Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5d5c344a-e189-3864-9d26-6e969f78a1f1.roa
File:                     5d5c344a-e189-3864-9d26-6e969f78a1f1.roa (raw, json)
Hash identifier:          4jOsxQQFFNblq2qRvGvYXWTtdv3kL5VUhXofCHbO9+g=
Subject key identifier:   8F:C1:53:77:50:2C:5E:04:48:B6:9E:0B:48:AF:BA:4A:07:09:D1:D5
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584AB4EB77269F73BB5503BEA100
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5d5c344a-e189-3864-9d26-6e969f78a1f1.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     18914
IP address blocks:        204.8.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:77:26:9f:73:bb:55:03:be:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=2c7b0342-d8c6-4b6c-8005-6205d9170947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:c3:56:e1:01:c4:38:4c:32:5e:fd:89:92:
                    d8:d8:a1:15:1c:32:4a:32:3c:bb:72:8f:cf:06:03:
                    1a:38:1f:33:d1:00:7e:34:d8:c9:42:5e:37:eb:03:
                    c3:bf:99:dc:3e:2f:56:26:f3:3c:4d:8e:c3:fe:c6:
                    67:ea:07:77:dc:03:91:70:ff:03:1a:d3:96:60:d9:
                    a0:65:c8:5f:e2:bc:df:b6:f1:02:f0:37:d4:76:fb:
                    43:d6:ba:62:f4:31:be:d4:af:bd:c3:fe:c8:66:22:
                    b5:96:72:cc:45:8c:e9:99:f1:b7:21:fb:ea:34:17:
                    cb:a7:e1:05:b4:23:04:fc:a6:58:4b:8b:d8:3b:d3:
                    a0:19:cb:4a:02:44:c9:45:49:a6:f9:7e:4d:e8:41:
                    35:1f:1e:e7:59:14:73:5c:7a:9f:0d:b5:ff:e4:e7:
                    3b:f1:88:18:cc:b6:cc:cf:ca:dd:e2:13:4d:9e:a3:
                    35:52:b8:c7:36:24:38:2b:51:7a:9e:e0:15:98:f3:
                    5f:35:49:dd:de:d1:7a:49:b5:d5:83:9f:f8:42:d3:
                    74:7b:7d:60:13:7e:b6:9f:28:ae:4f:69:eb:22:63:
                    69:de:b9:90:f0:0a:4b:b2:27:51:c5:6b:92:77:40:
                    8a:33:3d:3d:62:f6:7d:04:00:ab:63:1e:70:04:60:
                    3e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C1:53:77:50:2C:5E:04:48:B6:9E:0B:48:AF:BA:4A:07:09:D1:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5d5c344a-e189-3864-9d26-6e969f78a1f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f5:b6:2c:62:08:68:1f:0e:2a:c4:02:3e:27:45:5d:c5:9e:
         95:e8:ac:f1:7c:98:8e:2d:37:fe:33:43:ad:69:9c:9d:28:bd:
         d1:ff:28:e8:0d:dd:af:5c:9b:1e:2e:8f:b6:56:d4:c5:fb:b1:
         b8:42:e2:5d:3d:a3:3f:6e:54:c0:4e:3c:bf:1d:55:40:4d:e4:
         60:9c:5b:ec:35:52:66:e4:c5:3a:26:d3:7c:f0:34:43:ec:8c:
         3f:3d:81:6b:83:c2:ad:43:dd:ee:b2:4f:0b:27:5a:2e:2f:7e:
         01:4f:10:cb:a9:08:f1:bf:c6:8a:cd:31:0c:35:55:be:e8:c6:
         c7:d5:e1:df:09:07:f2:51:81:7d:55:eb:04:95:26:d9:c1:c0:
         8d:b1:bb:4b:73:bd:2a:a9:96:cf:21:81:e5:69:9a:1d:26:2a:
         56:42:fe:27:1f:94:ef:8d:7d:87:96:bd:fb:21:d5:a8:71:20:
         a7:fc:35:be:bd:3f:23:70:a6:f0:81:63:6c:b4:84:17:b6:6c:
         22:92:eb:3b:66:96:29:50:1d:ba:48:8e:be:c3:98:43:ca:99:
         ba:0d:ab:93:5a:88:5c:d4:44:b9:e6:ff:71:79:d0:0b:9d:8a:
         bb:cf:f2:3c:dd:d8:78:9f:bb:22:ed:b7:56:77:f7:c0:01:63:
         c3:77:92:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:15:55 2025 by rpki-client