Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/4a9dcea2-a6e9-301d-a8e2-7d40db8d8834.roa
File:                     4a9dcea2-a6e9-301d-a8e2-7d40db8d8834.roa (raw, json)
Hash identifier:          DUql/gpgR/Oz90ipFbNVn2DYkVoCVnjiwEFjhgbJiMw=
Subject key identifier:   52:CE:26:7F:49:BB:16:56:A6:64:BE:40:8A:13:9E:26:DD:F2:29:3F
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F4328584AEE2686A1BD8F0E7153ABD640
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/4a9dcea2-a6e9-301d-a8e2-7d40db8d8834.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     7810
IP address blocks:        208.6.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:86:a1:bd:8f:0e:71:53:ab:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=bc8fb498-c9f2-4178-8203-f9f028ac7c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:29:5b:64:39:63:2a:9a:14:fa:c1:f9:a3:09:
                    7d:a5:3a:f2:85:14:88:78:6e:6b:fa:ec:cd:af:3f:
                    86:93:0f:9d:f4:f1:8e:fc:fe:05:74:5d:3b:7a:42:
                    69:0c:73:dc:be:35:e7:22:69:6b:9e:d0:46:c7:f3:
                    fc:be:2b:77:df:83:82:5f:ae:ca:bd:90:72:f3:16:
                    50:12:65:2a:07:53:99:5d:26:b2:22:eb:f9:22:e7:
                    bb:53:06:9b:e9:6a:51:94:84:d8:9b:83:e8:13:92:
                    41:ae:00:07:7b:13:8e:85:24:30:c3:36:f4:ff:f5:
                    18:71:e2:29:5f:8b:43:ee:f0:ed:0b:8d:e3:cd:9e:
                    05:70:84:c9:74:a1:9b:cf:29:8f:3f:a0:a8:17:0e:
                    fc:72:9a:62:99:ca:f0:a0:0d:a4:03:21:b5:df:0c:
                    8d:00:38:ce:2a:5a:48:9c:71:e2:86:95:cb:2c:39:
                    e1:2a:35:ab:2d:a8:14:87:48:a5:dc:a7:5d:27:40:
                    39:41:11:a5:59:93:64:46:80:45:88:c1:c8:db:16:
                    fb:0b:13:46:dc:9f:ea:f8:9b:b2:79:01:6b:eb:2c:
                    ec:b2:82:42:f3:28:60:56:46:fb:f8:0c:90:1b:1a:
                    32:c9:b8:8d:af:e4:f2:c2:ad:4b:af:05:62:c1:28:
                    49:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CE:26:7F:49:BB:16:56:A6:64:BE:40:8A:13:9E:26:DD:F2:29:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/4a9dcea2-a6e9-301d-a8e2-7d40db8d8834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.6.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:cd:e9:92:a8:98:84:33:7a:dc:5d:cd:fe:9c:cb:85:41:13:
         a6:f4:48:06:a6:7c:a2:54:06:c0:98:ef:2a:4d:79:43:7c:32:
         24:98:4e:85:a0:57:88:4d:bb:68:30:77:9c:52:5e:6d:f4:3f:
         f6:1a:6c:c2:96:53:70:88:b8:91:e5:f2:55:11:cf:93:cb:9c:
         a9:b3:44:bc:51:47:6a:bd:08:4e:27:49:10:07:f3:c5:44:4e:
         be:fa:63:92:3a:3a:b1:d1:c2:fe:84:a0:5b:52:e8:c1:bb:84:
         f7:f5:39:88:8b:73:94:8f:5b:53:cc:28:de:4b:73:b9:e5:7e:
         a4:aa:87:e2:e7:14:af:53:71:7f:b9:50:de:92:cb:8b:79:e2:
         e7:73:ec:42:87:02:63:ff:61:18:06:45:bd:1e:c7:7d:5e:8d:
         5b:0e:5b:52:25:3a:a1:da:1e:6a:a8:d2:e5:f7:fe:e9:e1:0a:
         d0:e7:02:11:1d:3e:00:2c:1f:0e:5b:79:7b:81:60:32:2b:43:
         4a:a6:56:b5:1e:62:2d:ab:94:08:18:4c:c2:b4:bf:4d:66:f0:
         f2:fa:05:08:a0:9c:12:1c:40:e8:4c:b3:c2:e5:5b:07:63:56:
         29:40:04:46:d9:2e:c3:94:f8:20:1e:18:35:8f:d0:b8:b1:ad:
         fa:b8:d2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:18 2025 by rpki-client