Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ad917844-6dd3-31a2-bfbf-cbab9c36c02e.roa
File:                     ad917844-6dd3-31a2-bfbf-cbab9c36c02e.roa (raw, json)
Hash identifier:          DJKZvNXAyKfQMdfWRFbhdxvc6nXVoL30qkM7cdtcdmA=
Subject key identifier:   0E:CF:41:AA:6D:08:A7:99:18:2D:A8:55:AE:04:78:1A:BA:5B:EB:9A
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584AC0162992D2CCD2153D41A420
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ad917844-6dd3-31a2-bfbf-cbab9c36c02e.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     32431
IP address blocks:        108.179.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:29:92:d2:cc:d2:15:3d:41:a4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=4584f732-d4dc-44c2-aa46-3ed062e1f9fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:14:8a:49:0f:8f:c0:5d:24:01:0a:46:03:
                    3e:fb:59:0e:1e:51:d8:2e:ff:28:88:8b:63:95:93:
                    ca:e1:d8:92:f9:0b:6e:10:ec:68:0c:0c:5d:e7:41:
                    ed:02:97:7a:c8:09:d9:80:04:3f:e6:83:c4:64:d4:
                    dd:98:2c:0b:1f:31:40:78:3f:29:8e:c1:14:ad:8d:
                    ab:c3:fa:1f:b0:bd:7e:fc:b4:89:84:ef:08:38:9a:
                    45:fc:55:85:ed:3a:ab:62:a2:54:96:9f:e6:ff:eb:
                    5d:92:ab:69:4c:c3:6f:89:31:8c:e7:d1:f7:84:97:
                    98:ee:ae:f0:51:3a:bf:9b:a0:43:60:f7:72:2e:d5:
                    02:7b:6c:07:d1:4c:5a:6f:ba:9d:19:a2:54:d1:61:
                    b8:ac:65:a2:b0:d2:b6:af:70:ef:ce:67:51:34:3c:
                    83:4f:18:f8:fa:9c:f1:f8:f0:b1:24:30:17:69:f2:
                    0a:f3:2e:26:ca:12:b8:47:b3:f2:b0:40:e1:27:ff:
                    8c:f8:7f:e5:9c:41:64:c2:8b:29:8c:a1:99:f3:32:
                    1a:46:59:ab:f7:25:20:b5:73:15:6a:f8:97:b8:2a:
                    ee:a8:b4:97:e3:ac:2b:da:a8:a6:2c:33:e5:3b:6a:
                    2c:ad:06:ed:77:28:11:61:cf:c7:ab:31:c1:0c:1a:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CF:41:AA:6D:08:A7:99:18:2D:A8:55:AE:04:78:1A:BA:5B:EB:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ad917844-6dd3-31a2-bfbf-cbab9c36c02e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.179.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:79:72:dc:86:1f:f3:6b:0b:45:02:74:ef:04:d8:86:a9:1a:
         56:99:e8:18:ff:4b:fa:d1:1b:5f:97:04:69:d1:4f:20:84:93:
         18:db:3a:77:2f:1b:74:bd:4b:3d:89:73:0a:f4:30:fd:a6:0f:
         ec:a0:d6:59:57:8d:9b:a4:ed:3e:2a:7a:4d:c2:a9:36:ab:f7:
         e0:4c:5f:d4:e2:0b:8e:a1:e3:26:4c:0b:e0:2d:ca:e8:e0:cc:
         63:89:fa:ad:b9:27:36:30:ba:e2:35:98:57:cf:27:9f:d9:23:
         c3:99:20:51:72:a3:29:90:b3:fa:f1:a7:5a:cc:ec:d6:25:97:
         d5:1c:54:1d:bd:e1:28:78:a4:db:a6:92:2c:22:48:ba:ab:b1:
         92:dd:b0:5c:5b:d0:e6:c4:0a:5a:a1:01:62:63:7a:0f:6d:ca:
         e2:81:e1:79:fb:7b:32:aa:b5:af:8c:62:0b:75:fd:50:eb:f3:
         95:4d:91:f5:8d:19:1b:6e:a3:d9:08:49:1e:d7:dc:7a:5e:6e:
         98:4c:0e:8e:f7:0d:b3:6c:f3:05:90:0c:68:a7:2c:58:0b:7c:
         62:81:e1:89:60:c2:27:9e:20:cb:10:e5:16:e0:f6:e4:27:4b:
         e2:fb:a3:f9:41:f0:bb:65:17:ff:fb:89:4f:b5:31:af:1c:70:
         5e:01:fb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:59:28 2025 by rpki-client