Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/547766b1-d355-353e-a550-948e3a1a4605.roa
File:                     547766b1-d355-353e-a550-948e3a1a4605.roa (raw, json)
Hash identifier:          hEnXQxsWf/vx5kjsCLBllH/I/uwRFVZlboGy71RKlzg=
Subject key identifier:   A3:BC:33:31:7F:87:F5:AB:9C:6C:A3:C3:24:62:56:9C:2A:DE:69:5D
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F43285849CE9A3C4AF54602B3E904FE00
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/547766b1-d355-353e-a550-948e3a1a4605.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     22140
IP address blocks:        208.54.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:3c:4a:f5:46:02:b3:e9:04:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=4ce27b48-b771-4b0e-8319-b0887a2661a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3a:3a:6f:86:9a:7a:54:72:92:56:72:90:4e:
                    f4:49:90:ab:45:28:35:a6:c7:0b:7d:38:ae:d9:13:
                    af:c4:b4:ff:20:49:91:dd:50:f7:d9:a9:40:b6:65:
                    7f:3c:bd:c8:29:74:83:ac:9e:45:09:bb:20:95:b3:
                    4e:06:cb:a8:2c:cc:fa:14:ea:56:e3:97:38:d6:9b:
                    b8:88:6f:9d:ac:66:9d:ee:26:9d:56:02:a3:89:2a:
                    00:c4:04:e4:ce:31:06:f7:a6:12:a5:ad:0c:0a:84:
                    44:2a:17:2d:41:f4:5f:d6:1a:c1:8e:52:3b:2b:71:
                    d4:52:e7:38:ae:2f:60:95:6e:75:97:45:aa:4d:9c:
                    7f:c0:d3:96:31:6a:ff:9f:94:cb:9b:54:93:1d:3d:
                    19:a0:b9:ac:7f:3a:3b:e4:5b:3e:92:23:26:2e:6b:
                    85:22:da:13:0b:fa:2c:cc:c7:41:fa:86:ca:eb:72:
                    b5:91:4d:37:a8:f8:f3:49:09:29:de:dc:dc:23:0c:
                    a3:47:5a:d8:8f:3a:b4:d2:d1:68:1f:85:8f:55:8a:
                    04:1b:f9:d6:65:09:48:92:fd:6a:6f:60:f9:ec:0f:
                    b1:41:74:07:f1:f0:c9:c6:0b:fd:89:97:11:12:7a:
                    47:cf:cb:08:9d:55:6a:cf:90:bb:1f:33:a4:99:6a:
                    10:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BC:33:31:7F:87:F5:AB:9C:6C:A3:C3:24:62:56:9C:2A:DE:69:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/547766b1-d355-353e-a550-948e3a1a4605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.54.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ea:f4:4d:1c:01:b9:7c:b5:72:d8:da:f5:b4:32:b8:09:9c:f6:
         9d:7c:6c:ad:f6:de:90:1f:ea:39:9c:d6:16:33:be:65:05:0e:
         b6:e2:83:23:40:da:a9:70:57:1b:75:18:b7:9d:92:4d:e6:61:
         78:88:40:46:4c:83:54:05:d6:51:0b:16:64:e6:db:6c:cb:3d:
         d5:dd:ad:21:ce:d0:fb:4a:a2:4a:ea:40:17:8e:81:24:19:2c:
         0a:7e:d2:bc:00:5a:d1:6a:06:0c:df:e0:d7:90:99:58:74:ca:
         d2:c8:e0:a4:5a:f2:d6:9a:6f:c8:83:1a:e5:78:c0:de:99:18:
         59:54:2d:44:a3:00:79:9e:07:f6:e1:17:7d:02:67:1f:a3:29:
         73:66:4d:b0:5b:52:dc:7a:b5:c1:b2:bc:d7:3b:fc:f1:5f:90:
         1b:4c:f8:1d:96:8e:37:10:c5:a8:dc:a8:19:5c:2f:00:ea:2e:
         89:30:6e:42:83:ca:5c:08:31:5c:57:c2:aa:9d:d8:2f:78:aa:
         77:d9:70:39:2f:22:6c:00:69:01:77:db:5f:d5:39:98:05:46:
         09:a9:21:bd:f0:0b:3b:14:ab:11:15:d0:5f:60:bf:c4:45:3b:
         41:25:5d:28:f5:48:7d:7e:c0:1c:00:4d:f0:d0:0b:89:ef:d2:
         c6:5f:a2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:36:52 2025 by rpki-client