Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4433889e-7469-326e-ba6b-e9db4a76686b.roa
File:                     4433889e-7469-326e-ba6b-e9db4a76686b.roa (raw, json)
Hash identifier:          OEWFYuAbFGlTxm4uRmXNcIsKMLkcRhV87sNW0TeM1Mc=
Subject key identifier:   E8:A5:63:03:B2:23:52:2E:66:BE:7C:42:31:ED:B1:2B:BA:35:EC:30
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584B64CE1F1643E8CD3DEFFB40C0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4433889e-7469-326e-ba6b-e9db4a76686b.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36040
IP address blocks:        208.117.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:1f:16:43:e8:cd:3d:ef:fb:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=1355065d-1357-46a2-93c5-9e4ce752ca01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:29:da:f5:35:ca:15:49:91:c8:f3:f9:d5:
                    81:b5:8a:a6:c4:a3:0f:65:d3:4c:b8:31:d8:5b:05:
                    66:c2:93:52:f4:f9:80:29:1a:1a:1d:2c:58:3b:8e:
                    16:58:f8:9b:fc:50:ea:7b:c1:a1:30:a9:14:33:a3:
                    64:1b:72:17:bb:c1:c9:c8:67:52:bc:d9:f7:65:1d:
                    10:4c:30:ac:ad:d7:1a:d0:8b:15:b8:79:c9:0e:d7:
                    cb:37:30:22:e8:3a:21:30:79:96:5d:1e:5e:91:3d:
                    8c:69:fa:92:d9:14:c2:49:4e:c3:00:b5:1d:e4:a2:
                    27:ef:21:46:78:ae:cc:33:9a:85:9f:3f:0d:31:08:
                    f5:9c:23:fc:a9:f2:21:1b:35:b6:63:e9:70:83:fd:
                    26:e7:d4:d8:a8:4a:e2:0d:86:d7:c8:bf:43:49:3f:
                    ae:83:cf:1b:fb:09:f2:93:b9:79:ae:1a:69:b4:5c:
                    ac:6d:ba:20:a8:23:ac:42:44:1f:7a:2f:8f:53:29:
                    e8:8a:ef:d8:c2:f0:96:e2:39:6c:8f:00:03:25:80:
                    19:5c:65:82:6a:68:ff:f9:e9:cc:4b:7f:e5:cf:e2:
                    9e:dd:b4:cf:07:ce:6f:5e:01:be:b2:09:80:80:b4:
                    3c:0d:f6:de:be:3f:20:6c:6a:a1:46:05:4c:4c:45:
                    41:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A5:63:03:B2:23:52:2E:66:BE:7C:42:31:ED:B1:2B:BA:35:EC:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4433889e-7469-326e-ba6b-e9db4a76686b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:b7:74:89:95:df:c6:28:af:ac:6d:97:8e:e9:64:69:0c:09:
         2d:14:9a:9a:ad:5d:24:07:cd:41:39:c9:ee:dd:58:17:36:e1:
         58:61:b9:32:99:59:80:7d:02:55:ac:8a:f9:b5:28:7c:78:eb:
         c6:28:a9:e3:5d:77:e8:3a:9b:83:b9:c0:5d:ba:f6:62:82:78:
         10:01:b1:2b:de:26:87:fb:bd:d7:65:2e:f1:61:1c:ec:f0:97:
         35:00:f1:4b:8a:0a:bd:d0:16:ef:5b:17:86:47:56:7c:45:29:
         b3:3f:c0:ae:fb:69:41:c2:3d:9f:d8:39:72:78:fb:7e:49:fd:
         9c:54:17:e2:0a:35:21:b2:a2:a5:10:22:50:da:ea:ee:e2:15:
         0d:61:a0:b0:e0:bd:60:57:48:55:2b:c4:15:ad:a0:e6:62:58:
         5a:31:3a:f2:3a:24:e5:5f:b4:18:42:d2:a3:9e:5c:ea:ed:d4:
         03:24:2c:6e:30:be:0d:4d:7b:76:cf:e8:fb:b1:78:0a:4c:36:
         37:d8:81:39:c0:80:b8:81:62:fc:49:7d:1b:81:65:c6:4d:df:
         f9:b8:21:6b:92:54:b1:18:b6:b2:78:0b:52:87:a5:9a:47:0b:
         49:62:c5:70:b9:6b:26:65:84:f0:64:86:37:a3:c3:1f:89:f4:
         96:1f:07:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:34:17 2025 by rpki-client