Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/8981f9f7-457a-3b83-995f-2557ffc8cb47.roa
File:                     8981f9f7-457a-3b83-995f-2557ffc8cb47.roa (raw, json)
Hash identifier:          p5/R76iPkRNLxUFB/UEHjiDKaknUMSHatMoPFJTb3Po=
Subject key identifier:   02:85:42:A7:44:D7:CE:CD:51:69:FB:64:15:92:15:32:75:5F:27:90
Certificate issuer:       /CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902
Certificate serial:       010D0C9F43285849E654F1204D58C6AB5C737480
Authority key identifier: 51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/8981f9f7-457a-3b83-995f-2557ffc8cb47.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     26461
IP address blocks:        208.91.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f1:20:4d:58:c6:ab:5c:73:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=95726482-3f3a-4b6e-8d5c-4d64e064a01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c5:a3:18:d1:90:a4:c4:d2:db:88:e0:b9:3c:
                    e4:59:8d:f6:f5:f8:fb:ed:d8:f4:ff:6a:60:79:0b:
                    e0:b9:2e:ae:72:80:94:b6:25:14:d0:36:2e:b4:80:
                    2d:f1:ba:9f:f4:2e:51:ed:16:32:a7:f4:30:75:a4:
                    18:21:b8:e4:0b:ac:fa:bf:20:9a:95:3d:1a:19:0d:
                    4e:a1:ee:c4:3d:6e:e4:ec:35:c9:d9:97:a3:97:ca:
                    60:f1:c8:40:37:b1:7b:3d:98:ee:b5:6f:44:ef:51:
                    eb:0c:83:1b:ec:7f:17:a2:05:de:0b:18:59:a6:85:
                    29:3d:ff:c7:19:1b:02:7e:53:79:6e:eb:aa:f5:a9:
                    bf:54:8c:16:04:db:bc:8d:52:5f:fe:75:8f:3e:e8:
                    46:81:e1:0e:db:3f:5f:be:43:64:8d:79:33:3f:b4:
                    a5:8b:6b:9c:e2:11:c8:a0:0b:f2:91:a8:3e:52:3f:
                    f8:8a:66:8e:0e:bf:3a:f6:fe:b4:02:24:11:df:e9:
                    16:aa:2d:5a:da:85:02:0a:39:6b:a4:f9:5d:13:9b:
                    6e:57:4d:b4:d3:9f:22:84:bf:49:1a:5a:02:53:1b:
                    2f:fb:da:9c:f3:4f:76:ad:c0:fd:e9:cb:7f:7e:26:
                    b8:67:4a:21:de:f6:d8:aa:e3:49:e6:eb:0a:2d:eb:
                    44:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:85:42:A7:44:D7:CE:CD:51:69:FB:64:15:92:15:32:75:5F:27:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/8981f9f7-457a-3b83-995f-2557ffc8cb47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl

            X509v3 Authority Key Identifier:
                keyid:51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:45:fc:4b:ac:05:e8:16:a4:dc:ef:13:c3:22:d4:b3:ca:0c:
         8b:73:c3:28:47:8a:23:76:cd:4f:73:cf:4b:1a:fa:e4:c0:d6:
         35:0f:b6:fe:6f:50:a3:b2:e2:65:be:95:db:4a:14:cb:ba:27:
         33:55:bf:e7:85:1e:5c:fc:51:78:cd:f5:d7:31:2a:7c:20:eb:
         fa:e5:53:b6:9b:6c:c4:da:bd:8d:34:4f:af:8c:66:79:ae:46:
         a4:1e:b3:83:6c:dd:59:99:b2:22:89:b4:0f:6f:5c:e8:2b:cf:
         05:04:b6:52:78:d0:88:c7:ab:ba:ea:e4:c9:06:55:62:f7:ea:
         59:f4:11:82:4a:17:03:18:b6:c6:07:80:e9:fe:b3:34:66:d5:
         bd:b2:32:50:d0:39:09:2c:72:0e:19:ed:18:ae:43:78:1d:5b:
         c0:63:39:6b:ba:98:2b:00:23:bb:4c:8f:44:83:8c:ea:46:4e:
         27:dd:99:43:5e:f5:83:e3:44:72:dd:3e:53:2f:ea:28:1f:90:
         a6:00:14:75:87:24:fb:a5:57:79:2a:ed:3d:d7:38:34:d1:98:
         9d:8e:cb:70:2a:07:21:44:6c:52:ec:a6:a4:b3:14:e6:8f:42:
         9f:dd:9e:d9:25:dc:05:ea:7b:d9:fc:7c:ca:0e:11:77:49:a0:
         7a:72:1b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:30:36 2025 by rpki-client