Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/f10ca52c-1428-3a93-9cb0-1038b7d63abe.roa
File:                     f10ca52c-1428-3a93-9cb0-1038b7d63abe.roa (raw, json)
Hash identifier:          tcnlMu4pIz0O8HmvonNeh2PNFgpnrOb599F9XjWJJBk=
Subject key identifier:   52:F4:31:F8:5C:F3:68:8B:0A:3B:3A:82:47:20:9E:10:3A:26:AF:ED
Certificate issuer:       /CN=7334a22a-f222-4457-889f-5478966ecf96
Certificate serial:       010D0C9F4328584ADECBB3037611F8B1F6B06580
Authority key identifier: C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/f10ca52c-1428-3a93-9cb0-1038b7d63abe.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     11805
IP address blocks:        208.91.102.0/23 maxlen: 32
                          2620:13c:1000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:b3:03:76:11:f8:b1:f6:b0:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7334a22a-f222-4457-889f-5478966ecf96
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=2c5b0a57-98f0-4bca-992b-2435e37656e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e0:52:d2:a2:cf:35:7e:41:bf:57:20:e3:92:
                    73:81:cd:23:31:2e:b1:35:5f:b0:e1:cf:73:80:ae:
                    68:60:42:1b:ee:b1:57:ac:f2:ee:e9:27:dd:0f:a8:
                    77:74:0d:4c:d6:ea:bc:a0:3a:6c:ac:f5:b5:3f:6b:
                    ae:ce:4f:27:c4:c3:b5:51:12:28:da:29:e4:96:25:
                    ec:83:69:3a:e6:22:26:bb:66:af:a5:18:40:c0:45:
                    3b:44:7f:33:fd:35:d2:3f:b6:51:d9:29:9b:0e:7a:
                    45:4a:06:8d:9d:32:e3:b6:01:05:17:dd:25:4d:5f:
                    f0:81:de:b9:f6:7e:6c:e0:88:8a:51:8d:17:29:da:
                    d9:48:61:8b:60:1f:78:6b:63:6e:3a:8d:e4:d4:bc:
                    c9:60:56:71:11:b8:6c:23:1c:a9:26:22:19:93:65:
                    53:1e:3a:4f:9e:0a:64:dc:ae:30:a9:5c:35:74:7d:
                    84:93:42:0f:9e:ca:fa:db:f3:9e:f1:1b:0b:c8:45:
                    57:a9:16:50:6e:b9:a5:96:7c:10:93:62:53:2c:fa:
                    89:33:25:00:09:b4:05:18:b4:81:29:b2:27:83:f0:
                    43:5f:ce:e0:7b:73:0e:49:74:99:ec:37:26:c5:99:
                    c1:9b:00:8c:6e:b5:f0:5c:6f:92:fc:b0:71:82:c5:
                    29:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F4:31:F8:5C:F3:68:8B:0A:3B:3A:82:47:20:9E:10:3A:26:AF:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/f10ca52c-1428-3a93-9cb0-1038b7d63abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl

            X509v3 Authority Key Identifier:
                keyid:C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.102.0/23
                IPv6:
                  2620:13c:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:2d:24:36:65:7a:6b:fa:64:05:eb:38:74:14:3c:79:5e:04:
         1d:fd:d5:5d:a9:06:d5:18:13:41:a7:65:11:46:6f:58:72:ce:
         a5:3b:61:9f:6c:44:9d:42:a7:a5:74:57:41:ca:b2:b5:3f:e9:
         a4:58:29:bd:ba:67:06:06:9d:52:2f:9d:b2:d7:85:e3:dd:47:
         47:a3:a6:5c:0e:a4:13:b6:9f:b3:18:61:9e:a6:05:9d:cb:87:
         b7:2a:71:03:5d:b7:d4:2b:7f:fb:0d:49:ab:8a:cf:7e:46:70:
         91:b9:a6:d4:bb:6d:05:ef:50:63:92:10:a0:f4:4a:56:ed:d5:
         08:21:04:57:0d:a4:71:bb:9a:e8:38:3f:7f:ce:f9:ec:aa:74:
         30:62:aa:05:f6:2e:ff:a0:69:0a:d2:f0:97:f7:d3:99:98:c5:
         c2:85:94:5b:95:67:e5:50:20:f9:b3:77:75:23:db:93:55:47:
         8a:a7:d0:8e:9f:41:f9:b1:05:63:43:b4:69:64:d0:e9:d1:9f:
         75:98:06:e5:04:92:30:fb:38:91:ae:d6:e0:c9:88:4e:8e:87:
         e3:a8:20:2d:6e:9f:4a:66:4a:9f:84:04:1a:13:8c:0b:b8:9c:
         4c:b6:42:cc:98:ce:e4:4d:22:12:8c:7d:96:69:a9:0e:12:da:
         36:dc:3b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:41:48 2025 by rpki-client