Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/1d3fd2df-7446-3caf-b208-46d3cef9468b.roa
File:                     1d3fd2df-7446-3caf-b208-46d3cef9468b.roa (raw, json)
Hash identifier:          cXP1uh1X5d80ddXEo1PRSe3q8hOh+42dU/zuiPqnIlI=
Subject key identifier:   4E:EF:37:23:B6:22:CA:FB:75:46:E6:D5:50:A5:FA:6F:37:42:A5:0B
Certificate issuer:       /CN=2686c5f2-35c8-4282-ae9f-58a0bf99be68
Certificate serial:       010D0C9F4328584A14657E4CD43C838BEC09C580
Authority key identifier: FD:76:BF:EC:61:37:91:9A:53:C9:22:3B:74:78:4F:DE:C2:36:CF:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/1d3fd2df-7446-3caf-b208-46d3cef9468b.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     1706
IP address blocks:        208.68.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/2686c5f2-35c8-4282-ae9f-58a0bf99be68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/2686c5f2-35c8-4282-ae9f-58a0bf99be68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:7e:4c:d4:3c:83:8b:ec:09:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2686c5f2-35c8-4282-ae9f-58a0bf99be68
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=8f6a2f61-b486-4874-a884-3ec7381864db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:25:e5:2c:21:9c:78:69:21:8e:35:0f:d6:
                    fc:f8:26:bf:10:71:39:dc:c4:50:10:de:54:06:4b:
                    82:03:47:e6:0c:dc:9a:a9:92:42:35:4c:e4:e7:90:
                    1c:e4:48:a7:f0:e0:1d:5c:62:f5:c0:d1:fe:2a:ad:
                    16:c5:7c:3d:42:86:8d:28:fd:d5:08:3e:cd:ec:e6:
                    3a:6a:f9:21:31:78:e9:06:c2:7f:bd:15:cb:d1:10:
                    a8:c8:a1:ac:a3:9a:2c:5f:47:a4:50:5a:8f:77:84:
                    1d:ab:fe:f9:43:16:68:91:5e:fc:9b:64:c8:95:24:
                    ce:6e:9e:d9:ab:31:ec:33:31:7c:5f:28:c5:62:ee:
                    fd:bf:9f:35:34:be:02:86:3c:ec:f6:6f:f8:25:5d:
                    7f:88:d1:66:bc:61:ba:36:df:99:47:8e:bf:20:cc:
                    64:7c:b5:14:4a:26:74:21:9c:4a:1f:d0:ee:9f:be:
                    6a:75:2c:0f:f8:88:af:60:9f:79:a5:bc:d1:8b:26:
                    57:a3:1f:a6:38:ac:76:1c:a5:94:e5:51:d2:8b:e9:
                    65:af:2c:16:ec:a7:a7:89:1e:2f:96:b6:09:48:cb:
                    42:85:b7:33:dd:df:f2:ff:62:4f:b1:68:2c:68:d6:
                    f4:1a:d1:a6:5f:54:c4:ad:3d:ad:3e:94:fc:f0:32:
                    69:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EF:37:23:B6:22:CA:FB:75:46:E6:D5:50:A5:FA:6F:37:42:A5:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/1d3fd2df-7446-3caf-b208-46d3cef9468b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/2686c5f2-35c8-4282-ae9f-58a0bf99be68.crl

            X509v3 Authority Key Identifier:
                keyid:FD:76:BF:EC:61:37:91:9A:53:C9:22:3B:74:78:4F:DE:C2:36:CF:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d2:ea:24:26:99:81:c8:9b:19:7e:0d:e4:a6:88:5e:b2:d5:
         b0:89:e9:9e:8c:e2:51:e1:17:b9:18:68:10:b1:e4:66:bb:8f:
         ca:7c:44:d3:dc:8f:22:96:03:01:1b:69:e4:a2:c6:c8:48:8f:
         9b:0e:53:5c:89:07:1c:8e:a9:c9:06:84:c9:81:11:c2:4d:92:
         18:66:94:98:96:2e:e5:ca:a1:b9:07:29:83:4a:d9:73:6d:97:
         2b:2a:5e:39:c3:cf:d8:6c:da:6c:78:08:ff:c2:d7:b7:3d:65:
         fd:41:f6:42:08:16:0c:10:46:a7:3e:ed:74:2b:81:9e:f6:e8:
         72:03:65:38:13:b1:3e:fa:7f:18:78:66:96:6e:2e:5f:e8:65:
         df:b7:0f:da:a6:20:c0:20:a4:f4:be:cd:b2:20:51:89:3a:ad:
         f5:38:40:ef:b7:b9:3b:6c:ed:74:a9:5b:fb:6a:d2:21:b0:9e:
         7b:1c:5d:51:0f:a1:8b:75:28:aa:5e:e6:e7:90:43:90:e9:66:
         6f:3d:e2:92:78:45:f6:a5:d2:e7:0f:21:32:91:94:fd:98:89:
         27:de:f8:66:de:45:16:af:aa:81:6c:31:c6:f2:b8:f2:cc:da:
         6b:30:5b:7f:95:83:14:6b:c6:ee:f7:15:89:a0:d4:5d:2c:a6:
         4a:0b:21:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:58:00 2025 by rpki-client