Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/be32ec28-52fd-3c6c-9565-d5dbc2992036.roa
File:                     be32ec28-52fd-3c6c-9565-d5dbc2992036.roa (raw, json)
Hash identifier:          OIPIPlQFgB9mLumBWTsAU8HTQlaRHoJJ69JKeL4x6TA=
Subject key identifier:   4D:DC:2D:EB:08:4D:50:B1:87:B8:43:C2:18:B1:BE:76:F0:08:84:6F
Certificate issuer:       /CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
Certificate serial:       010D0C9F4328584ADD6678446608B53C45FC5080
Authority key identifier: C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/be32ec28-52fd-3c6c-9565-d5dbc2992036.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     21668
IP address blocks:        208.101.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:78:44:66:08:b5:3c:45:fc:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=1c08895a-e08d-4b95-9e6e-b7546709a3c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:32:bc:eb:8a:c6:69:f8:8b:38:d6:40:1c:
                    9d:e1:4d:d7:55:61:c1:3f:e8:bd:91:e5:d1:0c:16:
                    df:cc:bd:a5:6a:f0:2f:bf:d4:52:40:07:a5:88:40:
                    55:7c:31:55:66:06:48:98:cc:ae:96:a5:65:f4:97:
                    76:2b:04:ca:c8:eb:b3:25:4e:a8:0a:7c:87:08:57:
                    53:21:d5:42:45:0a:0d:86:0d:c1:23:1b:88:57:f4:
                    c3:24:7b:b2:51:3c:e9:af:f2:94:c0:f7:4e:72:6a:
                    7c:3b:c9:fc:9a:62:6c:94:6a:ce:46:5e:dd:ba:03:
                    6e:4d:c2:88:8c:2b:be:3d:cd:aa:8e:68:bb:ab:09:
                    58:e0:69:09:49:78:74:3e:9a:f2:1b:d1:98:fd:3e:
                    99:4e:81:39:4f:5b:f3:8e:b9:47:28:ca:95:ac:53:
                    11:73:36:a9:2b:25:85:76:e0:87:b9:10:2e:9d:c5:
                    65:7d:ca:56:61:65:db:cb:7b:2d:65:ea:de:f6:74:
                    2f:a2:de:22:79:6b:b2:e2:27:29:c3:ff:ee:41:ee:
                    67:0b:a1:1f:4e:82:62:ca:de:92:4c:2f:b6:c6:d8:
                    cc:cb:e5:de:03:ec:6d:48:8e:24:e2:8c:d0:3d:48:
                    ca:f8:d8:5e:24:6c:36:8a:bf:ca:e7:b7:58:bd:1f:
                    fa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DC:2D:EB:08:4D:50:B1:87:B8:43:C2:18:B1:BE:76:F0:08:84:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/be32ec28-52fd-3c6c-9565-d5dbc2992036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl

            X509v3 Authority Key Identifier:
                keyid:C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.101.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:3c:54:16:73:e0:00:81:87:48:d1:b2:28:f8:d1:3d:74:67:
         b1:64:69:6f:08:10:b0:7e:18:e3:34:96:fa:79:72:df:96:1c:
         6a:f7:82:e3:cb:a1:dc:d2:6a:c1:49:85:6d:77:a5:06:9a:0e:
         25:1a:78:e4:88:c8:37:59:bb:dd:7d:bf:74:b6:77:d7:d8:4e:
         93:71:e6:67:77:c3:bf:00:a8:12:0f:b5:88:45:95:64:59:58:
         07:4e:e1:d9:3a:98:ed:d9:17:26:ab:ba:31:e4:1e:6d:a3:51:
         90:f6:be:de:43:fe:71:72:97:c5:73:e5:2d:0b:50:9c:fa:6f:
         aa:35:0c:4e:64:43:bd:29:a3:01:cf:a9:55:d2:8a:42:1c:b8:
         bb:a1:54:34:ba:08:14:8d:c3:b5:7a:20:26:64:90:29:a5:52:
         5e:3c:56:32:2c:3a:ef:ec:6b:7e:1f:ee:e3:03:f8:0d:90:da:
         d6:e6:60:b4:61:6c:64:72:c1:af:13:02:9d:26:67:71:c3:3d:
         e8:13:bd:07:2e:6e:b7:fc:de:9c:1e:9d:a5:0e:26:25:e3:5a:
         53:47:16:04:49:1a:57:10:b2:6b:0d:7f:a4:cb:23:a9:d7:1a:
         6b:9d:f1:ee:f4:ed:35:ac:2f:7b:21:b0:d9:cd:79:8a:22:c0:
         64:96:53:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:29:43 2025 by rpki-client