Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/8639d46a-3f1d-3956-b699-e08011fcbcdc.roa
File:                     8639d46a-3f1d-3956-b699-e08011fcbcdc.roa (raw, json)
Hash identifier:          wJOmtfU7tFsU6LCl6IcwBsAd0oggMl8I1bVT4FHFBzk=
Subject key identifier:   5F:80:D9:D8:71:E0:49:F6:22:9F:21:8E:F0:09:03:57:73:97:46:6A
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584AF521476EC824A36CD558F480
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/8639d46a-3f1d-3956-b699-e08011fcbcdc.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     36511
IP address blocks:        208.103.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:47:6e:c8:24:a3:6c:d5:58:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=275fa8e9-72b4-4eb0-8a15-8b0ec13c90da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1b:02:19:e8:17:c5:0b:22:07:93:86:97:73:
                    b1:63:d8:ca:cf:2e:d4:9c:ac:7a:fb:ee:f9:6e:38:
                    09:15:6a:0f:07:21:64:e5:1b:30:d2:26:97:e3:15:
                    b1:b7:bb:c7:9b:3c:76:93:48:c7:fa:96:09:0a:75:
                    9d:58:0a:54:5a:9c:c2:5d:8c:94:22:71:26:5f:12:
                    ec:0b:de:1e:0f:41:b3:e4:22:77:9b:a3:12:e0:ba:
                    2c:15:04:5b:fc:bb:47:27:f2:9c:4c:c3:b1:12:89:
                    ff:8c:2e:28:34:6d:fb:3b:d2:d5:6d:1c:c9:89:3e:
                    d6:1a:e5:d1:46:82:94:44:ac:4e:56:fd:4f:23:8c:
                    33:4a:0d:0b:e8:8a:56:be:d6:32:4f:5e:70:8d:1b:
                    bd:6f:c3:78:9c:84:da:45:f1:27:0f:53:5c:75:d2:
                    51:c1:77:9e:c7:23:71:f1:dc:10:0c:71:97:95:18:
                    f2:75:6a:08:26:9c:34:e7:6b:33:e9:06:ae:bf:c6:
                    75:f9:63:e5:75:a9:46:1c:e9:30:44:8d:6e:dd:fa:
                    e2:86:75:c1:38:05:ae:79:f1:bd:37:80:d7:b9:04:
                    fa:6e:57:6c:fb:f2:b8:52:1c:5b:3b:51:c7:ce:16:
                    39:25:bf:79:ed:3f:0e:cd:31:b1:8f:ce:56:96:c7:
                    f6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:80:D9:D8:71:E0:49:F6:22:9F:21:8E:F0:09:03:57:73:97:46:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/8639d46a-3f1d-3956-b699-e08011fcbcdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a7:c1:e1:17:7f:f2:d9:32:b6:12:56:be:c2:02:13:c4:a1:
         4e:21:cc:ca:e3:24:a0:d4:ff:88:59:d5:c0:46:55:cd:6f:28:
         e1:0b:44:8e:ad:f9:17:67:01:32:ad:9d:e6:e5:31:bf:9f:e6:
         ff:14:9d:90:30:e6:43:bb:9e:38:b4:8c:59:0c:2a:90:9b:96:
         30:5f:40:ff:54:eb:ab:91:09:5d:de:b3:89:33:a8:e3:96:0d:
         76:30:8a:ec:5c:7b:cb:bf:76:bb:d7:d5:31:6a:e0:c5:5e:1d:
         c1:5c:2a:e8:f9:15:5b:af:b9:6c:27:17:c3:f8:d5:af:99:52:
         24:b6:ab:a3:7d:21:70:9e:c5:66:86:9e:51:2f:a3:ac:ce:24:
         2d:80:b2:7b:24:c4:c3:71:fe:ea:f4:0e:99:53:15:8a:c3:cb:
         f8:3e:02:a0:4e:9c:60:3a:31:02:5d:99:59:5a:58:34:27:52:
         cc:f9:fe:8d:1c:ef:26:28:41:cb:9e:a7:b0:8e:fe:2d:b7:64:
         c2:78:d0:3a:46:38:91:ac:92:95:ef:d4:b3:3b:16:4e:12:66:
         8e:37:07:9a:27:a6:26:bf:cd:7d:3f:56:56:f4:43:86:22:48:
         2f:62:b6:ef:54:08:58:6f:ee:dd:09:86:f3:d6:82:bc:ae:8b:
         99:d8:02:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:54:27 2025 by rpki-client