Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/1325d191-d90e-37c9-ab59-7b5fecbfd6be.roa
File:                     1325d191-d90e-37c9-ab59-7b5fecbfd6be.roa (raw, json)
Hash identifier:          /SgZv5ECH72fx6QabB1n/2XuIqNV7jjt5CbYdaz/hdY=
Subject key identifier:   1E:61:CE:01:8C:E8:1E:68:2D:2E:B6:90:32:FB:BD:B3:BB:C2:F7:97
Certificate issuer:       /CN=d6301b93-7acb-4494-b07b-a79f8d7740ea
Certificate serial:       010D0C9F4328584ADDF83C129FB34142BF603800
Authority key identifier: C9:C5:3C:34:E8:02:6F:E2:05:1F:E3:4A:53:E9:85:67:DF:B7:2D:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/1325d191-d90e-37c9-ab59-7b5fecbfd6be.roa
Signing time:             Fri 15 Aug 2025 17:54:34 +0000
ROA not before:           Fri 15 Aug 2025 17:54:34 +0000
ROA not after:            Thu 13 Nov 2025 18:54:34 +0000
asID:                     63023
IP address blocks:        208.69.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/d6301b93-7acb-4494-b07b-a79f8d7740ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/d6301b93-7acb-4494-b07b-a79f8d7740ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:f8:3c:12:9f:b3:41:42:bf:60:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6301b93-7acb-4494-b07b-a79f8d7740ea
        Validity
            Not Before: Aug 15 17:54:34 2025 GMT
            Not After : Nov 13 18:54:34 2025 GMT
        Subject: CN=cfd264a3-83ba-4925-9113-a02e3c15a3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c8:e9:80:dc:53:05:da:8d:89:c8:e3:57:14:
                    26:e1:47:b7:0d:73:63:02:f4:d6:88:25:d2:45:6a:
                    bd:95:ca:94:ce:da:3f:b3:32:17:39:ad:b0:12:50:
                    3a:0c:3b:26:c1:29:00:de:9b:be:08:10:93:ae:9e:
                    4d:2b:50:b8:21:f9:b9:25:1a:d1:05:e4:58:79:7f:
                    7d:0d:57:04:10:9a:95:33:6a:81:76:b8:e2:97:57:
                    c9:1f:9d:ff:35:71:6b:cf:3e:68:0e:5d:77:d2:d4:
                    11:97:0b:4b:09:87:06:01:43:96:17:3c:47:69:ee:
                    24:bd:a9:0b:3c:48:5f:4b:65:97:0d:74:92:8a:55:
                    bc:c1:bd:fa:d7:2e:2a:f1:5c:2a:68:9a:9d:d2:bf:
                    81:a4:fd:41:4d:7d:83:df:bb:78:45:62:5e:15:9e:
                    f4:c1:c2:0e:4b:83:f7:25:a0:41:5a:3c:d9:3d:cf:
                    79:64:d9:88:e8:86:97:0b:a5:e7:0d:49:be:3a:fb:
                    c4:2a:2b:7c:54:0c:2b:69:53:b8:db:7e:a2:c9:ff:
                    c6:92:2d:51:fb:b4:02:5e:5f:1c:86:1a:32:c4:7f:
                    0f:07:0a:ae:cf:f8:be:72:8e:c1:13:b0:2e:49:70:
                    97:3c:62:c5:d8:83:d4:b6:d2:cb:aa:b5:a6:16:c2:
                    b9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:61:CE:01:8C:E8:1E:68:2D:2E:B6:90:32:FB:BD:B3:BB:C2:F7:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/1325d191-d90e-37c9-ab59-7b5fecbfd6be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/d6301b93-7acb-4494-b07b-a79f8d7740ea.crl

            X509v3 Authority Key Identifier:
                keyid:C9:C5:3C:34:E8:02:6F:E2:05:1F:E3:4A:53:E9:85:67:DF:B7:2D:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.69.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:40:06:b7:12:bb:79:e2:81:4f:64:78:2e:bf:ec:4c:d2:9d:
         d8:a7:4c:1d:d0:0a:13:37:4a:b3:57:f0:1e:04:b9:4f:ec:6f:
         84:f8:d8:86:9d:0c:b5:26:d1:5c:13:01:db:0c:6a:55:8c:21:
         1e:8e:76:ae:28:69:04:d3:6b:b2:46:a1:a8:69:47:6e:a3:15:
         22:bb:04:cc:67:94:5e:04:fd:c8:b1:d9:81:9c:b2:51:49:44:
         66:52:d9:2a:17:0b:3b:f4:f1:d9:18:a4:cc:15:51:30:fc:67:
         bd:b7:18:68:a5:db:ea:43:b3:9f:29:7e:21:c6:a2:63:42:1d:
         e2:e1:8e:bf:1a:57:eb:26:88:ea:4a:a7:8a:39:95:42:9c:02:
         9f:0f:79:e8:84:26:77:ea:eb:f8:97:35:ab:ae:32:37:00:56:
         8a:6d:f4:ea:00:b7:de:cc:39:53:fd:f9:57:d8:f7:48:e3:03:
         de:d3:2f:b2:df:90:7e:ac:21:96:7b:24:5e:1c:d6:43:8c:bf:
         eb:e7:ea:a3:73:81:2f:a7:6a:cc:0d:4c:a4:13:f4:8d:30:d9:
         cb:b7:fe:71:2d:58:bf:36:e1:61:eb:b8:61:bf:a8:bf:55:9a:
         8f:4e:a2:36:3c:49:17:1f:67:6a:d4:86:a4:bf:f6:50:70:ec:
         6f:0a:88:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:38:37 2025 by rpki-client