Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/05d98a1e-5ff8-3196-abf4-ec4805322b55.roa
File:                     05d98a1e-5ff8-3196-abf4-ec4805322b55.roa (raw, json)
Hash identifier:          sFQMLcgOJg7D8lge6k0NOa9rigqfBWu9i4gkUx25v3U=
Subject key identifier:   BB:DD:68:F5:0C:D6:3D:1B:79:DD:C5:BD:94:19:2D:C3:14:05:A4:2E
Certificate issuer:       /CN=7fe8e2c2-2a61-44d9-95b7-64eb181032e3
Certificate serial:       010D0C9F4328584A3FAAD9A289DD7509EA589880
Authority key identifier: 77:DB:4F:76:3E:9F:44:8F:20:A3:2F:7B:8F:72:B7:F2:EC:20:0C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/05d98a1e-5ff8-3196-abf4-ec4805322b55.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     32777
IP address blocks:        208.115.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:d9:a2:89:dd:75:09:ea:58:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe8e2c2-2a61-44d9-95b7-64eb181032e3
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=0dfd5a81-e572-499c-adb4-9c6af20cb7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9b:63:00:62:f9:e7:74:f6:b7:28:44:c1:fe:
                    fa:01:9d:67:76:ea:bf:04:18:2c:c1:c0:b5:59:c3:
                    b9:32:d5:2b:3d:80:81:78:23:77:f3:4d:fc:43:de:
                    be:61:49:ec:fb:94:b7:a5:ad:d9:05:8a:e4:1e:ea:
                    9d:cb:82:1e:13:ad:9a:a2:3b:ef:0f:21:c3:5f:29:
                    4c:53:85:c5:64:71:a7:66:c6:17:58:1f:fc:34:27:
                    be:e3:d3:f5:d2:b6:57:ce:7c:28:f4:87:9e:39:ad:
                    76:dc:de:69:56:2e:fd:ef:ff:aa:c9:df:5d:e2:13:
                    3e:6f:3f:83:ee:5d:59:83:52:45:de:c4:be:4f:9c:
                    99:cb:b7:9f:44:d8:69:61:fa:e4:84:df:c7:7e:d4:
                    94:0b:56:0e:7d:7b:8a:a0:81:b0:30:ea:50:e0:a3:
                    68:cc:bb:82:3e:a2:4a:1e:72:2b:25:36:6a:f1:7a:
                    1a:31:c6:53:fc:50:ab:0d:2d:c9:64:cd:cf:ee:b8:
                    11:f1:76:b9:b1:0d:cf:79:0c:ad:54:eb:cd:ec:21:
                    79:3e:fd:bb:be:74:20:ba:af:5e:6c:12:62:8e:dc:
                    2f:ac:1f:fd:33:0e:0d:f7:f4:07:01:33:e0:f4:c9:
                    a4:64:b6:6e:99:9a:8f:cd:64:82:f8:1b:2f:03:b2:
                    4b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DD:68:F5:0C:D6:3D:1B:79:DD:C5:BD:94:19:2D:C3:14:05:A4:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/05d98a1e-5ff8-3196-abf4-ec4805322b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.crl

            X509v3 Authority Key Identifier:
                keyid:77:DB:4F:76:3E:9F:44:8F:20:A3:2F:7B:8F:72:B7:F2:EC:20:0C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.115.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9e:84:2f:2d:11:ee:70:73:34:f7:84:0b:e1:0e:b6:e8:4d:
         9e:cc:c3:6e:08:2f:45:e9:1b:84:56:62:0c:b9:92:6e:50:12:
         89:86:81:3e:d6:d7:9b:c1:33:73:1d:29:67:25:b3:b1:ad:e7:
         ba:8e:fb:61:3c:90:e7:83:f6:55:16:d7:63:24:7c:ed:c2:0b:
         51:09:d4:19:94:1e:01:ae:75:88:6f:14:69:f7:7b:ad:b8:5a:
         fd:0e:f5:27:2d:a7:2d:98:56:db:19:38:26:51:33:0d:e2:61:
         f7:45:47:ba:c8:59:b0:d8:14:ee:81:b2:06:6a:6f:40:98:5d:
         43:9e:20:59:82:60:b4:7b:09:5c:2f:5e:6b:0d:50:b1:11:6d:
         4d:c7:af:db:cc:9c:07:06:ba:19:3e:02:05:6e:d4:fe:4e:9a:
         9d:c3:45:f4:e0:1f:25:75:63:80:b5:77:c9:fd:69:4a:fd:a6:
         1e:0a:35:9e:6d:97:09:4a:3c:ea:db:a3:6a:4f:23:d9:f4:39:
         35:61:3c:69:5c:cc:17:9a:f4:e3:7a:97:e3:83:5c:c1:5f:87:
         89:88:d9:5d:6f:cd:9b:4c:b9:d3:31:ca:7b:20:b7:40:fa:bc:
         3f:44:2b:c3:62:e2:9a:09:2a:2d:70:92:cc:b4:f5:f5:8e:70:
         01:9f:1b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:02:11 2025 by rpki-client