Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/0efc0604-f905-307c-949d-90a720c308cf.roa
File:                     0efc0604-f905-307c-949d-90a720c308cf.roa (raw, json)
Hash identifier:          tTx2IjbonhJN35vtWfZ6P23F0nbelch+ZfXpXUi0Sxg=
Subject key identifier:   4D:16:9C:C7:46:B7:CD:5D:1B:61:99:9B:85:99:F4:52:89:D6:30:AD
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584AE46121C98DD697AFC86E5800
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/0efc0604-f905-307c-949d-90a720c308cf.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     57043
IP address blocks:        208.67.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:21:c9:8d:d6:97:af:c8:6e:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=73a92914-3709-426c-92fb-447ccf5c0843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:ad:a8:14:5b:ec:1b:5b:53:69:4d:46:b5:
                    1d:c1:f8:32:dc:a2:cb:83:d0:03:b4:36:67:12:78:
                    a5:6f:1f:5a:6d:ca:1e:ab:ec:56:17:9c:74:69:88:
                    a6:93:58:80:30:7e:83:8f:1a:bf:8f:fb:ac:db:83:
                    8d:29:29:5f:3c:42:f9:cd:c3:e3:d3:0b:a9:10:57:
                    b5:cf:eb:c7:35:94:80:4d:f0:b8:cf:1c:06:b1:ee:
                    42:18:6f:f2:8f:ae:73:16:b2:54:8d:4c:2a:ea:08:
                    f9:6b:d9:39:1f:a3:d8:36:56:46:0c:73:28:67:48:
                    63:22:78:35:9a:65:b5:7f:53:cf:5d:e1:a7:eb:85:
                    9d:45:f0:d1:0c:aa:56:cf:1d:b6:04:08:51:c6:36:
                    1d:3a:0c:59:84:f1:56:eb:d1:58:c3:25:41:fa:5f:
                    d6:c2:a5:b5:6e:7b:53:e1:14:f1:34:bc:0c:d4:c2:
                    d7:90:fe:b4:5a:26:a6:51:fc:e1:73:3c:e4:88:14:
                    2c:91:99:ca:b0:17:aa:64:c9:57:46:f6:f6:c0:01:
                    72:0c:15:20:77:46:af:48:a6:fc:63:41:2e:76:2d:
                    04:f9:c4:06:9a:1b:6f:17:aa:b2:16:2b:07:01:30:
                    f5:3e:b1:21:35:70:27:00:a6:f9:98:15:93:bd:7e:
                    b4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:16:9C:C7:46:B7:CD:5D:1B:61:99:9B:85:99:F4:52:89:D6:30:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/0efc0604-f905-307c-949d-90a720c308cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:21:59:68:80:58:0f:0f:fb:da:14:b8:0a:c7:b6:59:f1:f1:
         a1:a6:f5:ab:56:6b:95:80:ff:62:68:b6:0c:c9:7d:e2:61:80:
         2f:a0:7e:54:19:da:70:c8:d5:9d:76:30:0b:0c:48:58:44:a6:
         de:33:8d:d9:96:37:8c:94:87:89:79:19:20:73:2f:6c:98:f8:
         0c:9c:8f:cb:63:22:68:20:53:c0:b0:bc:3c:08:ea:12:47:e1:
         d2:ee:97:1a:bb:b7:35:56:e6:81:75:da:70:fa:b7:83:ab:4d:
         89:b0:7f:97:9d:56:8b:38:63:5c:ef:25:02:25:f4:a8:a1:b3:
         2c:60:50:a3:b0:dd:5a:c4:6d:08:6b:ee:f8:22:1b:89:d1:ef:
         0b:db:f4:90:41:29:4c:fb:56:7b:9f:41:93:dc:56:cf:a8:10:
         85:e9:70:cc:e8:a3:80:87:6a:51:44:d8:b9:63:9d:8b:c4:88:
         9f:9b:ce:ca:46:e7:9e:88:06:80:68:fa:7b:4f:cc:68:66:5e:
         d1:f2:d2:eb:02:0c:17:d4:02:c6:d5:13:11:b2:0e:4f:25:58:
         a5:5a:40:a4:75:bb:20:c1:e0:96:c1:3b:93:cd:74:1c:c1:92:
         38:4e:d3:b4:51:da:90:bb:89:23:e2:ff:40:3a:2c:2b:55:de:
         1e:49:e7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:35:34 2025 by rpki-client