Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/594b22dc-8cbb-3e61-a8cb-494350bd1e0f.roa
File:                     594b22dc-8cbb-3e61-a8cb-494350bd1e0f.roa (raw, json)
Hash identifier:          oUgXjw9G16X2+h+BVUWMVMg/rz43+Q5VvTPv1l3HWjE=
Subject key identifier:   E6:FD:8B:73:37:BC:B6:83:FC:C5:EA:EF:F5:B1:6F:4F:BE:39:20:B2
Certificate issuer:       /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
Certificate serial:       010D0C9F43285849A784C2CDD2BF7FEAD3DD0C00
Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/594b22dc-8cbb-3e61-a8cb-494350bd1e0f.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     33322
IP address blocks:        208.82.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:c2:cd:d2:bf:7f:ea:d3:dd:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=db854833-ab23-4b49-8b9e-4fc738f40f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:53:7c:ae:22:47:2e:d1:88:ad:d2:87:ac:1b:
                    88:c6:26:99:fb:81:69:4b:ca:68:94:7d:de:d7:1c:
                    f5:06:58:e0:81:75:0b:d1:5b:6b:33:e2:21:f0:0f:
                    52:27:8c:a3:23:ef:09:77:f0:49:2d:51:11:1b:e9:
                    76:9f:9b:3f:37:c2:c8:ab:8b:5d:a8:54:99:af:42:
                    74:17:9b:a5:f5:0c:34:e0:29:ab:d6:0e:30:58:dd:
                    17:bb:cc:10:c6:a6:d2:b1:89:04:c4:bc:e6:1d:32:
                    a3:d9:b5:04:c3:d3:cf:94:e7:2b:a9:d2:6d:0d:6d:
                    fe:a0:b7:e2:1e:06:6c:0b:48:3f:d6:46:20:ea:a9:
                    26:97:b2:11:d1:ea:2c:1b:d8:55:79:7f:40:e9:b3:
                    85:25:16:78:a6:cf:ff:b6:0f:08:40:df:22:db:88:
                    66:10:ea:cf:c5:39:1a:6e:a8:bc:dc:e5:33:35:f6:
                    3c:2b:07:4d:b2:f4:20:e5:20:70:c6:d2:18:ed:11:
                    43:4d:62:0f:5b:c3:e7:75:7f:bc:7b:ed:a7:6b:e0:
                    a2:7a:bc:75:f5:11:0d:aa:65:0d:74:b6:88:df:ff:
                    5e:cb:27:b0:f6:5a:f0:03:e7:8b:18:cb:b0:0a:3b:
                    a1:0f:11:da:ac:05:ac:23:87:8c:1a:3f:30:7f:ce:
                    44:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FD:8B:73:37:BC:B6:83:FC:C5:EA:EF:F5:B1:6F:4F:BE:39:20:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/594b22dc-8cbb-3e61-a8cb-494350bd1e0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl

            X509v3 Authority Key Identifier:
                keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:f9:b7:60:a9:74:fc:62:6c:83:7d:d4:64:65:9a:fd:2d:21:
         83:88:33:69:b4:f7:91:a2:63:47:54:8b:e1:56:95:8b:06:b5:
         a7:5b:75:79:aa:20:88:85:14:16:18:c2:c9:b1:cd:fb:bb:d3:
         94:40:4b:9a:6a:04:95:51:32:79:e3:e4:15:c0:40:b6:23:40:
         6e:29:a7:38:55:f2:12:95:f4:c0:eb:af:0b:fb:be:f6:b3:ed:
         16:90:14:91:00:1f:8c:a3:0e:0c:5d:f5:53:41:1c:f0:96:81:
         9a:dd:48:63:f3:47:9d:ca:eb:75:b2:76:2f:8f:da:f1:de:ff:
         0d:8e:64:03:e3:81:04:ee:1f:3d:37:9f:f3:9b:a4:c7:03:5e:
         a3:4f:f7:3a:7a:d8:25:0f:69:7d:89:ab:60:7d:4b:2a:fc:39:
         37:6e:ae:04:8a:29:b5:0d:66:a9:34:1f:6c:be:19:e3:08:fd:
         a3:f9:1d:29:75:74:74:9c:b2:5c:0d:b6:43:e3:1f:58:b9:f1:
         2d:09:8f:89:9c:8a:6b:83:78:43:ea:a8:f1:de:80:54:b7:f5:
         53:67:3c:95:06:a9:08:e8:de:4c:d2:64:92:44:6e:62:3e:ef:
         23:02:6b:17:51:39:9a:0c:66:67:f8:79:14:5a:fa:7b:8c:f9:
         5a:eb:f3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:56:38 2025 by rpki-client