Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/8a1ae401-360b-32d6-aa65-fa628237cb11.roa
File:                     8a1ae401-360b-32d6-aa65-fa628237cb11.roa (raw, json)
Hash identifier:          ctCTfsO+2DQyPWVSdeqVYQUdDRfRxNt5F43XTtPZR4w=
Subject key identifier:   3D:ED:44:62:1F:16:15:14:E6:F7:1F:19:D5:48:4B:EA:B7:AF:15:EE
Certificate issuer:       /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
Certificate serial:       010D0C9F4328584AB91BA6ED0EEFFD7C4DBCA280
Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/8a1ae401-360b-32d6-aa65-fa628237cb11.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     22438
IP address blocks:        208.83.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:a6:ed:0e:ef:fd:7c:4d:bc:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=daecf449-e157-4b9f-8cc6-a86482f4f65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:96:f0:aa:e9:34:22:ca:f5:15:da:87:5b:86:
                    73:9b:17:81:7f:ee:b8:9f:17:48:f8:03:54:08:cc:
                    ca:ba:ba:cd:b4:34:a8:8b:cc:4a:49:2d:4c:45:a4:
                    97:3d:60:30:76:da:a3:b6:82:f2:5b:0e:f4:60:22:
                    d2:a2:b2:41:5a:5e:e1:42:90:2c:4b:f5:6b:3b:93:
                    75:09:6b:24:ae:59:cc:4a:29:bc:78:41:6d:88:e7:
                    fd:3a:b9:f1:ef:79:f1:61:4a:43:8c:fc:df:0d:a2:
                    7a:b3:77:41:f8:6d:de:45:ab:fa:bc:e2:fb:04:67:
                    e3:7b:50:c5:0d:8d:52:79:e1:2c:3b:d1:45:0f:42:
                    de:25:11:0d:5b:5b:da:5a:c9:f6:65:b3:04:e9:26:
                    2d:4d:c8:34:41:0a:5a:5b:31:4f:76:67:af:d5:8c:
                    cb:2e:73:1d:28:88:76:36:5d:19:22:95:3d:e9:c9:
                    99:86:9b:f8:15:c7:0e:9f:1b:b3:af:14:8c:1c:83:
                    3a:3f:3d:8d:fb:ff:7e:b9:26:c8:60:d7:7b:cb:cd:
                    dc:9e:af:eb:a3:2e:58:8e:97:48:2e:f3:fc:f6:af:
                    8b:b2:9d:62:4a:f9:c6:ad:55:f0:3e:8f:3c:9c:eb:
                    76:fe:6e:d5:7c:9e:77:61:e5:c2:37:98:98:11:d1:
                    c2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:ED:44:62:1F:16:15:14:E6:F7:1F:19:D5:48:4B:EA:B7:AF:15:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/8a1ae401-360b-32d6-aa65-fa628237cb11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl

            X509v3 Authority Key Identifier:
                keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:49:8a:ca:e6:f6:8a:7c:b6:65:ca:1a:6a:0f:cc:0c:91:84:
         bf:a6:c9:1d:ab:b3:db:4a:fa:25:b0:f2:d2:79:b7:c3:ec:17:
         a7:23:5c:b1:55:f1:1f:d9:87:f3:86:2c:06:30:d7:e5:00:c7:
         5c:ee:be:63:3e:71:be:68:ec:c4:7c:c6:bd:4b:8f:8f:85:fe:
         41:3c:91:d0:19:d4:b2:57:8d:ea:29:9b:c4:eb:f4:8c:bd:6c:
         bf:8a:44:15:32:2c:3d:39:4c:e1:b0:12:17:a6:a3:40:3f:91:
         9d:e9:4d:f0:06:e7:2e:13:7a:b7:7b:56:d9:21:3b:43:fd:f2:
         58:9a:e1:56:5d:49:cb:6f:16:78:b9:f6:33:03:1d:9d:08:31:
         2e:e1:a2:cd:61:3b:57:31:50:c2:5e:ce:2b:0b:74:ef:c1:d6:
         89:89:74:c0:d7:0c:fd:1e:61:21:86:0f:df:a7:f4:a9:03:f3:
         51:b1:16:44:28:57:f7:99:4e:14:2c:2a:15:69:c3:3d:a4:ca:
         c1:5a:54:90:8d:84:74:c0:6e:a5:8f:59:de:41:52:15:58:a3:
         77:bf:4c:05:35:45:71:a5:cb:81:fc:48:4a:a5:83:fd:9b:9b:
         3e:c6:4a:e5:f6:30:31:c8:f1:65:a8:ee:0e:76:c4:2f:32:37:
         ce:39:6f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:32:39 2025 by rpki-client