Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/e924a083-9d0a-3903-9bf9-c5952d54abc2.roa
File:                     e924a083-9d0a-3903-9bf9-c5952d54abc2.roa (raw, json)
Hash identifier:          uel70R3jGXCj2RwJR7V2CTBmiQpGl9xg9SjzRUvO4iQ=
Subject key identifier:   AF:7E:60:9C:89:EC:EA:FD:51:C8:DC:E4:8A:E4:BE:E5:91:66:3F:73
Certificate issuer:       /CN=7334a22a-f222-4457-889f-5478966ecf96
Certificate serial:       010D0C9F4328584B1806C34D2CB11F8AC85FED80
Authority key identifier: C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/e924a083-9d0a-3903-9bf9-c5952d54abc2.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     11805
IP address blocks:        208.91.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:c3:4d:2c:b1:1f:8a:c8:5f:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7334a22a-f222-4457-889f-5478966ecf96
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=37b0cae3-19c5-405a-b22f-816fc267a0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d9:53:12:2d:b3:0c:8b:73:a9:41:fc:93:6a:
                    45:f8:1d:10:5b:0a:3c:29:7b:1c:c4:24:1b:bf:69:
                    cc:56:42:9f:f7:4a:58:ef:17:95:ab:e9:2a:4d:89:
                    66:4e:b4:1a:da:1d:d0:1b:04:4f:bb:ac:ee:29:44:
                    3f:69:ba:3e:d6:e4:f1:1c:9a:d8:26:33:88:91:08:
                    82:ba:da:f1:cf:d8:cd:80:d1:f6:73:30:5f:ad:16:
                    e7:fd:3f:d3:f2:58:46:7e:2b:fa:37:cf:0c:3a:fa:
                    3e:82:b4:75:9e:54:2c:d2:d8:35:6d:01:04:96:27:
                    8c:03:6d:1b:e8:e5:a9:7d:66:28:25:d2:7b:e2:cd:
                    7b:e3:9a:f1:a4:55:6e:09:a8:65:a5:ba:fd:13:8b:
                    a4:68:ac:26:24:ca:0b:be:39:d7:83:aa:a5:9c:61:
                    be:41:14:6f:98:51:b7:93:45:ba:4d:df:ea:ef:8d:
                    4e:6d:58:53:e0:1d:b6:04:e6:62:52:dc:fc:5b:00:
                    21:a6:a1:c7:4b:3a:9b:9a:9b:05:b1:f9:27:dc:4f:
                    23:95:f1:4a:96:af:57:ab:bb:63:18:24:87:50:4c:
                    20:c7:2b:6e:e5:32:be:35:05:e1:7a:47:fb:a1:dc:
                    9d:a6:b1:b4:40:d5:95:9f:38:c7:fe:3f:74:f2:b2:
                    1e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7E:60:9C:89:EC:EA:FD:51:C8:DC:E4:8A:E4:BE:E5:91:66:3F:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/e924a083-9d0a-3903-9bf9-c5952d54abc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl

            X509v3 Authority Key Identifier:
                keyid:C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:85:93:75:70:83:32:b3:37:7f:1a:66:51:62:a2:6a:b3:b0:
         79:71:cf:6d:70:fb:00:66:16:f5:7e:21:bd:ff:24:9f:43:42:
         f7:33:c9:56:df:b0:41:a8:a2:f8:5d:d6:32:0a:f0:98:c5:b6:
         47:a0:f4:16:62:f1:39:77:74:64:4d:15:4f:1d:6f:19:f7:13:
         26:9a:5b:06:03:b3:3f:fc:b9:a1:b8:4b:b0:1e:df:c4:6c:58:
         34:c3:9a:8e:4d:a3:55:5b:8e:11:30:1b:91:6c:f1:59:d4:f1:
         c3:53:9c:a1:71:80:b6:0f:ee:98:d5:87:2a:d9:5b:df:7b:eb:
         c0:25:f0:c0:bc:bf:33:6d:fb:ee:ff:f5:b1:10:ab:b5:ee:d6:
         cc:5a:ad:c7:9a:11:70:a4:f1:16:45:81:8e:4c:06:de:16:db:
         10:15:8d:36:b7:ed:db:94:8a:6b:ed:96:8d:99:67:78:66:59:
         56:92:52:69:76:c0:74:20:14:ec:66:1a:45:cb:6d:f9:dc:b1:
         c3:00:1c:24:e6:ad:41:ba:06:37:ae:84:34:d2:0c:02:4d:60:
         e8:fc:97:51:e0:b4:f7:7f:48:80:18:de:66:72:d2:11:ac:df:
         5f:fc:8b:ca:a6:26:ec:4a:43:78:d2:22:07:db:19:30:4b:d0:
         21:eb:95:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 05:35:24 2025 by rpki-client