Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/d2f3792b-d476-3d4f-bab9-53104dc0e0b6.roa
File:                     d2f3792b-d476-3d4f-bab9-53104dc0e0b6.roa (raw, json)
Hash identifier:          ORGgNGNLBmHbQw9CM7Pv5dUoJUgjY5Vx/x8nqnC3WfE=
Subject key identifier:   B7:DE:26:7F:5F:CF:6E:A6:49:5D:56:97:44:DE:BB:B4:FF:5C:2C:1C
Certificate issuer:       /CN=3133c6b3-ff40-49eb-bad3-65967c11dca0
Certificate serial:       010D0C9F43285849F17FD2ABE1FD9D427F1D5640
Authority key identifier: FA:2F:FF:59:90:7F:F5:95:8C:42:8A:11:46:14:08:40:E1:11:05:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/d2f3792b-d476-3d4f-bab9-53104dc0e0b6.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     36236
IP address blocks:        208.67.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/3133c6b3-ff40-49eb-bad3-65967c11dca0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/3133c6b3-ff40-49eb-bad3-65967c11dca0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:d2:ab:e1:fd:9d:42:7f:1d:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3133c6b3-ff40-49eb-bad3-65967c11dca0
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=396a0868-7534-4dc5-a7a4-6144dfdf3d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5d:a5:5a:69:97:2f:44:a8:97:7d:44:cd:f7:
                    2a:b4:df:71:f4:a1:7b:11:d0:38:65:5d:40:5f:5e:
                    46:62:cd:a6:a5:62:ae:47:2e:05:00:04:f2:3f:c0:
                    93:39:ea:47:27:02:3c:6a:72:bc:9d:ee:7d:f6:6a:
                    ab:e4:75:e8:2a:56:df:7d:28:dd:4e:76:9f:bc:1c:
                    dd:93:95:72:73:4c:41:19:f8:65:e4:ca:c7:6f:fb:
                    70:2f:be:5a:1e:55:16:3f:57:6e:15:df:6e:72:1b:
                    2d:44:b6:e8:6b:64:a2:93:d6:64:26:ae:bc:23:8a:
                    54:f8:56:14:73:59:d8:35:6e:10:e8:ec:5b:22:72:
                    1e:f0:3c:1a:14:71:11:13:29:b5:88:b1:8d:69:81:
                    97:96:c9:58:47:c4:6c:cb:7e:84:cd:b3:42:13:be:
                    e0:ff:26:e7:03:be:72:9c:c7:1b:d4:cb:8a:3a:ab:
                    2c:e7:4a:12:50:b6:67:37:6b:97:e2:72:78:82:be:
                    ce:b2:c8:95:ce:ec:af:7e:19:dc:28:76:d9:f8:e0:
                    03:64:b8:04:c4:06:4d:f6:8a:67:8a:b5:4f:1f:7e:
                    49:51:c0:b3:65:44:cc:f6:1e:c6:da:66:81:75:bb:
                    bc:b9:07:aa:a0:0e:99:39:6f:88:a8:44:2f:ed:13:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DE:26:7F:5F:CF:6E:A6:49:5D:56:97:44:DE:BB:B4:FF:5C:2C:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/d2f3792b-d476-3d4f-bab9-53104dc0e0b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/3133c6b3-ff40-49eb-bad3-65967c11dca0.crl

            X509v3 Authority Key Identifier:
                keyid:FA:2F:FF:59:90:7F:F5:95:8C:42:8A:11:46:14:08:40:E1:11:05:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d2:52:e7:07:50:a0:d9:83:27:f4:ad:cf:16:3a:9b:38:75:
         cf:5c:ab:5c:33:0c:a4:8f:8b:94:75:cc:94:1a:68:84:af:da:
         c3:99:db:fc:c4:18:57:e6:0d:6e:14:8d:d1:a8:4f:3d:ce:fc:
         49:32:c7:81:dc:b3:ef:ce:80:8c:55:3d:7a:d2:f2:4a:be:73:
         15:b6:ee:e6:24:e2:fa:41:1e:83:ff:40:7a:6f:0e:06:9b:23:
         8b:3b:47:cc:dd:72:4e:68:c6:75:0c:63:38:6d:f1:55:ae:0b:
         1b:f9:79:45:c2:a4:a1:2c:ef:fa:88:be:4c:e2:aa:8b:ff:a0:
         62:1e:17:e3:d3:f5:ad:5f:a7:63:91:18:9d:bc:37:4f:cd:c8:
         e3:cc:8d:7a:1e:6b:6d:d1:ec:ae:0f:0a:56:b8:61:c1:9d:ad:
         27:6d:40:77:97:15:9f:8c:b3:2a:cc:97:08:df:58:b2:48:42:
         6a:f9:6d:a4:fd:7d:ba:a6:e1:d0:ea:92:14:f9:1b:c3:50:fd:
         dd:77:fd:5b:bc:71:7b:dc:7c:ee:26:4a:9b:93:67:af:dc:bc:
         41:83:80:a4:13:af:3b:c4:28:5d:1f:78:37:92:18:41:27:5c:
         d6:8e:56:27:07:29:69:26:e6:84:d8:fd:95:4c:53:f0:98:9c:
         a0:55:02:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:04:15 2025 by rpki-client