Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/65547dad-4b1a-39f9-b5d4-578f9cd3a09d.roa
File:                     65547dad-4b1a-39f9-b5d4-578f9cd3a09d.roa (raw, json)
Hash identifier:          gttLcT8/FXZhZMmnsK87xXN+AKe/VP6jcU3HsYZnb6I=
Subject key identifier:   35:EB:D8:90:D3:3B:2B:4A:9D:06:94:30:34:2F:E6:36:F5:CA:F8:F6
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285849955F1A54E07AD55128D909E0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/65547dad-4b1a-39f9-b5d4-578f9cd3a09d.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     33686
IP address blocks:        208.107.248.0/22 maxlen: 24
                          208.107.252.0/24 maxlen: 24
                          208.107.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:1a:54:e0:7a:d5:51:28:d9:09:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=c203c8e6-d58c-47a9-b23a-77e22895ea7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:45:b6:fa:c0:e8:b3:96:c3:57:79:f5:88:05:
                    62:bc:a0:ed:cd:c1:d9:7f:a9:c1:b1:fd:21:ba:7a:
                    37:59:ed:28:59:8a:29:a3:bc:89:97:4e:e1:d9:6f:
                    c7:da:95:52:b0:d1:ff:ab:e2:53:d1:2b:95:b1:c4:
                    27:f4:98:7d:6c:4d:9f:5e:95:b4:eb:20:68:52:ca:
                    c8:c6:ce:b4:33:e0:8d:01:e1:2f:d3:71:b2:e8:25:
                    e8:a5:68:51:c2:04:c8:46:73:dc:db:c8:76:8c:ab:
                    e3:99:5e:b9:b0:9e:55:11:c8:0f:86:13:5c:22:b5:
                    68:93:af:ef:a9:80:29:61:b9:bb:90:ed:10:6a:75:
                    0a:d0:56:53:2d:b0:06:f9:4c:8a:d1:ee:96:d4:47:
                    35:e5:a6:85:9c:0b:2c:cb:39:f0:c7:ac:31:3c:41:
                    7b:5c:1d:59:49:7f:c8:b6:66:63:2c:88:85:1e:1c:
                    60:6e:3f:cc:9d:9d:27:60:b4:c3:f6:4d:31:59:a9:
                    06:87:ed:cb:ef:36:86:26:30:fb:8b:eb:a9:2c:09:
                    34:1a:6a:7b:be:4f:6e:47:1d:3a:b6:37:2f:da:ef:
                    64:1f:60:83:52:09:f4:00:19:ef:84:38:8d:dc:1a:
                    b7:d4:3b:94:2d:ee:7c:f2:c2:4a:91:ab:46:25:81:
                    08:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EB:D8:90:D3:3B:2B:4A:9D:06:94:30:34:2F:E6:36:F5:CA:F8:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/65547dad-4b1a-39f9-b5d4-578f9cd3a09d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.107.248.0-208.107.252.255
                  208.107.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:62:95:60:bc:7d:e9:e3:62:ab:ea:d9:72:06:8c:74:be:50:
         d5:d5:c0:2b:54:a7:8f:15:15:49:1d:07:be:5a:02:08:ef:79:
         5a:3c:4a:8b:6d:17:ff:72:ac:84:cc:74:e5:9e:6d:6a:65:b9:
         d2:09:0b:39:4a:c0:c9:4f:38:4e:32:63:60:49:e6:2b:14:8e:
         89:ef:1e:ed:f9:94:d0:b5:71:95:2a:b8:78:1f:2f:29:69:27:
         58:c8:ec:76:45:47:7c:c3:03:e1:37:b0:40:e6:74:ac:d0:ae:
         cc:fa:3d:af:3c:d9:e7:4f:aa:d0:3f:49:53:ed:08:67:35:c8:
         78:41:49:92:08:fd:01:d9:1f:31:48:28:6d:72:44:f7:b8:28:
         46:09:76:f9:4d:63:c5:db:97:45:6c:af:8b:e4:1b:c8:d8:04:
         2f:57:60:4c:b8:17:71:83:e1:58:b2:1b:59:73:7e:9d:56:f7:
         63:31:1a:4c:bc:80:8e:82:da:fc:b8:c8:f1:aa:77:3b:5b:b8:
         52:1c:c8:4d:64:40:86:c0:5d:dc:73:c4:91:da:77:6f:3a:5f:
         d4:af:a5:db:19:7f:43:6e:f3:1e:84:f1:35:d3:c5:9b:a3:97:
         f4:8f:81:31:2f:a5:40:5e:87:1f:95:d7:66:dc:00:5b:78:6f:
         85:09:cd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:13:03 2025 by rpki-client