Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/4a421b4d-0aa7-395c-9353-3b9096b353b8.roa
File:                     4a421b4d-0aa7-395c-9353-3b9096b353b8.roa (raw, json)
Hash identifier:          GjtOPSxbEVyyvFYhSPAEJWToMUJj626YdiynK72oEas=
Subject key identifier:   C8:BE:DE:3F:F1:A7:10:1E:F5:2A:C2:FA:91:64:F7:83:3B:A3:DD:B3
Certificate issuer:       /CN=9825dda6-0df7-4c35-af65-4bb69cf71053
Certificate serial:       010D0C9F43285849EA851E2AE25F3AB7AB894380
Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/4a421b4d-0aa7-395c-9353-3b9096b353b8.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     29909
IP address blocks:        208.80.204.0/22 maxlen: 22
                          208.80.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:1e:2a:e2:5f:3a:b7:ab:89:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=f9631cec-c355-4627-b4e9-5ed0f492116e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2e:35:e3:52:15:8a:b2:76:21:6f:ba:6f:62:
                    2f:d8:ec:e1:6e:cb:b5:5e:b1:33:f9:11:07:5c:70:
                    10:e0:dc:10:98:f4:be:c0:4b:ae:dd:da:e2:f5:e9:
                    5a:67:95:9f:6d:15:d9:26:21:4d:79:b0:38:44:fc:
                    c3:87:91:f6:77:ee:4e:4b:d5:02:18:86:bf:5f:97:
                    c6:42:33:90:8b:57:de:cf:4c:fe:3b:5b:f3:24:74:
                    0b:71:4a:f0:04:4b:e7:6c:f0:0f:d8:77:7e:e7:d2:
                    3c:e9:aa:bf:24:f3:cc:9a:cd:8f:3f:90:33:41:1e:
                    ce:9c:18:b5:fa:23:ed:b3:b1:13:e1:dc:1d:ee:74:
                    5d:84:cd:ee:79:9f:53:3f:c1:c1:9c:22:db:92:0d:
                    91:88:fc:61:76:a3:cf:df:a8:b6:c0:21:54:49:f9:
                    29:2e:47:53:8c:6a:5b:83:62:19:c3:a5:c9:71:a0:
                    70:b0:74:6a:8a:9a:c1:55:06:63:33:5f:b4:36:b5:
                    e3:47:b4:25:6a:b0:34:d7:93:8d:78:4b:ad:e3:92:
                    38:a5:e3:d3:46:4c:52:35:29:54:d8:8b:e5:1d:cc:
                    32:1e:b2:42:19:33:96:ed:da:26:33:84:f4:0e:9e:
                    33:6d:47:e1:88:c1:f3:38:c0:aa:7e:09:e4:fb:0e:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BE:DE:3F:F1:A7:10:1E:F5:2A:C2:FA:91:64:F7:83:3B:A3:DD:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/4a421b4d-0aa7-395c-9353-3b9096b353b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl

            X509v3 Authority Key Identifier:
                keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:13:be:43:ca:15:3d:f1:77:53:97:e5:08:95:ff:f7:27:
         85:3b:31:4c:35:8d:f2:06:19:68:e6:85:a4:9c:1e:41:7c:b2:
         ab:f6:83:3c:31:83:91:ed:88:33:f6:c0:89:e6:15:99:f6:fc:
         ef:35:ae:46:67:62:ad:bd:9c:c7:a5:c6:f2:46:ed:33:63:85:
         00:eb:f0:a7:05:24:20:c4:5a:93:49:b9:0b:f8:cb:09:b7:3f:
         96:22:ea:fb:1f:1e:6a:e2:bb:e4:69:a9:77:99:43:2a:39:88:
         d7:ce:7d:b8:03:17:bf:84:3d:f9:7d:26:d4:11:a1:67:f4:60:
         63:95:55:f9:80:7b:79:cb:0d:e3:79:28:67:95:7b:7f:24:36:
         1c:4c:5c:f7:8a:56:38:9f:09:d4:75:f8:ce:47:5c:3d:f0:fc:
         c5:bf:a3:2b:ca:16:91:e1:18:73:22:68:c9:e5:89:02:a2:43:
         c6:97:0a:38:ff:14:2a:73:8d:0b:cd:c7:69:3a:eb:56:a9:dc:
         ad:af:a1:6a:6c:75:1e:89:b6:9d:6c:13:6a:4c:70:50:40:40:
         d8:68:7d:4c:c8:f0:0c:a3:9c:1a:a3:fb:46:f2:c7:f8:09:63:
         66:88:f1:ba:f6:ab:43:10:fa:84:58:c0:f0:1f:94:93:4d:8e:
         53:f3:70:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:34:15 2025 by rpki-client