Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01bdf71e-eea5-4e2f-890a-d2ea4d527d19/f26992d0-ecba-3b2c-a2f1-b0ef581aeceb.roa
File:                     f26992d0-ecba-3b2c-a2f1-b0ef581aeceb.roa (raw, json)
Hash identifier:          kIRllbXocba0h1KWH1/P9YI/7t9AR0NPdUgMQxSjfxM=
Subject key identifier:   EA:E7:61:68:87:FC:16:92:E8:6A:E8:02:A1:88:9A:A1:AA:00:8E:8C
Certificate issuer:       /CN=01bdf71e-eea5-4e2f-890a-d2ea4d527d19
Certificate serial:       010D0C9F4328584A857606401C1E517C3C984900
Authority key identifier: C5:55:49:1B:EB:A8:FA:DE:2B:66:B7:84:E1:43:9B:D5:F2:94:1C:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01bdf71e-eea5-4e2f-890a-d2ea4d527d19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01bdf71e-eea5-4e2f-890a-d2ea4d527d19/f26992d0-ecba-3b2c-a2f1-b0ef581aeceb.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     36363
IP address blocks:        208.81.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01bdf71e-eea5-4e2f-890a-d2ea4d527d19/01bdf71e-eea5-4e2f-890a-d2ea4d527d19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01bdf71e-eea5-4e2f-890a-d2ea4d527d19/01bdf71e-eea5-4e2f-890a-d2ea4d527d19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01bdf71e-eea5-4e2f-890a-d2ea4d527d19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:76:06:40:1c:1e:51:7c:3c:98:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bdf71e-eea5-4e2f-890a-d2ea4d527d19
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=1f62fe8f-0e56-4ea4-b7d7-b4ef9474033d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:99:24:18:32:11:4d:7d:f3:87:a1:79:18:2d:
                    c5:e4:91:b0:cd:c8:e5:49:ef:81:96:a7:a0:7c:56:
                    e7:91:9e:a4:77:f3:81:46:63:31:df:e1:55:80:b6:
                    9c:00:0c:19:d0:7c:0c:36:9e:44:ad:d9:34:d8:d8:
                    e2:eb:52:4a:d4:16:85:ef:82:58:4c:75:16:4a:1d:
                    86:92:91:8f:11:c8:dc:52:e4:78:76:41:ba:60:74:
                    61:cc:39:48:ab:3b:79:db:b8:71:02:f4:ec:dc:57:
                    ab:8e:cb:7b:82:ce:eb:ed:fa:08:da:1b:d4:b8:ca:
                    99:e3:53:ee:b0:49:cc:01:5c:ba:e2:75:ae:95:5d:
                    05:46:08:01:92:e8:c2:b7:62:1a:be:bd:34:2d:e1:
                    73:e0:c9:c6:95:86:e2:11:6c:33:89:04:6c:ea:4f:
                    30:8c:6f:a0:ad:0a:08:46:53:c0:f1:0a:f8:7d:af:
                    15:c6:95:9a:e0:86:23:4c:db:d9:c9:e0:ef:d1:3e:
                    09:ae:2d:7e:2b:4b:d9:98:a8:35:a4:2f:9f:82:d5:
                    14:2a:3d:6d:c4:ea:54:8c:0b:f6:37:45:32:aa:e5:
                    02:81:7a:b7:4b:6a:60:20:9e:8c:f8:46:31:33:d7:
                    71:ca:5c:f9:64:8e:78:7e:8a:37:31:12:56:ff:cb:
                    9f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E7:61:68:87:FC:16:92:E8:6A:E8:02:A1:88:9A:A1:AA:00:8E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01bdf71e-eea5-4e2f-890a-d2ea4d527d19/f26992d0-ecba-3b2c-a2f1-b0ef581aeceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01bdf71e-eea5-4e2f-890a-d2ea4d527d19/01bdf71e-eea5-4e2f-890a-d2ea4d527d19.crl

            X509v3 Authority Key Identifier:
                keyid:C5:55:49:1B:EB:A8:FA:DE:2B:66:B7:84:E1:43:9B:D5:F2:94:1C:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01bdf71e-eea5-4e2f-890a-d2ea4d527d19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:45:d7:83:fc:ed:36:f9:fe:13:08:c5:cf:e2:6f:50:c8:b9:
         24:16:4b:f0:5e:11:c1:04:aa:25:3e:c6:19:c5:52:3a:78:d1:
         13:1c:6c:cb:15:de:f7:0c:47:47:2c:a4:95:de:ad:f6:90:fe:
         8d:bc:17:7e:2a:f7:08:e1:d4:cc:89:ba:7c:79:14:45:a2:8e:
         77:c3:e6:6f:92:44:b3:fe:4b:e9:bf:6e:43:19:58:74:be:2a:
         53:90:15:5d:e9:69:9d:43:42:fd:d4:2d:c6:eb:da:ed:8d:cc:
         74:98:53:fd:5a:83:68:44:fd:2c:06:8f:4e:67:59:b4:ff:82:
         00:42:5f:39:38:fd:8e:26:74:4b:08:4f:e9:07:a9:88:cc:fb:
         52:31:05:c0:5b:7f:f6:9f:76:71:e0:94:43:57:5a:fd:4a:99:
         d2:49:58:97:f0:6f:df:5a:bd:e5:f6:6e:3d:9a:5e:44:b1:2e:
         82:4b:ad:f4:a7:39:63:82:1d:14:ca:47:2f:ca:f4:fe:8d:4b:
         16:0a:75:6a:5a:61:31:6b:14:1b:bd:1c:2e:fb:95:b3:8e:36:
         9b:87:e2:49:76:fe:b9:53:d7:62:74:68:91:96:e0:87:e0:89:
         51:f6:ce:08:bc:b6:59:cb:ae:ca:27:89:c3:95:01:2d:d5:6c:
         06:4b:ed:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:50:16 2025 by rpki-client