Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/eb1d30cd-56d3-3a4c-b24a-94c218a76dc0.roa
File:                     eb1d30cd-56d3-3a4c-b24a-94c218a76dc0.roa (raw, json)
Hash identifier:          aMKu+ttYwcvbdy/r/aUujouJ0fDpSs0tzzHdAL4vkTA=
Subject key identifier:   7E:C0:27:DB:7C:13:9E:4E:DF:CB:F0:2D:BE:63:8F:4A:54:AB:99:C8
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584A18954949EE5438D2DD4DC880
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/eb1d30cd-56d3-3a4c-b24a-94c218a76dc0.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     3561
IP address blocks:        208.164.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:49:49:ee:54:38:d2:dd:4d:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=10829d78-3b27-459c-a9f0-4e7a499160e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4d:15:8f:0c:66:6c:45:73:fe:1c:d1:64:2d:
                    02:b0:78:ca:5b:ec:b8:50:f5:2c:0c:b4:6e:5d:9a:
                    2d:30:fe:ec:17:9a:11:9a:08:07:1c:74:02:89:70:
                    48:80:0f:5c:57:4f:4c:e7:d8:e1:f5:a0:6e:2d:4a:
                    f0:6a:ca:27:e7:fc:67:ff:b0:76:7b:99:b6:06:79:
                    b1:99:13:b4:b4:83:b5:60:f9:7d:15:ad:67:87:87:
                    17:db:1e:16:b0:62:98:96:b2:ac:38:ea:77:cd:c3:
                    ad:27:8e:8a:79:7a:ad:ea:8d:87:b0:de:6b:4d:5a:
                    48:87:cc:b6:2b:89:eb:44:65:1e:ac:9a:f0:97:7d:
                    ea:ba:e1:09:b5:f0:99:bc:4c:7f:e8:66:6d:fd:12:
                    d6:b6:65:6a:07:73:a0:74:d6:e4:76:d5:6a:f2:9a:
                    d9:6c:47:eb:96:2e:f7:fd:af:ca:b4:f8:67:ef:86:
                    67:2b:0e:84:e4:63:44:33:a5:43:60:78:53:7a:3c:
                    33:f1:74:7b:19:fd:13:3b:5b:c1:cd:b8:68:f2:b9:
                    ea:65:85:dc:67:2c:c6:92:2c:6b:e0:56:a5:8a:b0:
                    84:20:35:e7:7c:25:8c:68:7f:18:14:e5:10:42:dc:
                    e1:36:cd:54:b2:45:15:38:9d:79:8f:14:87:1e:6a:
                    aa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C0:27:DB:7C:13:9E:4E:DF:CB:F0:2D:BE:63:8F:4A:54:AB:99:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/eb1d30cd-56d3-3a4c-b24a-94c218a76dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.164.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:75:b4:22:eb:c1:86:89:c4:a4:d3:42:38:f3:94:4f:22:99:
         ad:8a:28:15:61:f7:3b:2e:42:2e:c8:af:05:d4:c6:14:79:a7:
         64:81:a4:69:76:d3:56:ba:3b:16:85:f0:e3:8e:2f:22:ca:e2:
         66:52:16:79:e5:38:85:43:10:c1:f1:fe:ca:5f:53:bd:42:6b:
         33:b0:7f:28:6d:d9:e4:90:1c:3f:e3:66:fd:bb:09:ab:fb:28:
         d0:67:77:12:64:5c:d2:2c:9f:ba:c3:59:53:fa:01:f3:11:f9:
         f2:b7:ed:57:a8:b8:eb:27:a7:a5:52:c4:46:ec:e1:24:04:a2:
         9d:ff:7f:c9:b6:f1:cb:e0:cb:0f:17:65:4e:a8:5d:a2:64:7f:
         e9:6a:91:aa:5b:2b:4e:41:2b:d7:e7:f5:16:ad:20:dd:a6:c5:
         79:3e:63:74:a3:94:68:90:74:40:1c:ab:47:2d:82:4f:c4:cc:
         e5:aa:9f:b7:c7:fa:9e:45:26:e5:c7:c6:98:32:de:00:a1:90:
         a1:1f:96:a8:a1:09:40:32:2e:5f:bb:8d:43:16:74:ab:21:92:
         7e:0a:ad:3d:1d:76:ea:14:74:ad:41:79:a7:e6:5e:96:21:fa:
         10:82:e6:0e:21:96:d8:0b:05:1c:04:7e:37:e6:62:62:52:a5:
         2e:3b:11:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:41:20 2025 by rpki-client