Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/008313bc-028e-344a-a642-dc14ad919ad7.roa
File:                     008313bc-028e-344a-a642-dc14ad919ad7.roa (raw, json)
Hash identifier:          7LxlIl4SNdgxEajlL1e3ztsIN+JtsngELGeX37G9QxM=
Subject key identifier:   55:EE:6A:A2:0B:3B:E4:BC:E8:1A:0F:3E:96:39:85:F5:86:A3:BB:71
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584A3A15734976F6685E4E054F50
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/008313bc-028e-344a-a642-dc14ad919ad7.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        208.85.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:73:49:76:f6:68:5e:4e:05:4f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=b4a0983c-3ad1-4413-b015-03a37418d8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:14:52:9c:1f:d0:6e:59:ad:f8:dd:e3:af:37:
                    28:91:a4:c8:35:99:d8:e5:ce:66:97:bc:50:ac:80:
                    1d:1e:00:04:86:32:6f:a1:60:0f:4f:a0:31:c0:54:
                    d0:59:69:4f:15:38:2e:f2:18:f0:fd:4b:9f:92:b4:
                    63:22:65:e3:1d:81:91:8d:fd:50:f3:75:b4:5c:f4:
                    c0:f8:4d:33:9a:67:82:61:38:3e:2e:ef:ab:2e:cb:
                    1e:fc:81:7b:e4:d9:4d:37:c1:3f:81:f4:ca:14:30:
                    20:00:70:75:43:85:16:99:92:7c:44:6e:fb:8b:10:
                    36:d6:90:84:ed:a2:a8:ca:03:44:12:dc:da:de:e9:
                    06:40:74:df:6d:4e:8a:91:c0:ed:c7:71:e3:1b:36:
                    a6:bc:f5:5c:f8:1c:d7:18:f3:86:d6:f0:6c:0b:54:
                    7d:82:0c:fb:d9:0f:11:c1:ed:a8:66:91:8f:c8:61:
                    b6:58:d9:55:76:06:d0:ca:95:86:f2:d8:5d:58:0e:
                    3e:82:13:0c:0d:e0:c7:18:da:70:81:d9:66:f9:64:
                    71:d7:05:56:5e:01:69:ed:71:14:08:05:44:c2:9b:
                    ce:7f:d0:26:80:31:42:52:b5:67:34:07:58:d0:31:
                    2d:0d:3d:80:8d:84:d5:26:f8:d5:62:35:ba:54:73:
                    13:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EE:6A:A2:0B:3B:E4:BC:E8:1A:0F:3E:96:39:85:F5:86:A3:BB:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/008313bc-028e-344a-a642-dc14ad919ad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:70:94:2e:0d:ec:ee:51:a7:82:44:39:ee:f0:bb:93:08:41:
         8d:f1:a8:4d:4f:33:97:86:1a:d5:cd:df:29:33:28:b7:3f:12:
         0a:99:b5:c5:b0:7d:c0:15:4f:d4:17:df:b3:18:55:ab:02:f2:
         1c:37:67:b9:b9:59:ab:df:cf:d7:73:b9:b7:b6:99:a8:bc:f9:
         8e:ff:ff:03:4c:51:29:c0:42:33:1a:04:59:1e:a9:c1:e3:85:
         fd:e5:c4:03:54:93:48:5b:b9:df:fd:ae:3f:a5:d9:4e:d3:c1:
         15:5f:d9:ed:f1:cc:0c:db:46:fd:bf:c6:d7:40:74:c2:95:66:
         af:6e:7e:e6:6c:bc:79:0b:e5:1c:4a:8c:c7:f5:17:7a:70:df:
         0e:e0:ac:ca:a3:78:15:51:a9:55:1b:39:42:29:5f:c5:b9:fe:
         89:da:c8:69:8f:f4:be:70:d8:55:79:75:7c:47:fd:2a:10:89:
         b6:65:01:cd:c2:a4:54:74:ad:18:6d:6d:c2:0e:be:b0:cc:30:
         1d:32:36:91:d1:cc:db:47:d0:c5:27:62:b2:53:65:f6:b4:1f:
         97:04:07:d9:71:44:d9:f6:b6:06:16:6e:2f:82:94:ce:ea:1e:
         c4:d8:00:83:63:52:6e:bb:b3:91:13:e1:c8:aa:e8:2e:b4:b7:
         f1:f1:62:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:56:10 2025 by rpki-client