Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/405bfda9-7a60-3342-b3c4-16580eae979c.roa
File:                     405bfda9-7a60-3342-b3c4-16580eae979c.roa (raw, json)
Hash identifier:          tI1Y4uSJIMYuO96EXBUQx09sd5J5I7jIQ0suCKTVa1A=
Subject key identifier:   75:3A:65:1E:15:78:C0:39:68:A9:50:70:65:71:B5:E3:4C:C8:0A:EB
Certificate issuer:       /CN=62ec8079-292d-409a-a736-bddf9af8d979
Certificate serial:       010D0C9F4328584AE8912F404C84F67A51490A80
Authority key identifier: 4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/405bfda9-7a60-3342-b3c4-16580eae979c.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     46353
IP address blocks:        208.94.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:2f:40:4c:84:f6:7a:51:49:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ec8079-292d-409a-a736-bddf9af8d979
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=0d5f39c0-e27a-4710-a4dd-4c4362624b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:c3:05:82:5f:52:f6:cf:71:ee:9a:94:f6:
                    59:d1:8d:65:c6:4d:3d:1f:dd:6c:3b:20:0e:67:52:
                    35:24:78:1b:ff:81:88:1a:c9:3f:9b:f1:8e:b4:a6:
                    71:b3:1f:0f:3a:e4:b1:40:cd:55:39:c9:b6:1d:45:
                    bf:cc:fb:42:aa:f9:a9:ca:10:59:67:5a:2d:00:49:
                    53:eb:14:cd:b9:f7:59:2a:2f:5c:20:70:f3:22:c8:
                    af:19:33:3c:f9:c1:06:39:e1:00:59:04:58:d4:ec:
                    02:1f:85:43:de:5c:0a:2e:cc:65:1b:01:b3:21:e0:
                    d9:d6:52:e3:9d:38:1e:dc:1b:84:7b:16:86:02:d1:
                    d4:83:90:ce:22:15:67:6d:37:72:5c:e9:58:57:5b:
                    fe:b3:90:4b:74:13:bf:75:27:6a:c2:ae:bf:62:1d:
                    44:6c:43:a8:da:78:87:6d:17:2e:21:96:d6:6d:ab:
                    33:4b:ca:df:89:61:0b:12:c6:b6:07:af:94:30:e0:
                    d4:20:f7:75:e5:e8:fe:47:2e:5a:f9:0a:8b:a7:90:
                    27:ff:7c:38:84:e7:c6:6d:c6:18:63:b3:2c:1b:5b:
                    c8:13:49:a9:62:52:55:29:e1:93:e5:32:51:2e:0e:
                    5e:ee:c8:bf:27:d9:73:b8:9d:87:c2:35:12:c8:15:
                    1c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3A:65:1E:15:78:C0:39:68:A9:50:70:65:71:B5:E3:4C:C8:0A:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/405bfda9-7a60-3342-b3c4-16580eae979c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl

            X509v3 Authority Key Identifier:
                keyid:4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ac:2e:92:ba:b2:2a:09:fb:ce:a9:39:8b:e0:31:c7:81:a7:
         85:28:b4:ef:6b:f0:1a:af:0f:12:39:53:69:28:ce:4a:2d:ee:
         eb:94:fe:96:10:e0:1f:c1:b6:e7:0d:b5:92:5b:3d:9f:02:4d:
         70:bd:80:41:5d:e4:c9:84:34:20:d2:28:c0:66:1d:0c:87:03:
         4f:2c:63:50:1a:fc:93:6f:27:a9:c5:4c:65:3e:26:b8:14:d2:
         fb:bf:20:9e:62:63:8b:42:86:64:d5:3c:96:63:46:64:1a:d3:
         ca:40:0e:ca:ca:9e:40:75:9d:dc:e8:5c:12:4c:06:89:70:e9:
         c2:cb:29:65:dd:7b:56:b3:05:27:46:68:f4:7f:43:2f:6b:06:
         6b:b4:39:8f:2e:30:84:89:b7:a8:d7:6c:6b:7f:be:55:b7:81:
         bf:3a:29:75:1d:de:dd:3f:19:44:ef:c0:2d:7b:0e:5d:f5:48:
         7e:ae:e7:47:b1:9d:49:a5:f0:ef:cd:d1:de:f9:e2:7d:ee:a2:
         5f:ef:98:8e:05:a7:cf:11:8b:74:ae:a0:9c:cc:df:a4:82:75:
         2f:f5:39:24:cd:87:3c:bd:2f:4c:da:f3:80:6a:ab:aa:cd:88:
         33:cb:db:ed:e9:54:c3:e2:85:e5:29:25:aa:d5:25:f5:17:4c:
         b3:19:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:04:02 2025 by rpki-client