Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/974b8952-186c-379e-b0c2-e4fb964cf09d.roa
File:                     974b8952-186c-379e-b0c2-e4fb964cf09d.roa (raw, json)
Hash identifier:          mFZA873HyDxza7YMnJ35xhVknBOsMiF8GSDduQw6M/c=
Subject key identifier:   64:C1:FD:E3:3C:F4:12:09:05:E3:2F:E3:48:43:39:7E:D5:9F:E9:A0
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584A9D30FEF004AA2C00A2298280
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/974b8952-186c-379e-b0c2-e4fb964cf09d.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     21928
IP address blocks:        208.54.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:fe:f0:04:aa:2c:00:a2:29:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=6d0ea190-4caf-4170-90c3-6255a67e520e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:59:1c:fc:f2:ea:9a:33:af:d5:54:7d:ab:04:
                    c7:37:40:1e:aa:39:14:37:2f:c9:07:01:46:ab:2d:
                    94:4e:33:94:b7:95:44:0c:12:28:cc:a9:eb:87:ad:
                    00:9b:14:ce:fb:ad:d2:83:45:99:c0:2a:77:f0:15:
                    34:0b:a5:7f:30:54:b4:ad:42:56:21:a2:2a:24:c7:
                    42:e2:ed:ce:66:4b:b6:93:4a:a9:c6:69:bf:de:c4:
                    c3:a1:21:c1:93:09:80:e8:b7:22:1c:c4:ac:2b:24:
                    a1:c1:e6:83:fe:70:4b:a1:3d:2b:e6:35:35:a8:22:
                    c2:5f:17:9c:5e:7c:96:e4:02:f2:b5:34:9f:48:f5:
                    8e:22:42:d4:69:e5:07:4e:7f:71:2b:e9:e9:db:4b:
                    13:0a:74:ae:c9:44:10:77:2c:56:e1:20:ff:2d:73:
                    be:fa:47:3a:81:e7:4a:0d:46:5f:f5:9f:2f:60:17:
                    8c:67:42:27:d4:07:31:34:24:b1:1e:3c:b4:22:f1:
                    c2:6a:6b:59:75:a9:ba:48:53:4e:c2:19:38:2d:15:
                    8c:13:56:80:f5:f7:40:e3:be:07:b7:df:73:2b:77:
                    f1:8b:02:48:06:61:90:27:b7:83:8c:68:a6:03:61:
                    82:2d:c4:9c:67:0b:0a:3b:b9:e1:89:77:6b:85:1a:
                    c2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C1:FD:E3:3C:F4:12:09:05:E3:2F:E3:48:43:39:7E:D5:9F:E9:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/974b8952-186c-379e-b0c2-e4fb964cf09d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.54.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:86:58:1c:eb:86:bf:20:f3:7e:1d:2a:fd:cc:fe:fc:97:df:
         c0:0d:62:b2:af:af:03:57:5a:6a:bc:54:22:b9:5f:c2:f8:45:
         38:bf:5c:27:31:f6:3d:4e:59:85:d9:e8:8f:6e:94:3c:ef:60:
         78:be:a1:37:d0:0e:24:35:f4:7a:3e:64:db:5a:30:78:9f:36:
         31:a7:41:40:d0:40:8f:6f:02:62:89:86:2f:f6:38:94:72:2a:
         14:6f:46:7e:02:fc:cf:f3:aa:54:81:1f:17:b6:08:37:b5:9f:
         5c:13:74:e3:37:db:fd:c8:7b:4d:f2:c6:cf:87:21:f9:d8:fe:
         72:b7:36:9e:01:5d:cd:e2:20:86:95:65:7a:02:bb:38:ef:31:
         91:77:a9:49:88:7e:c0:09:9a:8c:56:ed:4f:56:63:3c:ea:63:
         e0:49:c3:e5:47:59:76:aa:7c:73:2c:74:80:c6:5c:06:0f:54:
         1a:1d:f0:2c:bc:6b:4d:ee:81:b7:2d:fe:13:0b:a5:e4:19:7b:
         69:22:8b:9c:3e:76:7a:31:1b:d3:e1:0c:95:d4:e5:b7:8a:a2:
         cf:dc:ab:53:7b:7d:1a:50:02:5e:53:13:79:1b:04:64:49:64:
         9d:80:e5:d8:82:d7:c5:38:61:4b:b6:24:84:a4:55:37:97:4f:
         a5:e3:b4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:54 2025 by rpki-client