Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/f1662e56-e1d7-3c92-871a-ec745901c911.roa
File:                     f1662e56-e1d7-3c92-871a-ec745901c911.roa (raw, json)
Hash identifier:          cKcS5C+MpfLLUG1nHz/6w4IAStEdF8mTadNS4Us5N0U=
Subject key identifier:   92:EF:C2:BD:F4:55:25:F8:00:5B:62:26:60:36:72:18:70:82:82:19
Certificate issuer:       /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
Certificate serial:       010D0C9F4328584ADA9BBEBE17BAF854509DB2E0
Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/f1662e56-e1d7-3c92-871a-ec745901c911.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        208.88.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:be:be:17:ba:f8:54:50:9d:b2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=e7ba7a1d-2ee0-4323-a283-d8b7e9c305d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f7:55:5e:7b:87:3d:90:ab:e7:20:44:69:cb:
                    eb:8f:1e:79:23:0d:3b:58:2f:14:a5:e8:33:56:95:
                    90:2e:9e:7e:a6:8a:6f:e6:95:fe:36:c6:b0:7b:82:
                    51:e0:b7:53:91:a3:c8:7c:7e:d1:e0:81:67:c6:27:
                    9e:ce:b1:a0:fa:96:2b:99:e6:80:c7:50:51:8d:71:
                    2c:c0:68:c6:cf:c2:52:b0:df:80:05:7c:4b:3e:49:
                    82:ad:6b:f1:15:8d:8f:e2:56:69:44:b7:1e:0f:db:
                    06:65:29:d8:a2:46:b2:d7:8d:87:8d:59:f7:cb:60:
                    b5:9b:6c:37:93:68:74:7a:d7:ff:b0:2b:07:d4:bf:
                    38:d0:8f:1e:2c:ac:e3:ed:4e:5c:ae:ae:c9:58:52:
                    da:85:c2:4c:71:2b:2a:58:c7:7f:8c:04:70:85:b9:
                    ac:c0:94:06:19:46:40:0f:73:7c:30:be:6c:4b:5b:
                    cc:bd:3d:5e:29:7c:b6:05:b3:1c:89:a6:db:f4:d8:
                    e1:af:4b:76:99:82:e8:ba:1c:ee:e3:3d:c5:02:c9:
                    72:a5:9e:cf:d0:46:58:d4:ea:d4:f1:a2:2f:9c:7c:
                    bf:2b:2a:39:7e:d0:1d:40:0b:32:5d:19:1a:11:3b:
                    0c:09:c7:d5:0e:00:7f:eb:49:f5:39:97:ac:dc:a3:
                    ce:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EF:C2:BD:F4:55:25:F8:00:5B:62:26:60:36:72:18:70:82:82:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/f1662e56-e1d7-3c92-871a-ec745901c911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl

            X509v3 Authority Key Identifier:
                keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.88.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:28:4b:68:c1:19:1e:1c:15:70:2a:61:cc:a1:90:14:5c:12:
         8d:34:22:7c:ab:ff:50:83:27:a6:61:c9:2d:e7:8c:33:98:d4:
         b1:21:58:2f:e0:ef:7e:f4:2d:57:bd:ea:eb:24:60:15:e4:7f:
         48:dc:0d:7c:ec:be:57:c5:36:ca:01:73:86:53:e2:f3:d4:34:
         2f:9e:50:e6:f7:04:9d:a2:a8:45:0b:43:85:db:01:95:7f:56:
         d7:b9:f4:af:0e:b7:fd:ad:ec:9b:be:cc:f6:da:24:8f:64:7e:
         8b:93:ca:41:56:61:af:61:94:00:7d:32:53:5a:0b:b3:f8:a7:
         a9:81:0b:5c:78:c6:0b:2c:dc:1d:37:f9:78:e0:fd:21:c0:32:
         e0:d0:93:af:b8:5f:8e:e7:cd:b6:24:52:de:90:37:f7:cf:b3:
         82:dc:81:f2:a7:79:6e:4b:89:08:0e:ae:0b:b0:9d:51:3a:89:
         1f:00:6b:b9:95:9f:11:e2:d4:b4:b5:db:8e:d3:6b:80:dc:d6:
         3a:f7:be:cb:ee:8b:2e:76:7f:c4:2c:ea:a1:9d:89:ed:57:d3:
         26:7d:d3:e5:0d:22:c7:e5:f5:96:35:9a:1c:46:c4:36:2e:51:
         f4:f7:d4:d4:dc:1e:1f:a5:55:92:e9:c0:9d:af:0d:52:c4:b6:
         94:ed:5d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:42 2025 by rpki-client