Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e1a24306-5aad-3b58-aa6a-8501df64a677.roa
File:                     e1a24306-5aad-3b58-aa6a-8501df64a677.roa (raw, json)
Hash identifier:          SdKhd1h6VvedeISa+ARtMPqEo4psJtWjDbdIpoQfrZU=
Subject key identifier:   98:7E:92:B8:EE:EA:DE:7B:A3:AD:3B:27:9E:20:3C:22:F7:56:AB:58
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584ADBACEA2A817B680548FF8780
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e1a24306-5aad-3b58-aa6a-8501df64a677.roa
Signing time:             Thu 14 Aug 2025 22:11:12 +0000
ROA not before:           Thu 14 Aug 2025 22:11:12 +0000
ROA not after:            Wed 12 Nov 2025 23:11:12 +0000
asID:                     3561
IP address blocks:        208.138.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:db:ac:ea:2a:81:7b:68:05:48:ff:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Aug 14 22:11:12 2025 GMT
            Not After : Nov 12 23:11:12 2025 GMT
        Subject: CN=897cc5bb-7443-46b5-9786-a91d0c3adfd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:46:50:b7:f8:5b:f1:f3:a4:b2:64:89:60:6b:
                    1f:2e:32:a2:d0:8b:f7:85:03:18:d7:38:cd:35:b2:
                    d3:f4:a2:1c:03:6a:c4:4c:62:d4:65:1a:01:c2:d4:
                    9b:54:ae:9a:6f:42:c8:34:88:ea:a5:b3:7a:82:3f:
                    e8:13:44:c2:f3:42:01:b6:c9:e5:a2:cc:64:62:5f:
                    72:cc:e9:fa:13:6d:00:27:91:0d:28:1d:75:85:b8:
                    25:f8:10:a4:2a:7c:07:5f:6c:de:eb:21:5f:7d:68:
                    23:89:85:a8:cf:41:3b:fe:3e:14:72:a2:c7:28:36:
                    76:3f:32:ab:d3:c5:f8:33:fe:40:51:a4:61:4e:17:
                    4c:46:9a:4a:4d:a5:3b:fc:31:5d:28:82:9e:81:0f:
                    60:43:9f:99:6f:4a:8e:16:9b:90:fe:b0:05:13:4e:
                    4f:9f:15:27:60:95:29:83:87:eb:67:77:12:c7:05:
                    81:fa:f9:29:9d:5f:e1:8f:a9:a8:93:a0:ba:00:0c:
                    2d:95:ba:cd:68:b5:0d:b5:fb:e2:4e:c2:e6:7d:c9:
                    ef:c5:93:6b:cb:76:c4:79:7f:b0:9e:6a:46:6f:17:
                    10:85:06:9f:49:a2:ac:1a:fd:0c:e3:13:07:71:98:
                    9d:d6:5e:66:2d:e3:8e:00:24:e7:08:bf:f5:56:13:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7E:92:B8:EE:EA:DE:7B:A3:AD:3B:27:9E:20:3C:22:F7:56:AB:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e1a24306-5aad-3b58-aa6a-8501df64a677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.138.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:06:e8:b1:0c:6a:aa:d1:69:4d:8d:36:8e:4b:15:b6:0f:d8:
         69:a2:1b:e8:4f:e9:6f:8f:c7:5f:ec:b9:24:22:8c:1c:fe:c0:
         21:4f:44:f7:65:0c:d6:20:4b:96:7b:bd:44:3e:d7:8d:3b:3c:
         75:f8:a4:c0:c7:9b:67:ef:e2:cc:11:88:65:02:9f:c4:0d:f1:
         b0:83:e0:5b:17:30:57:fe:d7:aa:dc:4a:ee:56:11:d7:27:09:
         ba:08:5d:29:fe:fc:0d:ea:af:ba:36:41:c7:1c:3d:eb:13:55:
         3d:c0:a0:d7:92:d3:19:27:3a:1b:0c:ab:4f:ab:79:c0:c5:91:
         40:4c:c6:89:9e:e9:de:f1:26:1b:28:8c:16:99:b7:e5:f4:3b:
         30:d8:72:ff:79:3b:9e:e4:6c:9c:91:69:0f:fd:7d:3d:49:de:
         8e:a0:17:8f:25:11:7f:7b:be:7b:6e:6a:af:54:d9:20:94:97:
         6f:f1:f2:ee:61:f6:c9:cb:0e:b6:ab:7a:bd:b3:27:76:4b:8b:
         19:e8:92:11:aa:47:8f:e4:a4:ac:d8:a0:4d:a7:4d:a6:2b:62:
         04:d4:c2:67:7e:cd:80:ff:b8:e0:37:ef:c4:c2:65:d7:0c:9b:
         ac:62:cd:b4:11:49:66:6f:c1:78:fb:a3:b2:30:dd:fb:7c:9b:
         59:fb:26:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:27:06 2025 by rpki-client