Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/0dedb216-c5f5-30a9-9a19-7a3dba395f7d.roa
File:                     0dedb216-c5f5-30a9-9a19-7a3dba395f7d.roa (raw, json)
Hash identifier:          dfj3o891gcGB0+wWRHjFCxNNeR1dz6FjmeQGYqCi7G4=
Subject key identifier:   4A:C1:DF:04:01:2F:09:7A:CD:C6:F8:7D:6A:78:77:25:CF:DE:C7:2A
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584AFAB6807CC61EFC6FD4098DC8
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/0dedb216-c5f5-30a9-9a19-7a3dba395f7d.roa
Signing time:             Tue 26 Aug 2025 01:00:32 +0000
ROA not before:           Tue 26 Aug 2025 01:00:32 +0000
ROA not after:            Mon 24 Nov 2025 02:00:32 +0000
asID:                     7018
IP address blocks:        208.123.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fa:b6:80:7c:c6:1e:fc:6f:d4:09:8d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Aug 26 01:00:32 2025 GMT
            Not After : Nov 24 02:00:32 2025 GMT
        Subject: CN=5e899d8c-91f5-4e89-93a0-37e9e1ff5be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f3:61:6e:f4:b5:d2:eb:85:15:57:43:55:66:
                    8e:17:85:98:6c:c3:8c:b5:b9:29:71:05:25:c9:95:
                    2d:64:14:a2:16:6b:dc:cb:5e:8e:ae:d9:ec:85:54:
                    a6:a6:af:7c:4a:71:2a:f9:bf:ca:17:b4:84:e0:88:
                    ef:0f:e6:ad:72:be:c9:9d:d8:a1:dd:62:22:8b:b9:
                    05:cf:4c:1f:3a:2f:d7:c7:6c:c0:c9:29:38:8b:56:
                    18:14:43:e3:28:72:d1:ac:31:ae:ee:20:43:29:9f:
                    8c:bd:3e:6b:b9:b6:4e:8b:2b:84:88:42:d5:6c:0f:
                    be:2e:c6:67:c5:48:a7:e0:23:10:5d:90:39:26:e5:
                    b7:8d:d8:b8:0c:8d:5a:42:fa:7b:83:1c:65:e6:c7:
                    c2:50:1c:69:cd:67:1c:7b:59:8e:25:44:a6:1c:fc:
                    ce:a0:45:93:10:78:02:36:42:99:ed:b0:26:79:36:
                    69:be:56:89:5e:22:62:22:6e:8f:61:df:b6:39:d2:
                    c2:6e:17:bf:8c:11:28:c7:01:1a:79:26:fa:f7:91:
                    16:c2:66:94:20:3d:b9:73:65:b4:ce:dc:0a:fd:01:
                    28:98:30:aa:ad:24:6e:22:99:4d:80:a8:4c:78:a8:
                    23:7f:94:e8:e4:dd:f9:07:e5:82:39:ea:c2:57:8a:
                    1b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C1:DF:04:01:2F:09:7A:CD:C6:F8:7D:6A:78:77:25:CF:DE:C7:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/0dedb216-c5f5-30a9-9a19-7a3dba395f7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.123.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:d3:5a:f7:35:46:5a:06:e1:e8:6c:00:8b:43:4e:f1:e0:9e:
         ce:f2:85:1b:c3:c5:b7:2c:e5:d9:6a:b2:bc:14:b6:92:7b:07:
         92:83:78:78:c1:a8:1c:b0:3e:cd:e7:a7:9d:16:0b:a0:e9:09:
         2f:2e:bc:a8:ea:4c:5b:ed:8a:13:20:3a:a4:e2:f6:21:95:0c:
         bd:bd:e0:7a:6b:89:28:1c:8b:bf:3d:e1:b8:73:40:8e:b1:c1:
         9b:55:94:47:87:d8:6a:d4:13:9a:61:53:07:bd:d2:e8:fe:81:
         a7:36:65:34:20:64:9c:43:55:17:00:87:9e:94:d2:a8:10:98:
         c4:55:bd:9d:0b:8d:46:db:76:b8:41:06:a3:c9:4e:4d:f9:28:
         49:3c:30:95:61:b7:7c:4c:c3:29:4c:18:6f:4b:c3:05:ca:7c:
         33:e7:bf:34:8d:7e:17:71:52:cb:f9:9f:2f:88:47:06:07:59:
         d1:f3:88:80:fd:f9:41:92:f3:83:12:98:e3:3f:72:9d:f4:26:
         9a:9d:38:a9:e4:a1:47:49:1b:f6:59:82:d4:28:ed:e1:11:fe:
         65:f8:18:1a:08:69:5e:ec:c0:0d:88:78:65:b4:fa:3e:0c:63:
         cb:93:aa:9c:dc:9e:ca:75:4a:7a:c6:ed:6c:62:ba:d8:92:c9:
         43:04:10:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:58:14 2025 by rpki-client