Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9bb5294b-190b-3aed-bb82-bf3c8ca57e57.roa
File:                     9bb5294b-190b-3aed-bb82-bf3c8ca57e57.roa (raw, json)
Hash identifier:          OQT69CzEb+9GdtOA+Lm+49reJ2Mkq6OWN0C/HJ6odOI=
Subject key identifier:   10:D2:17:62:88:7C:04:21:A4:2E:32:3F:37:DF:6B:FB:71:D5:2B:88
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849B39D43B655BA57318E3C35C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9bb5294b-190b-3aed-bb82-bf3c8ca57e57.roa
Signing time:             Wed 30 Apr 2025 21:00:23 +0000
ROA not before:           Wed 30 Apr 2025 21:00:23 +0000
ROA not after:            Tue 29 Jul 2025 21:00:23 +0000
asID:                     0
IP address blocks:        208.82.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b3:9d:43:b6:55:ba:57:31:8e:3c:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 30 21:00:23 2025 GMT
            Not After : Jul 29 21:00:23 2025 GMT
        Subject: CN=ce956e84-1e23-4ba4-ae78-34097bf8aecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:56:e5:a5:2b:ef:42:a3:eb:67:05:f7:5a:c4:
                    ff:8d:a0:f2:00:e3:c2:db:c4:3c:6e:4e:48:15:3f:
                    46:b0:59:c7:63:de:f3:87:a4:d2:df:a8:88:f9:0e:
                    42:0c:5e:27:34:4c:4e:f7:77:ba:26:42:5c:0c:2b:
                    2e:89:78:89:89:aa:d5:33:79:c2:47:b0:77:f9:5c:
                    1f:88:e3:1f:3e:80:5d:cb:b9:87:7e:eb:bd:df:c3:
                    13:c6:db:6b:54:e8:0f:87:a7:ab:6c:4c:e0:37:53:
                    79:fb:29:1a:47:da:4b:ec:ce:63:3a:8f:89:e6:ad:
                    a0:15:ee:b6:f5:bb:04:ea:01:47:36:38:5d:dd:c0:
                    f8:be:f5:83:80:43:46:49:a3:23:44:df:63:10:c5:
                    e2:4d:68:32:57:94:72:34:42:2a:19:e3:ea:5a:2e:
                    c3:f7:dd:cf:39:b1:09:95:be:37:d2:d4:81:6d:16:
                    f9:4b:b0:7c:81:f7:c5:63:2f:5c:42:d3:5f:ad:ae:
                    a4:c5:01:ea:40:52:bc:4c:91:94:ff:89:1b:cf:56:
                    2b:94:23:44:95:e9:09:1e:31:72:86:27:ad:95:c6:
                    d9:8c:86:ec:71:28:e5:2b:b3:e0:5c:14:8d:5e:bb:
                    20:9d:7a:4a:dc:79:c6:a1:c1:5f:c4:3f:58:53:f0:
                    43:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D2:17:62:88:7C:04:21:A4:2E:32:3F:37:DF:6B:FB:71:D5:2B:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9bb5294b-190b-3aed-bb82-bf3c8ca57e57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:9d:e2:d0:52:2d:91:5a:9b:99:39:df:ad:cf:31:fe:7b:34:
         e9:97:63:54:63:95:c6:02:73:7b:26:94:b5:e9:e1:60:e4:45:
         b2:e3:ac:d3:da:de:b8:bf:aa:e8:fa:77:67:ca:80:48:77:89:
         22:b9:b4:86:61:43:a9:d3:94:56:07:1e:80:be:9f:6d:65:98:
         8e:fd:4c:3b:92:d2:f0:56:c8:f4:25:f5:0f:13:12:09:00:67:
         1b:6e:a6:7d:47:10:de:ac:1f:68:63:87:4b:37:74:63:1c:3e:
         04:38:99:e3:03:74:43:b0:19:4c:73:4a:81:d6:94:fc:59:c5:
         9c:7b:fc:16:3a:c8:c9:57:84:22:ea:bd:aa:3f:4a:14:e4:d1:
         ba:09:9c:79:d5:c2:97:23:92:3a:a3:59:7b:7b:46:0b:f2:1e:
         af:29:54:38:ef:a5:2d:67:78:a1:35:31:f6:e2:15:2c:37:e8:
         7d:38:3d:ec:66:d6:66:2d:3d:dc:6a:11:99:e8:64:f6:da:01:
         06:4f:7c:a1:3d:cb:5f:6c:78:15:b2:18:c9:e0:02:ac:c3:ec:
         d9:e9:94:a8:01:9d:ab:06:6a:92:bd:b3:34:13:d6:a0:73:a3:
         c3:d0:79:16:68:c6:0a:37:72:c3:77:c1:80:22:9a:77:0f:b5:
         57:12:52:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 03:14:36 2025 by rpki-client