Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/611daa3e-9168-338f-b65f-1c641fb5f7f7.roa
File:                     611daa3e-9168-338f-b65f-1c641fb5f7f7.roa (raw, json)
Hash identifier:          hQxq1IJlOBDfXT6lzpsNHkEJ03anuiqyYuPsxjmz/oo=
Subject key identifier:   D2:E0:D3:10:BF:57:10:21:C4:CB:E7:B1:8A:62:8D:3C:4F:48:9F:44
Certificate issuer:       /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial:       010D0C9F4328584A14656F49DCC58FD41BF04A40
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/611daa3e-9168-338f-b65f-1c641fb5f7f7.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     56274
IP address blocks:        198.208.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:6f:49:dc:c5:8f:d4:1b:f0:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=5fd34d5b-a563-45ec-bbe1-16a1039989af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b3:9d:33:be:ef:50:e9:43:e3:48:37:7a:1c:
                    37:05:8c:53:64:6a:55:97:61:c8:f0:01:af:e8:a8:
                    a0:86:0b:29:22:46:69:6b:86:20:c4:cc:c1:50:3a:
                    d6:2c:68:b8:bc:4f:08:d9:5e:96:58:23:c6:ae:02:
                    77:02:c9:ad:05:4b:34:76:70:b8:4b:cc:dd:ea:f1:
                    1c:bd:1e:21:65:a0:17:78:4c:78:b6:7d:21:8e:fd:
                    b1:e2:f7:7b:c2:84:a5:58:a3:01:2d:65:61:d2:9a:
                    0b:1b:db:05:50:ea:80:7d:e1:bd:92:b5:c8:44:4a:
                    4c:e9:2c:cd:c6:47:7c:cc:9e:3e:6e:69:c6:d8:73:
                    f0:6e:a4:f5:ae:c7:0a:77:eb:95:63:24:08:85:c0:
                    00:ad:fe:0b:bf:cb:3b:3e:2a:45:aa:a9:db:8f:3b:
                    44:f6:48:a3:69:97:86:7c:db:6b:8c:31:db:4c:ac:
                    db:68:54:dd:b0:08:ab:f3:bc:8d:84:1b:c4:35:a8:
                    d4:f9:27:a2:09:4a:b6:2e:dc:91:45:12:da:19:f0:
                    f2:a1:64:c8:bd:0e:65:f7:d3:78:29:5e:9b:49:56:
                    9b:66:26:82:26:66:0c:f2:0a:59:72:7d:f0:b5:8e:
                    f4:de:4c:3c:fb:a3:7f:e3:2b:1c:ce:d4:ec:48:da:
                    1d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E0:D3:10:BF:57:10:21:C4:CB:E7:B1:8A:62:8D:3C:4F:48:9F:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/611daa3e-9168-338f-b65f-1c641fb5f7f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl

            X509v3 Authority Key Identifier:
                keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.208.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:cc:4d:af:aa:95:e2:15:62:09:b8:ed:0d:3c:b9:70:09:6d:
         b9:df:85:66:22:70:76:5b:f1:6c:f3:a9:32:6f:33:29:a5:8d:
         0f:75:49:63:cd:9c:c2:89:27:82:fb:6c:13:0a:45:65:de:4e:
         96:cd:b2:97:0a:b2:f4:7b:cd:1b:4f:a8:85:69:48:f0:57:b4:
         d7:e3:1e:c6:32:d9:51:b9:21:99:1e:6f:d0:cf:36:b6:ab:39:
         c7:06:17:75:df:a8:79:eb:04:2d:85:6c:3a:25:17:43:e0:7a:
         42:48:b1:67:7e:69:3c:95:3d:a3:b8:ac:92:7f:33:5e:e9:fb:
         7d:c2:1b:85:8a:d8:78:4c:a1:f7:bd:42:a0:65:0f:38:a4:b6:
         57:ac:e8:25:82:e0:4d:92:5c:7e:5e:ed:17:a1:df:5d:63:8e:
         88:66:b6:9d:e6:b3:f6:83:8c:13:af:45:76:93:fe:07:ab:0d:
         94:48:d8:b0:5b:63:fc:34:21:85:47:51:cf:59:6a:ea:d9:f9:
         2e:a2:30:a3:98:04:e1:fc:dd:60:47:42:a2:62:ca:72:ea:98:
         f0:02:85:d8:b9:64:5a:af:e7:81:26:2f:d5:8a:0f:08:9a:c1:
         04:4c:cb:cd:57:aa:69:99:35:fd:f7:bb:6a:15:4d:8b:42:a1:
         a6:bc:33:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:42:17 2025 by rpki-client