Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/2616d4aa-ec50-3d87-b194-27405fbc8db0.roa
File:                     2616d4aa-ec50-3d87-b194-27405fbc8db0.roa (raw, json)
Hash identifier:          nXL9gy1ASWw9sK+H5A37JqcTBVxGtAY2ZmDFFAMA55M=
Subject key identifier:   1F:36:12:52:F0:84:17:67:76:9B:B0:C3:5E:97:36:64:87:BF:4B:7B
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584B2CF6E1F3E007B4374BB6E2D0
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/2616d4aa-ec50-3d87-b194-27405fbc8db0.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     2914
IP address blocks:        208.80.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:e1:f3:e0:07:b4:37:4b:b6:e2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=9dde6729-a35b-41c1-9134-11dc86fadabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:ab:2b:06:23:e4:db:28:01:cf:bf:6a:64:
                    c9:3c:ac:ab:74:dc:53:8a:c6:c6:1e:d6:4c:36:0a:
                    4f:ad:39:2e:bc:5a:d4:82:95:b0:42:b2:da:1d:81:
                    32:5d:a1:25:b2:ae:37:42:69:37:d1:ea:a0:d8:4e:
                    df:02:2e:ed:e2:21:67:5a:8a:0d:4b:d5:6a:22:04:
                    16:ec:ba:5b:9d:20:81:6c:cd:50:2f:54:6f:d8:8b:
                    21:11:05:5a:e1:ba:13:97:27:e4:ef:1f:cd:61:d2:
                    a1:fd:a7:ea:c2:39:06:71:7d:a2:4d:75:11:a2:42:
                    d4:30:87:ed:ca:63:56:59:06:d4:62:8b:ea:69:87:
                    e9:36:51:f5:55:1f:19:2a:d2:56:9f:44:ff:68:6c:
                    91:f4:ed:40:11:b5:8b:55:69:a2:a9:99:9c:84:01:
                    d1:34:42:84:74:39:b6:41:ea:df:f5:39:28:15:bf:
                    22:87:30:0f:bf:15:35:55:fd:51:5b:ae:d1:1a:c1:
                    8a:b9:bf:41:6a:09:e1:f9:cf:25:3f:ad:1b:a9:b1:
                    28:fd:51:95:5b:bc:e9:4b:60:cd:8f:72:5c:45:b2:
                    47:f7:26:54:4b:f8:87:25:ce:1f:bf:ee:6e:2a:c5:
                    78:34:d5:58:a1:f4:9e:a3:6e:f5:0a:75:ad:d6:7e:
                    02:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:36:12:52:F0:84:17:67:76:9B:B0:C3:5E:97:36:64:87:BF:4B:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/2616d4aa-ec50-3d87-b194-27405fbc8db0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:1a:de:ef:57:c0:b5:2b:53:a5:24:46:8c:b2:95:bb:9e:9c:
         7b:9a:5a:13:95:52:1b:d8:86:76:8e:41:26:9d:b9:dc:bc:c9:
         c7:c1:22:b7:9e:6b:95:aa:e0:e7:29:67:84:95:ed:98:e2:b0:
         65:aa:51:04:7f:ca:04:99:c7:21:6c:ed:61:03:18:1d:04:54:
         03:ee:91:fb:87:25:78:0a:74:95:08:5b:89:dd:6a:fa:62:0e:
         5c:29:6a:5a:e7:c0:bb:84:ff:6b:d5:f0:45:a7:b1:1e:f6:6f:
         86:0b:84:7c:b1:3b:59:28:e7:9e:f0:a0:7d:22:1a:67:d4:f7:
         a1:a2:38:97:73:47:74:5c:46:47:0e:da:2f:63:3e:60:83:3b:
         0d:ed:2e:ba:37:81:82:e3:61:66:bc:49:2c:c5:50:85:fa:5a:
         eb:0c:fd:4f:8e:bb:f4:23:8d:78:4a:75:2d:52:88:0e:c1:d2:
         8a:75:c2:1d:4b:0b:60:de:57:39:d0:de:7c:96:ce:cc:83:bc:
         8f:a9:b6:aa:cf:e4:ed:a2:89:a0:c7:3c:78:ad:87:6f:a0:a8:
         ef:90:cd:dc:5e:4c:93:05:b2:46:bf:74:38:22:21:c4:3f:46:
         89:75:df:d8:44:ec:66:6d:3a:8f:e4:59:c8:d7:4f:32:fc:9b:
         be:28:14:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:10:20 2025 by rpki-client