Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa
File:                     8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa (raw, json)
Hash identifier:          OyatbCvohYnPT7YbMRkAoMrAgz5Zcbf9N4DPZ+Ph6wg=
Subject key identifier:   03:05:55:23:9F:51:A2:A7:37:42:30:67:10:7F:A2:00:C9:01:65:AD
Certificate issuer:       /CN=e608a4ff-c170-41ea-a454-bf0ecd40f83d
Certificate serial:       010D0C9F4328584A2C20179576501A3CBFE4D300
Authority key identifier: 65:BB:53:74:68:07:8D:59:FD:64:C5:0A:81:82:B9:31:28:15:3A:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     11700
IP address blocks:        205.207.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/e608a4ff-c170-41ea-a454-bf0ecd40f83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/e608a4ff-c170-41ea-a454-bf0ecd40f83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:17:95:76:50:1a:3c:bf:e4:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e608a4ff-c170-41ea-a454-bf0ecd40f83d
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=e39f20f9-e891-4521-b786-ba5b7a06f50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6d:06:a3:c6:9a:d1:12:a7:e0:96:b7:4b:0f:
                    35:a5:7d:3d:23:73:86:fc:24:cf:43:e8:3c:28:51:
                    51:d9:3c:8d:92:dd:e5:ac:df:b8:dd:9a:23:b5:ca:
                    fd:0d:44:aa:a8:27:7c:15:64:81:15:79:cc:70:50:
                    9d:5e:49:ab:5a:8e:6d:f1:e1:40:ab:9a:87:15:15:
                    fc:17:08:eb:15:a1:d9:44:6d:b8:e3:27:65:72:b8:
                    b9:38:2e:a6:3a:43:19:3a:60:10:6f:b9:ea:f4:ad:
                    6e:e9:f9:18:6a:30:37:e8:7d:54:bc:1b:01:96:be:
                    d1:e9:60:9f:ef:4f:fd:d9:5a:c9:17:1e:db:05:04:
                    f2:32:86:3f:9c:e6:e9:5c:f7:52:25:56:22:2b:90:
                    20:be:0b:21:3b:1a:c5:3b:35:d2:0e:e4:aa:c5:bb:
                    15:c4:5b:8c:90:74:c0:7a:13:2c:92:c6:91:94:f6:
                    28:f3:fb:cc:3c:69:15:0c:47:c4:1b:e2:17:ef:9a:
                    d7:fe:d9:10:08:37:64:20:00:58:55:96:e9:30:eb:
                    b7:80:9e:46:60:aa:cf:d5:65:e3:ab:f4:7c:7a:af:
                    3c:99:76:15:27:71:33:f8:4a:c5:0e:83:b6:ef:16:
                    3b:44:2a:76:57:5d:2d:be:ea:3a:40:58:ff:8b:6b:
                    36:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:05:55:23:9F:51:A2:A7:37:42:30:67:10:7F:A2:00:C9:01:65:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/8b76bbfd-3fcb-3502-b6fe-c1080cf78009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/e608a4ff-c170-41ea-a454-bf0ecd40f83d.crl

            X509v3 Authority Key Identifier:
                keyid:65:BB:53:74:68:07:8D:59:FD:64:C5:0A:81:82:B9:31:28:15:3A:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:6f:d7:32:2b:82:71:a5:af:44:b7:a1:24:00:3d:ba:7d:b8:
         0d:b7:ac:c9:cc:d1:ec:9f:f8:34:01:22:9b:04:c0:02:aa:66:
         37:ac:88:ba:62:8e:11:49:e1:50:94:8b:e5:be:fb:6d:e5:d5:
         da:d4:e8:77:3b:d1:db:5b:c0:8d:20:32:14:b8:65:37:40:00:
         33:a3:f6:e6:59:93:6f:a2:4b:74:42:58:fa:80:85:3f:ee:8b:
         e4:30:73:71:f4:37:ff:ea:f3:80:2a:4f:e5:53:93:7d:76:63:
         ac:c3:92:27:39:21:eb:4d:d4:49:d3:3c:57:5c:5f:3a:58:16:
         69:19:f5:27:72:76:75:71:90:a6:fb:d8:ce:3d:ff:3f:52:db:
         19:71:11:c4:f4:2e:61:f5:09:c8:a6:fb:ae:d5:8f:97:8e:cb:
         97:b6:64:d2:ec:a9:da:21:e9:88:a7:83:d1:64:28:9d:99:89:
         68:03:b5:b5:49:ae:69:81:e3:e2:57:82:83:86:8e:7a:2f:04:
         7c:92:f0:b0:a3:a3:d2:14:4e:2c:cd:18:06:a0:c3:23:18:aa:
         d1:3d:e5:ff:d5:d1:f2:4b:54:3b:cd:db:63:16:74:b5:ec:07:
         de:7b:5e:58:68:a6:45:43:66:2f:79:0a:89:e9:76:76:ed:9a:
         e9:33:4b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:16:31 2025 by rpki-client