Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/a44749b3-2884-3b75-b78d-0868496658de.roa
File:                     a44749b3-2884-3b75-b78d-0868496658de.roa (raw, json)
Hash identifier:          400Hr0VVLhhUOYEqXLo0L3W0OM0coeMFQ4EDJE2+GUk=
Subject key identifier:   37:F3:68:B3:40:1C:40:41:0A:4C:AF:B5:B3:A2:A6:6B:AA:1C:ED:29
Certificate issuer:       /CN=b036528c-d877-46d3-a948-64c8f3b600cc
Certificate serial:       010D0C9F43285849CE9A5FD7336BCF12CEA8E080
Authority key identifier: 51:45:D2:CC:87:7A:2C:B7:0E:3A:3E:E9:2A:DD:F1:78:19:17:A3:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/a44749b3-2884-3b75-b78d-0868496658de.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     23038
IP address blocks:        208.71.200.0/21 maxlen: 21
                          208.71.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/b036528c-d877-46d3-a948-64c8f3b600cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/b036528c-d877-46d3-a948-64c8f3b600cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:5f:d7:33:6b:cf:12:ce:a8:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b036528c-d877-46d3-a948-64c8f3b600cc
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=997c69f9-8432-4861-83b5-10acc99a3913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:d9:9a:96:fb:b2:d5:d8:80:8d:2f:fa:fe:
                    7d:d4:78:6e:6c:9f:6d:ef:bd:e6:12:d4:32:23:98:
                    36:b6:36:8c:84:07:ad:08:38:0e:8c:94:d9:a3:4a:
                    34:a2:24:c7:4d:a3:f1:6b:da:e9:8d:8f:a0:c9:f9:
                    50:c7:09:3b:ae:50:94:9a:27:43:a9:17:ac:42:c2:
                    a6:ff:4d:07:4e:9c:62:18:dd:14:a6:f2:e4:b5:0b:
                    83:40:5c:32:c0:a7:91:84:9f:81:8b:32:25:33:11:
                    48:93:88:01:1c:69:29:33:dc:c8:60:6c:c4:c3:e1:
                    ab:b3:6c:4a:ee:05:29:14:63:52:b8:53:05:83:4a:
                    33:58:23:62:8d:f8:0f:ce:5a:9c:22:0d:a2:4f:b2:
                    d9:e2:53:65:42:55:cd:0c:7d:83:86:66:31:4b:fe:
                    2f:82:00:c5:5a:42:15:04:7d:4c:6a:49:cb:a6:ba:
                    c8:19:74:13:13:c5:b7:30:55:a1:a1:24:a0:9b:c7:
                    81:2a:b1:cb:95:e5:a0:22:92:48:11:f4:96:64:6d:
                    39:a2:44:b3:fe:83:51:a5:07:12:d4:32:41:cb:dc:
                    ce:b4:ee:71:27:ee:33:38:ad:68:32:1a:d6:19:e8:
                    8f:6e:fa:93:a7:27:56:3e:c9:64:e7:bc:ef:ef:a8:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F3:68:B3:40:1C:40:41:0A:4C:AF:B5:B3:A2:A6:6B:AA:1C:ED:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/a44749b3-2884-3b75-b78d-0868496658de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/b036528c-d877-46d3-a948-64c8f3b600cc.crl

            X509v3 Authority Key Identifier:
                keyid:51:45:D2:CC:87:7A:2C:B7:0E:3A:3E:E9:2A:DD:F1:78:19:17:A3:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:fe:50:79:bd:84:44:8c:6d:a4:f6:c9:63:d5:6b:7a:35:cf:
         b6:9d:e3:3e:52:ed:29:2c:08:70:2a:61:87:36:c9:7d:db:4f:
         1c:bb:3d:be:28:46:1e:a7:98:a4:fc:fa:b2:f8:8c:23:4e:c2:
         7a:7e:bb:58:05:fc:68:6e:6d:a3:6d:c9:b9:8b:fb:e0:e7:96:
         2a:eb:65:61:ef:d5:5f:6f:6e:ea:df:38:c3:3e:93:8f:07:0c:
         52:75:77:18:b2:be:45:2a:47:9a:55:71:24:3d:f2:ef:7e:1f:
         5b:bc:97:99:5e:0f:d3:21:d8:12:94:0e:ec:46:12:35:36:12:
         9c:b0:b6:e6:d5:04:6e:8c:00:e6:7b:fa:d9:49:92:09:ec:18:
         ca:da:1f:36:61:e1:a4:84:a9:24:01:64:3a:00:9b:29:b6:c0:
         1c:60:f3:46:23:d2:63:98:25:7d:66:4b:9b:1b:a8:88:77:47:
         58:30:28:e5:55:7e:51:0f:72:96:c4:39:7c:6b:20:fe:08:3e:
         b5:0c:0d:5c:cd:a3:33:c8:db:9b:fb:41:1f:d2:08:86:24:f4:
         c6:b1:29:82:12:28:60:e9:0b:df:8e:90:54:b8:c5:cb:b6:24:
         71:18:0e:98:03:94:76:8d:41:0e:00:19:7e:67:3f:0a:3b:52:
         37:5a:8c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:06:46 2025 by rpki-client