Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e6408ffc-6cc4-3d4c-bfc5-f633864e2b0f.roa
File:                     e6408ffc-6cc4-3d4c-bfc5-f633864e2b0f.roa (raw, json)
Hash identifier:          uUXkMgovnO6CfO5Jl+7Eeh63wG70hBTIiTba401DXcg=
Subject key identifier:   11:D5:61:75:96:9E:A9:CA:76:2C:AE:37:05:4D:AB:1D:77:0D:AF:7E
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584AE5C671BA80721574ED24F8D0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e6408ffc-6cc4-3d4c-bfc5-f633864e2b0f.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     36013
IP address blocks:        208.53.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:71:ba:80:72:15:74:ed:24:f8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=894206c2-06d7-4852-b1d4-7155bc77ef12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:97:90:59:b7:d0:7b:89:ea:13:9c:48:28:25:
                    aa:64:9b:ff:bc:78:27:4d:e4:ec:c0:8a:6a:eb:66:
                    bf:9e:eb:1d:54:93:4b:2d:ef:e8:f9:9c:4c:26:9b:
                    57:d0:3a:96:48:1e:93:a7:e9:25:6a:76:b6:e7:f3:
                    e8:7c:53:17:df:94:76:46:40:49:0d:a5:4f:8f:7d:
                    a3:32:a3:56:1e:79:ee:a4:a9:a4:c0:07:76:dc:bb:
                    ee:89:5b:53:82:95:36:86:af:e2:fc:f9:04:d8:0f:
                    c6:53:d1:6b:a7:b1:4b:55:6d:3e:52:e7:d3:fc:a4:
                    b1:69:e6:42:f1:18:f0:ba:3c:d8:1d:94:81:82:28:
                    5f:d6:7d:6a:6c:f3:47:c2:69:ec:cf:2b:19:7d:7d:
                    a3:70:bf:0e:ad:83:03:fd:2b:31:f9:8a:30:9b:14:
                    cf:44:36:06:70:da:61:37:35:82:55:2f:5f:9d:41:
                    fc:e9:a4:18:bf:7b:fa:9d:40:e9:39:69:c7:6a:5d:
                    d2:6e:e4:91:e5:bc:e1:e7:af:32:68:58:c5:33:d4:
                    45:2c:40:1b:eb:66:7e:d8:1e:73:f4:b9:5a:60:4d:
                    29:2a:89:d1:fa:af:8a:02:a3:f2:73:a2:19:2f:d3:
                    ba:4e:0c:bf:fa:99:69:54:c4:20:05:80:0e:4b:0d:
                    22:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D5:61:75:96:9E:A9:CA:76:2C:AE:37:05:4D:AB:1D:77:0D:AF:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e6408ffc-6cc4-3d4c-bfc5-f633864e2b0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.53.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:82:8b:5e:83:29:2b:ce:71:f4:f4:d1:ec:90:31:ad:38:1d:
         0b:f8:24:e7:bb:19:d0:8b:2a:29:40:ee:f9:59:17:aa:c5:e5:
         e2:01:c1:74:55:9d:cc:4f:b0:a0:10:ff:d4:d2:f3:59:82:cf:
         12:a9:d1:d5:50:ef:90:17:80:27:b4:46:cb:c1:8c:b7:1a:f8:
         54:cb:1b:11:e6:ce:ab:81:44:ae:25:87:bc:1b:6b:22:9d:81:
         ea:ac:59:f2:1e:c7:fc:5a:3d:d1:43:fa:78:95:aa:00:f6:25:
         51:73:b8:52:4c:5b:97:26:7e:1d:98:e1:2d:14:6b:8b:a0:bc:
         f8:bd:5d:66:a4:ba:09:74:e1:d9:e4:19:40:d7:f5:6a:0e:d8:
         55:2c:a6:5d:6d:03:cf:6c:73:b6:44:69:b3:87:bb:44:c6:5c:
         1e:d2:f5:69:44:b4:c9:c0:93:24:36:3d:ea:a8:f4:80:69:c5:
         0d:09:3e:d6:95:af:30:8c:cb:8a:98:c3:70:76:15:c5:3b:57:
         0a:e5:6a:23:10:4c:05:e7:dd:ea:13:b6:e4:2b:e0:b3:eb:29:
         8e:e8:08:79:3b:e2:de:02:ae:de:7b:b3:d2:fd:0c:9a:72:f3:
         e6:f4:fa:d8:d8:91:de:d8:f2:f3:4d:9d:60:b6:ba:9b:4f:51:
         f2:38:23:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:24:43 2025 by rpki-client