Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52fe4d79-5533-3ee4-b36c-9164abc80931.roa
File:                     52fe4d79-5533-3ee4-b36c-9164abc80931.roa (raw, json)
Hash identifier:          A31iMCNQ72N+vy94MqqvwwfSyQ2/bE8x+FaXeWWq4DU=
Subject key identifier:   63:30:A3:6C:32:2A:1B:8B:7C:60:D2:D2:37:10:1E:EE:53:6C:87:86
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A331AFCFF65792238683A2A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52fe4d79-5533-3ee4-b36c-9164abc80931.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     8987
IP address blocks:        208.204.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:fc:ff:65:79:22:38:68:3a:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=c92ba58c-cbbc-4b7d-8049-45856b4219a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ef:6b:2a:98:23:f8:06:fd:91:25:b9:1d:88:
                    6a:ac:d5:0e:5c:33:91:fc:f0:c8:18:cb:43:53:be:
                    ae:ff:7d:30:13:f7:0c:da:c0:ba:7e:b2:97:28:91:
                    74:f8:97:24:9e:4f:53:56:7d:79:f7:ca:74:23:38:
                    1d:1a:43:b6:70:f0:cf:da:85:dc:39:9f:f0:07:06:
                    62:62:60:3b:b4:35:2e:68:cf:58:60:46:9c:13:8d:
                    df:d7:7b:4f:39:86:48:26:3d:93:f4:0a:a0:98:89:
                    ab:56:46:c6:03:c3:fd:48:59:9d:84:b1:9a:07:6c:
                    42:0b:7d:f2:4c:31:71:43:32:34:34:56:dc:e3:e6:
                    af:7f:e8:d2:cc:88:eb:9f:cf:d6:63:36:1e:89:58:
                    04:22:e4:b5:8a:0f:35:98:14:06:7e:11:91:2f:f1:
                    83:b0:40:b9:5c:ee:56:02:c7:c1:e3:a7:2b:b1:17:
                    ae:db:50:66:2d:ea:00:98:27:bb:0e:45:32:41:63:
                    3b:99:0f:76:d2:6a:d8:15:84:a6:f7:df:69:dd:9d:
                    ef:a8:79:0d:91:21:52:36:2b:96:8e:db:69:90:47:
                    dd:64:43:21:bd:fc:3a:6c:59:76:ab:43:65:b7:b2:
                    c0:4a:69:0f:cc:b2:16:a5:26:34:ab:67:10:d7:64:
                    d9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:30:A3:6C:32:2A:1B:8B:7C:60:D2:D2:37:10:1E:EE:53:6C:87:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52fe4d79-5533-3ee4-b36c-9164abc80931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.204.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a5:24:f4:33:ef:ad:bc:cb:62:d1:46:34:e8:d0:38:7a:da:
         a4:9c:4e:e6:33:43:7f:ed:72:26:55:93:ec:fc:53:fa:f6:0f:
         71:7a:d9:c0:b7:c8:0f:d6:86:13:84:9d:67:14:ef:27:05:6f:
         5c:d1:eb:6c:8e:ab:5a:88:70:f1:bd:92:df:78:07:25:00:73:
         2e:10:db:7d:6b:25:f9:dd:1a:be:e5:72:e8:2d:3f:ab:4c:30:
         e0:02:ad:10:62:11:c8:26:07:7f:6f:79:9d:d6:0a:ed:35:79:
         dc:4c:e6:3d:60:d7:88:3d:36:53:d5:a3:c6:3b:ed:75:f4:ac:
         7f:d9:db:46:34:4d:c1:1a:a0:20:fe:21:95:f9:19:59:d9:82:
         57:4e:0e:0e:f0:d1:81:6f:d7:5d:43:de:62:53:71:94:6e:2d:
         64:35:8a:c5:aa:53:24:c6:1a:1f:f2:04:e7:f1:dc:c7:d9:62:
         d1:be:e4:5a:76:ed:1e:b3:ad:57:a0:8f:8f:ca:6a:09:4e:d4:
         c5:7e:e7:7e:46:4b:e9:35:7f:e2:87:9c:24:f6:d4:c7:5c:75:
         be:2b:1c:9c:c2:c0:ce:b4:bd:cc:ca:f0:d7:1c:b0:f8:79:96:
         3f:cf:d3:34:10:f0:97:d2:22:04:b0:c6:3e:3b:d9:d9:d2:c9:
         28:88:a0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:06:51 2025 by rpki-client