Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/56839789-9117-3bbe-a93a-9673ed9152fd.roa
File:                     56839789-9117-3bbe-a93a-9673ed9152fd.roa (raw, json)
Hash identifier:          oBdP8YZZeOEAy2wfmgZ2hjH9IXc2y8tSWEg6CucTqv0=
Subject key identifier:   F5:36:66:CD:FF:4E:4C:0F:89:FD:77:C8:4E:98:5B:A7:08:8C:BB:A4
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584AA85BB219F81A8176FA5FBE00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/56839789-9117-3bbe-a93a-9673ed9152fd.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     25899
IP address blocks:        208.56.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:b2:19:f8:1a:81:76:fa:5f:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=721cfcc8-a27d-492e-9a91-369ff6a4ed5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cd:00:ea:29:3f:17:43:ec:56:13:0b:32:28:
                    82:95:b8:a8:c2:e4:ac:93:aa:ab:a2:cf:0b:5d:19:
                    e4:cf:37:57:0e:48:19:bd:91:d4:35:e6:3c:51:ca:
                    92:10:bd:1a:20:17:59:42:e9:79:72:c5:ac:ca:d2:
                    fd:9f:db:47:d1:ec:18:10:12:4e:31:1a:e7:2f:e3:
                    de:1b:b1:32:45:ae:23:63:d4:fb:0f:84:ca:5d:26:
                    69:77:23:3b:4b:bd:71:e6:b0:02:0c:7f:61:c1:9f:
                    91:5a:7c:12:a6:9d:e3:2b:98:b4:6f:f1:26:23:ad:
                    f1:dc:b5:ee:0d:69:3e:ad:49:ab:5d:94:6c:fb:b0:
                    3d:c9:e2:cd:e8:63:1f:07:2f:5b:d1:6b:6f:5d:52:
                    7f:27:60:73:a7:8c:3c:df:c0:9d:e8:09:5d:81:d5:
                    fe:91:75:46:f6:52:fb:83:2c:50:7b:41:c0:a5:ea:
                    ba:51:7e:8e:27:b0:fd:18:88:bb:8b:ee:75:73:b1:
                    0a:af:44:a1:49:cb:20:57:a0:f2:da:b7:5b:f9:43:
                    4a:50:13:5c:49:43:85:bc:14:2a:7b:ac:d0:e9:14:
                    fd:7d:d5:5f:51:dd:f0:2c:b0:d0:81:0c:98:c3:ca:
                    c5:ec:dd:c5:42:18:76:9d:67:2a:e8:4d:16:03:6d:
                    e1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:36:66:CD:FF:4E:4C:0F:89:FD:77:C8:4E:98:5B:A7:08:8C:BB:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/56839789-9117-3bbe-a93a-9673ed9152fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:74:4c:4d:34:de:4c:8e:41:b0:a3:27:c6:50:e7:af:2d:db:
         0d:98:4d:d9:e9:37:4f:9c:83:70:96:cb:60:36:3c:a8:97:8c:
         7d:06:a8:1f:66:cd:9e:a3:e8:7e:4e:a7:f3:88:e0:e5:a5:b0:
         85:aa:eb:68:29:88:f0:5d:58:0d:21:e2:b5:2e:78:05:8a:ab:
         60:49:a1:2e:43:4c:80:a4:21:f7:f7:ac:ca:33:4c:b7:58:8e:
         b0:59:66:2b:bb:18:53:91:6b:f2:50:70:dd:d4:f2:2e:58:b6:
         f3:7e:34:2a:e4:46:fc:50:04:3c:76:c2:f9:d7:60:59:7c:2f:
         d5:10:c6:b9:01:80:d5:19:eb:7d:f4:aa:9c:26:a5:cb:5e:f3:
         f5:01:d8:52:40:e6:7a:08:b4:a2:0c:f7:10:77:eb:a9:ab:61:
         a3:3f:be:d8:2c:f5:a0:c9:bd:cb:77:68:0e:3c:2b:54:05:51:
         04:f6:52:5b:19:12:59:29:12:18:2e:00:d6:29:36:0a:52:38:
         64:4a:af:92:29:10:1a:5e:55:63:d6:c1:e4:b2:29:dd:38:33:
         8d:78:af:32:28:2b:9c:60:5e:01:5a:ea:a6:12:a4:fa:09:8a:
         43:ad:14:a6:65:c6:19:67:61:04:a8:51:cc:b3:e0:96:3d:9b:
         33:c7:64:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:26:23 2025 by rpki-client