Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/95a5c3a4-3e8a-3c0b-8478-0d8fcf7fa569.roa
File:                     95a5c3a4-3e8a-3c0b-8478-0d8fcf7fa569.roa (raw, json)
Hash identifier:          z9vFoymrZ0pfYaDuBwHHxZG0vazqQ8opJsKxfTMfIiY=
Subject key identifier:   DB:7F:0C:AE:BB:12:95:89:89:9F:99:27:DD:09:14:8C:0B:C5:62:79
Certificate issuer:       /CN=1f08ae50-7566-4f52-9c36-3a3f84a37c59
Certificate serial:       010D0C9F4328584A51D0733A1444346814310D40
Authority key identifier: D8:5F:AA:21:72:91:7E:BC:4B:BB:29:C8:07:A7:8C:DD:1A:2B:AD:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/95a5c3a4-3e8a-3c0b-8478-0d8fcf7fa569.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     174
IP address blocks:        208.82.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:73:3a:14:44:34:68:14:31:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f08ae50-7566-4f52-9c36-3a3f84a37c59
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=5a18f736-2bba-4eda-9f0b-8a35a65d7ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:7e:4f:37:cd:6a:81:0f:69:27:0a:44:9a:
                    59:25:85:41:06:d8:ed:39:c5:88:75:16:c5:3f:be:
                    c4:d5:53:f8:0b:3e:63:a3:20:2e:3c:b5:b3:bf:b2:
                    f2:b4:90:1d:f8:7b:75:38:b7:55:f6:65:2b:3a:bc:
                    a6:25:30:36:bb:41:f5:12:b4:a4:2b:49:73:1d:06:
                    ba:43:90:04:19:9f:f0:1a:af:18:ad:99:b3:8d:1e:
                    56:38:40:89:52:6a:45:7f:c5:26:d4:0f:ee:58:26:
                    8a:fd:31:79:68:ee:5a:96:2f:95:71:16:e6:19:d8:
                    26:03:c9:f6:20:98:de:c9:d0:9d:ce:05:d5:1e:33:
                    ac:86:9e:2b:13:83:47:1f:84:51:9a:44:21:8e:50:
                    0d:7d:3a:f4:1b:05:69:a9:29:0c:94:42:f6:30:e4:
                    a7:56:71:32:8d:62:13:58:a0:34:c8:ca:33:a4:a3:
                    4d:80:0d:65:b0:e2:63:da:bc:6c:a4:6d:de:fc:0e:
                    8d:22:5b:cc:90:11:2b:27:75:e4:69:b6:be:e5:a7:
                    0d:be:22:24:24:a6:c6:3b:91:e7:26:23:fd:be:a9:
                    24:b4:81:95:82:35:7f:67:c0:20:db:3c:5b:d6:aa:
                    29:12:35:62:8d:a8:16:7e:0d:c3:ed:ba:c4:ff:a9:
                    41:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7F:0C:AE:BB:12:95:89:89:9F:99:27:DD:09:14:8C:0B:C5:62:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/95a5c3a4-3e8a-3c0b-8478-0d8fcf7fa569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.crl

            X509v3 Authority Key Identifier:
                keyid:D8:5F:AA:21:72:91:7E:BC:4B:BB:29:C8:07:A7:8C:DD:1A:2B:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:1e:65:dc:7a:38:49:96:71:07:3c:92:ca:6e:2c:46:ba:39:
         f3:98:57:02:98:43:87:85:e6:a8:ca:55:74:88:ee:a6:cc:24:
         fd:6a:2a:ba:ac:20:83:45:a1:8e:21:06:4f:17:aa:93:0b:0c:
         88:fb:9e:2f:c4:2b:1c:c2:86:e5:37:b8:ab:b7:a3:c8:2d:8e:
         28:02:ab:9c:b8:78:d9:c0:9d:b3:78:41:aa:61:22:e3:30:98:
         63:21:91:98:d5:02:78:3e:43:f2:db:a4:bb:2b:21:be:b4:e3:
         ab:64:bd:68:98:b2:1b:2e:88:47:1f:ab:df:70:99:68:96:64:
         8d:3e:7e:eb:20:b0:7a:ba:e2:4e:e0:02:2e:d7:3c:ec:db:1e:
         3f:29:37:3c:fb:b0:46:93:e4:f9:af:1d:3e:b2:10:09:67:6e:
         7b:92:8e:f5:ea:39:bb:30:80:d5:d6:86:6a:d8:03:32:6b:15:
         3e:52:67:a1:de:c3:21:a6:4e:a8:87:17:e7:75:45:cb:36:73:
         62:5f:de:44:c5:a9:3b:6d:1c:98:0b:98:1b:87:24:89:85:53:
         ad:9d:03:06:8d:c0:76:a2:20:07:26:48:bd:2b:93:20:fd:34:
         db:d7:83:23:0c:d6:9e:09:09:d3:76:f4:84:b6:b9:b6:99:a5:
         13:d5:5a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:54:19 2025 by rpki-client