:AC:DE:76:3C:3B:D3:7B:42:E2:DD:17:BF:14:40:F3:A6:2D:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/3cf9dcb4-faa7-3d21-a4d5-84a285d7655f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:bf:84:5f:90:d3:52:d5:f8:5b:28:56:cc:12:cd:a5:d6:3d:
         1b:5d:f0:47:9c:cc:11:a9:fa:c2:8f:11:de:c4:bf:0c:44:a7:
         69:a2:60:a9:f1:9f:c3:79:41:0a:69:00:92:91:3c:35:35:68:
         cf:0f:2e:37:73:a8:60:8b:88:9b:30:11:ca:94:72:37:27:f9:
         3c:8c:a4:40:4f:50:85:f8:c8:32:86:ad:02:06:23:f8:d0:68:
         bf:12:8c:c1:84:9d:e0:28:71:12:1e:f4:0f:26:a3:6c:91:78:
         1f:76:3a:53:d6:59:bc:4f:59:57:79:e4:d0:04:2e:97:6e:47:
         2a:d3:01:0b:d1:9a:a0:2c:2b:53:24:cb:49:12:52:32:62:79:
         8f:36:65:ae:c5:d2:6d:00:ea:cd:6e:38:d0:ed:2a:cb:bd:fc:
         9c:ab:47:ae:e4:4c:c0:da:0e:fa:df:03:3d:2b:e2:1e:08:50:
         75:09:df:ac:3c:30:55:da:15:e2:df:ce:ce:6d:ef:e4:d2:c9:
         90:fc:b2:4b:dd:9d:f4:4c:4f:40:43:df:88:e6:47:46:e8:3f:
         bd:00:c7:51:30:d3:07:f9:94:15:99:9c:0e:18:a0:91:f0:ed:
         6a:e6:68:7e:e4:3e:22:d0:87:9e:40:1a:81:5d:66:9c:20:13:
         db:99:28:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 13:47:42 2025 by rpki-client