Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/08923ba0-b5c6-39b9-8e3f-270426f57baf.roa
File:                     08923ba0-b5c6-39b9-8e3f-270426f57baf.roa (raw, json)
Hash identifier:          EC8BG0I0IY9iIQvAr4g6z/ctt9i1fie0DUlHxGnG8P0=
Subject key identifier:   CF:99:E0:5F:CB:00:C4:54:BB:B1:91:FC:1B:83:02:81:AB:EB:19:57
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584B1271647B45CF2B7D4E5F8CC0
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/08923ba0-b5c6-39b9-8e3f-270426f57baf.roa
Signing time:             Wed 03 Sep 2025 13:00:41 +0000
ROA not before:           Wed 03 Sep 2025 13:00:41 +0000
ROA not after:            Tue 02 Dec 2025 14:00:41 +0000
asID:                     13760
IP address blocks:        208.114.200.0/23 maxlen: 23
                          208.114.202.0/23 maxlen: 23
                          208.114.204.0/23 maxlen: 23
                          208.114.206.0/23 maxlen: 23
                          208.114.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:12:71:64:7b:45:cf:2b:7d:4e:5f:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Sep  3 13:00:41 2025 GMT
            Not After : Dec  2 14:00:41 2025 GMT
        Subject: CN=ae6d9a3f-0bc4-4211-b267-7b1e1e1cc492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b7:77:86:5d:5b:44:02:cb:64:0b:27:c0:55:
                    30:22:5f:c8:84:07:b5:1e:6c:86:24:0d:5b:7b:66:
                    8f:79:4b:b0:60:e1:9e:5e:a6:80:80:db:40:d8:8d:
                    81:0b:b0:7b:87:88:aa:3c:ab:42:e4:03:9e:5b:4a:
                    8d:5b:71:f4:64:35:69:74:94:6e:8d:00:e2:02:39:
                    62:68:ed:7e:fd:84:df:f4:08:28:98:5f:f1:0c:e2:
                    3f:00:06:1b:eb:c6:a0:9a:0d:07:b8:ab:ca:14:26:
                    72:be:ed:40:b4:eb:a4:2b:35:93:81:07:c2:a4:03:
                    76:f6:58:67:d8:b1:92:5b:c7:e8:63:e0:24:7a:03:
                    c1:38:01:a4:ff:0a:01:23:0b:a5:00:ce:65:2a:89:
                    70:55:60:66:f6:ef:ea:ad:0d:cf:4a:b6:35:e0:4c:
                    09:bd:04:3d:f3:b9:8e:77:c7:32:7d:84:5f:e6:a9:
                    b7:9e:28:d6:b1:d3:36:9d:f9:2b:13:da:14:80:28:
                    f2:c9:db:37:82:6b:81:31:0e:e2:34:08:37:25:11:
                    3d:06:78:82:90:db:35:8f:a9:28:23:99:7c:d9:5a:
                    1e:98:bf:47:da:cc:4a:7d:88:9a:90:99:fc:64:74:
                    10:1b:13:2f:2c:eb:fa:b4:e2:56:70:70:d9:7f:9c:
                    93:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:99:E0:5F:CB:00:C4:54:BB:B1:91:FC:1B:83:02:81:AB:EB:19:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/08923ba0-b5c6-39b9-8e3f-270426f57baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.114.200.0-208.114.209.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:0d:8f:52:75:bc:85:e5:dc:e9:f3:44:e1:21:ce:19:0d:c8:
         7b:a2:a4:4f:77:a0:3b:0f:33:d6:e4:6d:83:4e:e2:1f:b0:9e:
         7b:b2:ae:ef:52:e4:36:71:3f:3a:2d:9c:8a:b7:73:94:65:a9:
         19:4c:70:00:cb:08:f7:c8:a2:e3:8a:bf:1a:5b:5c:e9:bf:bc:
         76:fe:c0:86:00:b5:b5:d3:f4:85:1f:cf:25:36:3b:19:f0:dc:
         41:a7:88:e5:9c:7f:4a:28:c4:e0:de:ac:95:09:92:58:37:7d:
         15:c1:26:db:be:c0:ba:b0:ef:67:8a:7a:d2:ad:52:4c:1e:39:
         8c:f1:dd:60:fe:28:99:f5:2d:9a:8f:83:d4:dc:a7:c2:2d:d7:
         44:77:ad:14:56:b3:02:be:14:19:de:8e:c4:5f:97:4a:94:16:
         8b:c9:04:6b:94:c0:8a:d4:1f:6b:81:42:5c:2b:8f:8e:de:36:
         8e:64:18:68:bf:d2:ba:46:f8:ae:04:91:d5:e2:b3:94:96:5a:
         2f:d8:da:46:20:2a:b8:45:9f:be:eb:ae:af:e6:8e:fa:63:1b:
         eb:d8:c9:dc:88:80:23:77:9a:73:b7:5f:40:93:a8:c9:df:43:
         17:e8:bc:5d:d8:cc:59:6e:cc:c5:92:38:c4:e6:a6:33:c3:76:
         1c:50:46:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:06:12 2025 by rpki-client