Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/53708f7a-5ec1-3574-bae8-071d2541a0f4.roa
File:                     53708f7a-5ec1-3574-bae8-071d2541a0f4.roa (raw, json)
Hash identifier:          dVBUhJ+9pUjT05MA2tL4dO8Vz4q2Vb7/p92dVwIxNN0=
Subject key identifier:   A0:1B:14:89:95:2B:46:D6:AB:B8:E2:3D:9E:83:84:D2:32:25:06:6C
Certificate issuer:       /CN=503b7ff7-eb05-4b50-bb5b-d7fc378b78dc
Certificate serial:       010D0C9F4328584AD23BB45B7B615B4E4A66B140
Authority key identifier: 6C:DC:B8:20:C4:DC:47:8C:45:45:46:30:E4:F9:45:1D:20:59:04:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/53708f7a-5ec1-3574-bae8-071d2541a0f4.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     10340
IP address blocks:        208.77.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:b4:5b:7b:61:5b:4e:4a:66:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=503b7ff7-eb05-4b50-bb5b-d7fc378b78dc
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=bef1acf5-68cb-4702-ac40-f04ed1d8ca54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a8:ca:26:72:bb:b7:7a:47:7c:95:9a:ab:24:
                    bc:d6:8f:5f:a7:ef:ad:20:00:2f:88:2c:f7:b0:56:
                    dc:ea:d8:f2:f1:bd:8b:39:ec:e6:97:1e:d2:87:42:
                    a5:0a:88:92:bb:21:71:a4:8c:02:80:7d:36:9c:67:
                    c8:9d:88:b1:84:60:14:5c:0d:18:5c:a7:92:5c:1d:
                    d3:3f:0b:6d:71:83:fb:16:9b:00:9e:c7:cd:6f:59:
                    a4:ed:92:e5:88:83:0b:b6:3d:0f:72:09:84:76:66:
                    c5:9a:35:e5:f2:79:88:fc:8b:74:c2:16:ef:15:41:
                    c9:82:1d:cd:f4:7e:a5:96:e8:21:9a:04:ff:f6:50:
                    76:98:45:ee:1e:6b:7b:03:97:32:7a:7d:0d:09:4a:
                    ab:0e:d1:72:b6:32:16:fd:4f:bd:cd:72:8e:40:c1:
                    71:ed:28:f5:25:32:9b:19:a4:44:45:f5:d7:03:8c:
                    1b:e6:fb:25:35:4e:ac:b9:59:0b:1b:e7:00:cf:b9:
                    28:20:b8:9a:b5:10:86:9a:8d:11:cc:51:00:9c:c0:
                    30:a0:87:74:7f:38:9a:eb:f0:78:03:e5:a9:2f:f9:
                    35:a8:0a:34:9c:05:1d:0b:e8:9e:17:93:cd:c8:90:
                    08:42:54:3b:e4:6c:00:1c:7b:86:1a:f3:c3:8c:b5:
                    63:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1B:14:89:95:2B:46:D6:AB:B8:E2:3D:9E:83:84:D2:32:25:06:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/53708f7a-5ec1-3574-bae8-071d2541a0f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.crl

            X509v3 Authority Key Identifier:
                keyid:6C:DC:B8:20:C4:DC:47:8C:45:45:46:30:E4:F9:45:1D:20:59:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.77.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:82:1f:fd:11:e2:eb:a5:08:11:1c:4b:61:7a:1c:7b:fe:aa:
         04:c9:fd:1c:ad:93:b8:57:2a:c3:be:b7:e5:2d:fc:2e:56:f6:
         86:fd:05:a1:30:fb:97:e5:80:d3:5c:0f:4b:68:3f:d4:ba:cc:
         16:78:ce:90:13:7c:04:6d:4c:ef:1c:33:f7:7b:b2:90:98:b8:
         ea:cd:36:86:ef:de:c6:02:d3:5d:33:fd:26:a9:a6:1f:31:b4:
         0b:45:c3:81:d9:51:04:62:77:74:ce:21:f5:3d:12:09:0f:cd:
         ed:c3:ed:d1:48:98:f9:de:a0:c7:0a:50:7a:4f:da:d1:ff:3f:
         b0:fe:39:20:57:50:87:b3:a8:dd:97:5c:f8:e2:7a:ee:b8:9d:
         dd:d1:34:78:2d:e4:52:6f:3b:77:ad:bf:e5:fe:3b:6c:41:28:
         c7:73:87:72:52:9f:6e:9d:f3:06:da:8e:2a:26:8f:23:9e:5b:
         b7:73:07:2d:8c:76:80:7e:1d:ca:78:bb:d1:8f:21:ad:31:03:
         a2:dc:67:84:1f:9d:9f:36:9d:ae:7b:0e:0b:5b:39:af:45:47:
         7a:ae:88:ba:db:64:8b:04:ce:58:ce:e3:21:c7:27:f2:be:45:
         4c:b9:03:e8:20:71:a7:ec:ca:06:45:3c:5d:a7:43:41:73:cf:
         14:e1:73:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 10:58:16 2025 by rpki-client