Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/16d938f3-ab06-3582-86c4-fa5c07e07d07.roa
File:                     16d938f3-ab06-3582-86c4-fa5c07e07d07.roa (raw, json)
Hash identifier:          tL1Ig7iawFYrd9CRafH7BN7P4J6erLxJB5pCb1F2ciY=
Subject key identifier:   9D:68:46:6F:F6:D0:1F:A2:B6:DA:0C:B1:20:A5:36:04:10:04:C3:39
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285849F87A8AC3CA11DCE2E96D9A80
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/16d938f3-ab06-3582-86c4-fa5c07e07d07.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     36703
IP address blocks:        208.84.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:8a:c3:ca:11:dc:e2:e9:6d:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=539acc56-cedb-4305-9b23-4738d13ee82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:38:96:ba:ef:29:67:87:85:ed:56:00:a0:97:
                    23:f6:df:2f:25:59:63:32:72:f0:f8:04:09:ae:2c:
                    27:e4:ce:67:07:61:dd:8a:d1:fc:56:fc:19:2f:a9:
                    14:b6:e7:30:9b:bb:52:0d:05:8e:2d:97:29:5f:34:
                    2d:90:48:1c:41:26:35:d1:dd:b4:08:26:99:47:82:
                    11:f5:74:46:a4:3c:a7:31:5c:1e:13:68:78:01:a0:
                    2d:eb:20:3a:8b:88:2f:f0:6b:fa:b1:b3:22:d8:d6:
                    f8:2b:e6:83:d4:14:12:82:88:f9:d4:c9:6f:dc:bd:
                    7f:ab:a1:a0:74:25:99:4b:1c:17:e7:84:b7:94:61:
                    f8:d6:1f:17:db:23:8a:b0:e0:2c:3f:df:48:37:3d:
                    38:f0:6d:85:d3:08:12:1b:3a:f0:a6:81:e9:ee:86:
                    43:80:d6:94:49:36:6b:8e:e2:6b:1f:4f:7f:81:f7:
                    25:a8:08:b1:96:63:87:d8:d5:0c:95:0b:7f:6f:35:
                    95:5c:90:d2:67:55:4c:4e:a2:78:87:35:b9:a2:76:
                    92:70:03:e7:e7:fe:3d:ed:37:63:a3:b9:18:eb:75:
                    6e:fd:13:fd:d5:75:0e:f5:f8:d1:d6:01:b7:f5:e7:
                    aa:22:3b:6f:a1:00:e3:c3:29:b7:e5:1a:33:74:70:
                    da:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:68:46:6F:F6:D0:1F:A2:B6:DA:0C:B1:20:A5:36:04:10:04:C3:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/16d938f3-ab06-3582-86c4-fa5c07e07d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.84.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:d4:19:01:c1:de:c8:9f:0f:26:0d:19:de:2a:26:52:11:a7:
         0f:c4:34:2b:4d:aa:7e:b6:2b:3e:d9:df:e4:e2:76:6a:47:17:
         87:59:26:ed:90:a8:78:32:f2:92:fa:cc:0a:be:4a:e1:19:0b:
         7e:85:e6:03:e9:df:ae:9a:35:9b:af:f4:68:d5:7a:3a:45:d9:
         3e:ee:9d:56:0d:51:86:7e:ed:35:94:d0:fe:d1:64:23:19:93:
         67:b5:87:ae:62:e1:0a:21:e1:c0:c8:84:fa:ea:9b:32:ab:26:
         da:65:e6:7f:19:fc:71:8c:33:73:5b:ea:9d:e1:b2:f6:cd:49:
         e9:21:b9:81:26:8f:80:4a:96:c7:10:19:44:e2:5a:58:6e:32:
         8a:3b:58:e4:12:77:a0:7e:12:2e:d6:3b:31:5a:10:45:ce:e2:
         6f:28:dc:2d:71:e3:1a:03:67:92:16:21:86:b7:72:a0:b1:ea:
         3a:38:f2:0e:f7:30:2a:0f:94:ec:c0:c8:3b:35:29:76:7e:21:
         eb:6e:3c:ba:85:04:65:24:c0:d8:fc:ac:53:fb:d3:f1:9b:50:
         f4:d0:f5:ff:5b:a8:a0:a0:99:2c:06:08:c6:94:63:7f:c7:f8:
         49:b5:73:1a:8f:42:3c:9a:d0:31:d8:a5:30:28:45:9c:17:fa:
         4b:d4:0f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:40:27 2025 by rpki-client