Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ab83317e-d613-3cc0-837d-292716cc95ae.roa
File:                     ab83317e-d613-3cc0-837d-292716cc95ae.roa (raw, json)
Hash identifier:          Ds8YTGfnogOhUXh3gtVRLd89MgpU0CpvJxJj7sXdU1c=
Subject key identifier:   1C:59:5D:B0:02:5E:AC:E2:08:2A:C9:21:3F:04:CA:94:DF:FC:B3:EC
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584A506AF0DC09BA77D671559600
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ab83317e-d613-3cc0-837d-292716cc95ae.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     397518
IP address blocks:        208.109.143.0/24 maxlen: 24
                          208.109.145.0/24 maxlen: 24
                          2603:4:1017::/64 maxlen: 64
                          2603:4:1018::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:f0:dc:09:ba:77:d6:71:55:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=d148d358-8095-4f7c-ad2b-d000d9a6e3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:99:bd:c2:47:c9:e7:54:41:f4:d4:b5:93:2f:
                    bf:7e:38:91:9f:b7:50:5a:43:5d:64:38:dc:5a:0f:
                    d0:db:54:ad:10:b2:14:71:be:53:6f:28:5c:31:25:
                    47:ac:a7:cc:ba:43:77:1f:7f:2b:ae:d0:15:23:55:
                    5b:bd:9b:82:03:9d:d4:73:1c:7f:5a:fc:5c:fb:9d:
                    61:1d:61:f5:9d:bf:ea:98:5d:9f:61:b1:d6:ed:08:
                    e3:54:71:c4:bb:bb:83:83:36:a0:79:51:9c:bb:9e:
                    e5:27:d6:c0:e9:2e:1b:d1:3a:9a:f3:d3:d7:7b:cb:
                    52:33:a2:a6:62:76:2b:e1:6b:04:a1:98:ce:0e:62:
                    87:6d:37:62:89:c8:5e:b4:c2:2d:ec:69:c1:d1:9b:
                    b9:3e:2d:ce:a0:6f:75:8e:22:17:e9:dd:4d:e5:6e:
                    bd:ec:ef:c2:13:ac:13:14:c8:83:af:8b:40:5c:00:
                    e4:f7:8f:35:c8:5a:c2:88:6e:39:29:2e:6a:a7:38:
                    a9:e0:af:63:6e:5b:f3:eb:64:84:ee:c4:62:0a:07:
                    10:c3:0e:68:fc:99:e9:a1:a6:a8:a5:31:c4:87:14:
                    86:d9:9e:ac:d7:fd:0f:a8:14:f5:b1:ed:5e:ec:28:
                    e4:05:56:be:0a:fa:4c:f9:f2:e1:bc:09:48:09:79:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:59:5D:B0:02:5E:AC:E2:08:2A:C9:21:3F:04:CA:94:DF:FC:B3:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ab83317e-d613-3cc0-837d-292716cc95ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.109.143.0/24
                  208.109.145.0/24
                IPv6:
                  2603:4:1017::/64
                  2603:4:1018::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f3:e4:2c:1b:9b:b8:ec:16:24:09:2e:a0:7b:3f:56:f7:b8:
         df:91:ee:ee:ac:29:e8:a0:f7:84:f1:7b:ad:9d:0e:57:c3:e6:
         6d:b2:57:fe:1c:2d:7c:cd:e8:55:02:4f:f1:aa:27:29:4a:6a:
         f7:eb:69:3a:6a:b1:25:77:03:a4:53:f4:7a:af:8a:85:57:8e:
         b9:10:0c:c3:37:89:f1:15:b1:0b:b7:aa:09:e7:04:2d:70:29:
         28:07:be:2a:d2:0e:8f:b6:51:b0:4a:fa:6e:ec:31:2a:39:ac:
         d0:3c:49:3a:2c:76:e5:f7:7e:3d:55:a4:73:37:d6:17:51:51:
         fc:5b:8d:bf:87:3c:e3:86:81:5e:c1:c4:58:86:7a:5f:b6:a8:
         74:31:3c:d1:27:ae:de:53:dd:cc:69:9f:ba:cf:06:86:51:61:
         c3:ac:75:a3:d2:78:27:4d:a8:6e:c4:77:3c:ff:18:95:84:32:
         39:11:e3:e7:cb:94:57:02:43:77:99:fe:6b:59:2f:59:ad:a2:
         16:8e:73:bc:bf:15:c8:97:9d:54:31:67:b3:78:64:d6:44:33:
         53:4e:00:2b:af:eb:99:08:e2:69:28:60:25:a8:c9:e3:fe:f0:
         a2:97:8b:86:8c:7e:5a:a9:ce:76:e8:33:81:1c:7a:7f:c5:cb:
         3c:42:be:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:56:15 2025 by rpki-client