Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/df50ff54-fd5f-3806-8854-d7d391cda4ec.roa
File:                     df50ff54-fd5f-3806-8854-d7d391cda4ec.roa (raw, json)
Hash identifier:          UeE0rsTrLAI/M/Yms4REqrB9/CpQGIwdomCSMnvGb2c=
Subject key identifier:   29:64:5F:90:BC:17:77:4D:3D:C7:0A:23:D0:1B:53:1E:3A:4E:09:88
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F4328584A6F2080E6674DE1023EF1BC80
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/df50ff54-fd5f-3806-8854-d7d391cda4ec.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     26211
IP address blocks:        208.56.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:80:e6:67:4d:e1:02:3e:f1:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=fe7acf68-c148-449e-8737-1740a97d3ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0e:ae:45:15:26:5d:ce:c2:6b:46:fb:1c:b7:
                    9a:37:65:cb:20:dc:8a:a3:41:df:00:bd:8a:3a:04:
                    74:26:78:94:20:f8:88:7e:3a:b6:ce:bf:35:7c:72:
                    68:f6:48:75:8c:33:0d:ab:de:27:84:3a:63:a5:85:
                    8e:06:77:a5:f3:5e:07:b8:c5:65:90:c0:b7:e9:45:
                    ca:64:ef:ef:40:c3:c6:65:4b:77:4a:12:0c:86:61:
                    ff:0b:82:1c:35:7e:b8:11:61:f8:cf:d1:13:34:f9:
                    87:71:f7:82:8e:fb:63:be:c5:2b:96:e0:0b:4d:7a:
                    e1:ec:6d:11:d0:dd:e1:cf:56:0a:52:a3:c7:b4:9c:
                    c4:4b:f9:ba:e7:54:26:d0:20:56:2a:ab:86:f8:46:
                    97:82:d1:7e:b7:0c:a0:c4:2a:6b:79:17:ae:3a:4f:
                    82:da:ff:1a:08:0f:32:10:d2:f1:6c:54:95:57:b1:
                    07:4f:4e:46:81:69:1a:fa:e9:41:da:74:3e:48:63:
                    6f:02:0c:2e:10:87:7e:e9:51:b7:65:98:18:2e:19:
                    cf:b3:c3:b7:66:86:51:c5:1a:61:4c:a7:b6:49:2f:
                    b3:c2:3c:3f:f5:36:a5:50:00:63:ff:13:47:f0:7b:
                    29:61:a8:38:d1:9c:4b:c7:23:84:e5:d5:60:f7:48:
                    d5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:64:5F:90:BC:17:77:4D:3D:C7:0A:23:D0:1B:53:1E:3A:4E:09:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/df50ff54-fd5f-3806-8854-d7d391cda4ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ee:38:18:3c:1a:3e:ca:84:90:85:e7:c7:f1:e1:41:4d:f2:
         53:23:7f:d3:61:98:8d:69:ee:80:a8:d7:7e:42:06:53:f7:7b:
         15:32:62:41:b8:4e:a0:61:3a:02:95:31:7b:ab:83:ba:06:c8:
         38:c9:ba:f0:34:8d:f1:d1:18:ef:01:97:05:c4:c7:3d:19:29:
         dc:cb:dc:17:fa:7e:d7:24:88:a7:0a:0f:88:69:b7:5c:db:f8:
         48:cb:c6:45:4d:39:9c:b6:31:92:c9:5d:96:25:98:b9:51:9b:
         cc:10:5f:3f:f3:cc:5f:1b:60:41:4d:df:f0:ac:a4:94:b3:9b:
         b2:e0:16:b8:a1:65:9d:fb:ee:68:4f:4d:d2:19:10:7f:bf:a8:
         9e:37:64:4f:66:8b:0e:56:22:b9:70:2d:1c:0b:d3:51:48:95:
         0f:25:ef:63:93:8c:6a:fa:32:0d:e9:c3:2c:b2:fe:c9:b4:6c:
         c2:d3:95:08:50:04:73:00:89:d1:9b:a1:de:cd:19:58:37:29:
         ae:60:17:56:45:ea:f8:fe:b3:ba:0c:39:a4:b9:4b:0e:f9:c1:
         9c:3a:e2:4e:4f:f9:77:c7:7c:9a:0b:9a:c5:57:46:e1:c0:d2:
         b8:fe:23:1a:bd:11:89:fd:07:55:c4:57:7a:3d:8e:ef:ee:76:
         42:e2:fd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 19:19:31 2025 by rpki-client