Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a74dc707-2e89-3a65-8f80-e993ceb87ce2.roa
File:                     a74dc707-2e89-3a65-8f80-e993ceb87ce2.roa (raw, json)
Hash identifier:          WHzSBy6OqYjlrkEq6TNc/fnHTuFHML7EO97ZqGQLuN0=
Subject key identifier:   79:2B:73:7A:4D:AE:A4:34:73:1E:56:B2:1B:F0:19:B7:C0:3A:6C:57
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584AB650E32CF4B1176814C47D00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a74dc707-2e89-3a65-8f80-e993ceb87ce2.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     396982
IP address blocks:        208.127.0.0/17 maxlen: 24
                          208.127.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e3:2c:f4:b1:17:68:14:c4:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=4d46e877-b63b-4adc-a482-92518e148a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:81:58:5c:64:bf:55:80:f0:88:af:82:98:2f:
                    3d:c5:97:d2:da:12:de:e8:e5:78:1c:aa:7a:1a:49:
                    6a:70:be:0f:f7:ae:26:bd:dc:46:46:fd:f4:a8:4a:
                    ce:be:d4:c5:2e:99:10:2d:22:9c:41:c2:7d:4c:4f:
                    79:02:e8:65:49:50:31:bd:e1:05:94:4d:bb:b9:57:
                    c4:e9:7f:5d:fb:33:32:0a:24:1d:1b:24:ad:95:87:
                    6f:b5:8e:cf:8e:4e:f5:17:49:60:45:29:cd:89:0f:
                    69:77:02:ad:ec:49:3c:5c:7e:57:06:e8:bc:b4:34:
                    61:19:ea:32:ea:0d:14:99:43:aa:81:19:66:90:32:
                    97:6f:ad:aa:57:0a:c5:a0:12:43:ae:8c:80:a7:5b:
                    37:3e:f6:d7:7d:85:42:ae:fe:6a:a8:06:a1:35:3f:
                    8d:a1:ec:c3:af:9b:4d:dd:e5:6b:57:59:4b:9e:6e:
                    a8:54:de:58:af:f8:d1:57:54:3e:ef:47:a8:9c:d9:
                    5d:6c:40:b5:ae:e6:17:2b:2b:21:c6:da:8c:33:92:
                    ac:ef:bf:2b:2b:5d:82:39:d9:3f:b8:3e:76:2d:e1:
                    55:1e:74:fb:f5:6c:39:82:c4:f4:98:4d:b3:a0:7c:
                    b5:94:a1:cb:d9:76:21:7c:25:8c:bb:82:70:09:3c:
                    1c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2B:73:7A:4D:AE:A4:34:73:1E:56:B2:1B:F0:19:B7:C0:3A:6C:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a74dc707-2e89-3a65-8f80-e993ceb87ce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.127.0.0-208.127.191.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b4:db:10:e3:b7:1b:35:a3:8f:90:ba:b7:f5:2e:78:9d:8b:
         a0:ab:2c:e3:ed:1f:90:d1:f1:49:24:bc:0f:53:1a:00:ad:cb:
         1a:68:13:a2:26:c5:1d:28:fa:86:d0:4c:ad:7e:b8:c1:5e:03:
         2e:60:c4:27:07:a1:c1:57:6a:74:d4:b1:67:77:79:3b:f0:42:
         9b:20:27:00:ff:5a:f0:fe:7f:a8:0a:bc:91:5d:e9:aa:d4:2b:
         5b:0b:6b:3d:1c:36:f9:69:64:59:fb:92:18:1f:4f:51:49:f5:
         8f:21:a0:b9:d5:9f:60:be:dd:ac:a3:e1:f1:73:e9:da:8b:17:
         b7:56:6a:d2:6f:b4:96:54:44:7b:75:69:0f:d6:d2:ee:14:52:
         9d:9e:c2:8c:44:03:7e:2d:28:92:8b:05:0c:cd:01:96:5e:f0:
         6f:a2:54:0a:b2:8a:e1:27:03:1e:14:9d:6c:21:38:7b:d8:10:
         52:4c:c2:b3:64:cc:88:ec:a6:a9:9d:89:cd:1e:4c:f3:82:6c:
         78:c8:05:f0:9b:72:0f:51:cd:60:eb:71:c3:1e:25:23:98:44:
         13:54:0c:b6:60:56:10:58:45:db:ab:24:e3:20:54:d5:15:03:
         9e:d1:3e:db:72:f1:9c:c9:6f:09:55:ad:e6:17:17:90:4d:aa:
         35:7d:bd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:03:09 2025 by rpki-client