Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa
File:                     f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa (raw, json)
Hash identifier:          otxafXb4WxtcKRDGSyf34IF4cBzEndqfJjoylt8plgQ=
Subject key identifier:   83:41:D9:1C:8F:5C:94:F7:9D:09:6C:98:0C:DC:23:2C:7C:DD:D8:80
Certificate issuer:       /CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f
Certificate serial:       010D0C9F4328584A42757D5BD9C205A3356F4840
Authority key identifier: DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     20259
IP address blocks:        208.82.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:7d:5b:d9:c2:05:a3:35:6f:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=7a86d7dc-2564-443c-bde2-920bd1c1e845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b0:4f:da:14:dd:7b:17:9d:6c:58:fa:98:7f:
                    fa:8c:c6:f7:fb:ff:9e:1a:fb:c1:80:ca:b7:ce:9f:
                    ef:bb:2f:48:69:10:e5:a1:2d:45:d8:8b:0e:3a:93:
                    a0:89:57:5a:05:5c:3c:e6:8c:88:a7:c2:b4:22:7f:
                    77:44:e0:cd:1f:f3:76:19:01:84:27:76:3b:6e:28:
                    ee:1b:90:0e:1b:a7:c8:b1:5d:b2:a9:76:5b:dd:8e:
                    23:0d:2a:53:da:c8:f8:a9:d3:e8:ab:b8:4b:ed:10:
                    dc:59:b7:7b:9c:ca:b9:80:a3:af:c3:e1:c3:df:25:
                    a5:38:cb:a8:2b:d8:8d:98:8c:0a:18:17:07:bb:62:
                    14:ff:1c:95:5a:f8:72:8a:ea:11:10:50:ad:51:63:
                    f3:7e:0e:8d:4a:70:2b:66:e7:e6:66:22:a6:6b:47:
                    2f:ed:be:7e:38:51:fe:b3:12:69:27:24:80:b2:1b:
                    9b:ea:e9:18:8b:2b:35:9e:ba:01:38:26:ed:ce:02:
                    60:5c:65:af:60:ed:5d:65:a6:db:44:71:1f:6a:a3:
                    5d:a0:f0:df:4f:3e:2d:40:07:3b:b5:14:e9:ab:c7:
                    63:e6:87:a5:a2:1f:eb:94:88:96:18:69:45:15:17:
                    7c:5d:09:68:c5:bc:70:59:9f:40:1d:d0:65:76:b1:
                    c8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:41:D9:1C:8F:5C:94:F7:9D:09:6C:98:0C:DC:23:2C:7C:DD:D8:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl

            X509v3 Authority Key Identifier:
                keyid:DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:83:6d:32:65:cd:c7:d9:86:c8:e6:85:39:cd:c9:4f:66:35:
         04:9f:eb:9d:aa:f6:f2:a0:03:da:f2:a1:ba:ca:c1:74:00:42:
         b3:02:b1:48:70:b3:8d:4c:bd:cc:ba:7f:82:0b:4f:aa:97:c6:
         36:98:14:cf:c1:a2:c4:43:1e:7f:50:c1:70:60:36:e4:04:15:
         63:94:ec:10:70:17:30:69:c6:14:60:ce:c7:ff:1a:89:3b:26:
         98:2e:c4:5a:a1:aa:58:50:f9:90:55:03:85:8c:a9:d1:d6:b9:
         0d:31:97:e9:ac:f5:0e:2f:3d:db:54:e3:9b:6e:27:de:72:88:
         83:82:26:58:20:d0:40:c4:d6:ed:02:20:2b:a7:ec:35:d5:a4:
         68:47:f6:6f:dd:2a:8b:59:90:8e:98:1c:93:d0:15:49:55:ce:
         d2:0e:f9:9f:be:3d:00:4f:0b:c0:c8:f2:0f:89:87:5e:01:0e:
         27:d5:82:de:8a:60:d0:0a:c1:66:53:68:5a:10:31:3e:e4:91:
         9e:fa:f1:64:03:d1:a5:6e:7e:ad:04:c0:ad:79:21:61:79:de:
         42:24:9d:f4:35:3d:d0:85:90:d9:83:57:d6:e3:5d:6b:de:ae:
         9a:ff:92:36:ee:8a:f6:b4:05:7f:23:3a:de:77:71:6f:2e:d1:
         a4:5b:b6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:38:34 2025 by rpki-client