Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/643f227c-c0e7-318c-bcfa-9d5328d8fea3.roa
File:                     643f227c-c0e7-318c-bcfa-9d5328d8fea3.roa (raw, json)
Hash identifier:          PD0AnDNc4fiqb0Qp3Vo39Y/FMOJcU9AZIvJZo6Jjc2I=
Subject key identifier:   AE:32:68:0F:42:41:72:0A:8C:EF:AB:1B:6B:A0:82:AC:8A:C7:9B:A7
Certificate issuer:       /CN=d057304d-4312-43aa-92a7-91bbd7043aab
Certificate serial:       010D0C9F4328584A4AD58EF1A64BA77509A24380
Authority key identifier: 91:3E:68:78:2A:B7:8C:27:CC:4B:07:99:5C:F1:BC:F3:FB:11:69:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/643f227c-c0e7-318c-bcfa-9d5328d8fea3.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     53266
IP address blocks:        208.99.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:8e:f1:a6:4b:a7:75:09:a2:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d057304d-4312-43aa-92a7-91bbd7043aab
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=32afd805-3527-45ed-8393-30ef6f3e4a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:46:37:30:c2:a1:d0:9e:b8:41:41:5d:9d:6e:
                    32:50:c7:d5:74:ca:ba:b3:d5:85:4f:89:35:4a:e5:
                    78:33:42:b3:89:8d:c7:f8:af:f3:33:c6:7e:ce:61:
                    1b:64:2d:a7:4e:29:c0:67:9d:f9:70:a3:5b:40:a1:
                    0c:4e:bf:28:c0:da:6c:eb:5f:9c:ab:57:47:c5:6b:
                    3d:98:13:6b:42:fd:3a:27:49:dd:37:24:e7:03:a1:
                    9a:98:1b:02:e6:7b:d7:89:e6:34:e7:3f:53:92:85:
                    93:8d:cb:9d:30:62:8e:43:fc:bf:ac:db:81:9d:22:
                    db:6a:3b:69:97:46:ac:fc:52:2d:28:81:c5:36:80:
                    aa:89:37:7c:cd:6f:4d:11:0a:1f:34:20:e6:b8:5b:
                    e8:91:9e:03:35:7e:e6:54:58:48:55:0a:59:f3:dd:
                    b3:90:49:9b:a4:de:54:02:e5:31:b0:ac:87:46:38:
                    49:9a:3a:09:66:87:66:56:61:ba:e8:32:8c:59:5d:
                    3e:19:a4:a9:16:8e:33:09:96:80:ae:14:54:e8:28:
                    a3:ec:00:b0:28:12:86:aa:04:71:3a:1d:50:97:48:
                    e5:5c:a9:60:60:74:1f:61:d6:ae:bb:94:82:fa:49:
                    59:ad:91:b7:a4:9d:68:ed:3c:84:48:7e:d8:7b:ec:
                    30:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:32:68:0F:42:41:72:0A:8C:EF:AB:1B:6B:A0:82:AC:8A:C7:9B:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/643f227c-c0e7-318c-bcfa-9d5328d8fea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.crl

            X509v3 Authority Key Identifier:
                keyid:91:3E:68:78:2A:B7:8C:27:CC:4B:07:99:5C:F1:BC:F3:FB:11:69:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:bf:5f:62:74:be:11:28:09:4b:c8:5a:86:08:68:26:a5:63:
         35:57:bb:07:fe:6e:19:65:be:d3:5e:5b:29:63:f8:c7:41:71:
         0f:3c:d1:bd:8c:fd:5c:07:ce:86:3b:8e:c1:d8:d4:bb:04:0f:
         c4:34:82:e6:df:5a:e2:e5:d8:f4:37:39:a6:b9:87:34:91:4a:
         93:7b:65:9e:62:d6:58:6d:fc:76:c4:d2:53:78:57:1b:aa:79:
         13:08:93:6a:cc:3f:99:c4:4a:a0:b4:bd:9e:c7:fb:c1:bf:1b:
         16:01:5c:c7:42:f6:65:3d:2d:33:9a:8d:34:af:ea:08:90:8e:
         10:51:0a:73:4c:98:cc:00:50:c7:f6:bb:ae:96:28:11:fb:e0:
         75:dd:1e:bf:1b:78:5a:16:ca:36:6c:3a:6a:c4:cc:de:7e:a1:
         b4:9a:d1:fa:b5:6a:d9:20:7e:57:2f:37:5d:1a:c2:1a:c8:f1:
         bc:e7:82:25:07:64:c8:b2:24:d3:e1:43:8c:18:cd:82:6d:1f:
         7c:88:dd:a5:54:d5:44:63:c3:5e:43:2c:66:79:45:b0:d3:4d:
         a2:0d:db:63:26:d3:0e:19:17:b8:5d:ea:6b:b2:32:7a:fc:71:
         56:ef:32:a0:86:84:09:c4:81:ff:3f:5e:3b:26:45:2a:dd:92:
         60:9b:fc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 22:11:09 2025 by rpki-client