Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/34cdba4c-80f1-350c-adea-5c65a62ef612.roa
File:                     34cdba4c-80f1-350c-adea-5c65a62ef612.roa (raw, json)
Hash identifier:          laSOcbkul8o1OFZJ6nb66hc+CKbOAaiAwU5nOUvSmRw=
Subject key identifier:   5E:69:00:5B:AD:79:15:B2:B9:C8:E8:44:21:D3:25:F8:16:10:68:1A
Certificate issuer:       /CN=87baa4d2-11b1-4829-9bf6-86e0efc65ff4
Certificate serial:       010D0C9F4328584A7FE09347955EEF025596DB40
Authority key identifier: 05:BF:BA:DD:14:E0:8D:B2:E2:C7:E6:7B:D7:8E:F9:39:E1:C8:46:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/34cdba4c-80f1-350c-adea-5c65a62ef612.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        208.79.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:93:47:95:5e:ef:02:55:96:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87baa4d2-11b1-4829-9bf6-86e0efc65ff4
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=046f8486-8b43-4673-9673-79f4164cc182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:7a:ed:1a:17:71:0c:f8:5d:bd:12:03:d9:
                    8a:92:ed:41:3c:90:86:95:1c:93:5a:7a:dd:d8:c2:
                    35:30:bd:ea:c9:d1:cd:bf:77:7e:2e:be:5f:c6:ea:
                    f4:3d:ac:d5:5b:c9:58:c4:da:9b:8c:94:89:f2:7c:
                    ea:2f:34:f1:60:65:98:76:7a:56:36:4e:c7:a0:27:
                    80:c9:c1:c1:59:95:fd:00:54:ae:86:7a:a9:31:06:
                    b3:24:23:f2:14:90:b5:cc:c8:bc:84:f3:11:8f:c1:
                    c5:9d:e0:a1:d5:70:b2:50:d1:38:71:93:52:a2:e8:
                    0c:24:d6:7d:1f:a0:b0:8f:2e:ab:44:c5:fd:76:a6:
                    bc:5d:58:f6:ef:de:f2:c0:1a:70:af:16:c8:3b:5d:
                    90:4e:f7:72:11:77:89:8b:d9:d3:8e:d4:ac:82:e2:
                    d4:85:fc:22:08:a5:60:b6:67:c4:9d:79:f5:88:4b:
                    d4:55:78:6a:2a:f9:e2:ab:93:d2:3d:d4:34:43:80:
                    75:8c:61:a2:4d:5a:7a:80:64:e6:fa:d2:67:28:1c:
                    ce:be:43:af:de:9b:cc:fc:de:cf:bd:ac:f6:bf:39:
                    62:a2:c9:0f:80:61:f9:45:e1:04:79:48:dc:85:82:
                    88:52:a8:75:d5:ac:a0:0f:52:33:7a:db:df:ef:60:
                    e7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:69:00:5B:AD:79:15:B2:B9:C8:E8:44:21:D3:25:F8:16:10:68:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/34cdba4c-80f1-350c-adea-5c65a62ef612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.crl

            X509v3 Authority Key Identifier:
                keyid:05:BF:BA:DD:14:E0:8D:B2:E2:C7:E6:7B:D7:8E:F9:39:E1:C8:46:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:1e:95:69:d6:16:4f:b5:31:b5:85:1d:23:8d:ef:11:37:49:
         94:a8:32:c6:0d:aa:9e:d7:cb:6d:40:16:e5:1e:8b:8e:e7:40:
         f2:b6:b3:29:95:15:b3:65:95:51:25:63:ed:b5:ac:37:c2:08:
         92:25:9e:a6:75:7a:a4:23:52:d0:d5:2d:e4:dc:df:0f:0f:a2:
         c2:40:b5:1b:cd:15:87:c3:2b:4f:6c:1d:34:37:58:52:09:46:
         56:33:13:1f:80:a9:1d:e0:e0:a9:fb:dc:60:a1:50:f3:ec:eb:
         5b:ed:9d:af:8c:64:70:4d:3a:e5:61:d5:70:fe:15:a6:cb:94:
         28:fc:fd:e8:d3:c0:00:3b:a7:a0:0d:eb:b8:f7:3c:a1:7e:77:
         17:74:bc:5a:cf:30:28:37:67:99:83:cd:b2:48:fe:b0:3c:de:
         7c:a4:1a:4e:f6:9f:de:e7:cb:3d:d0:ae:06:92:7e:07:90:7e:
         e6:40:3d:24:36:4b:dc:4a:29:02:30:92:26:01:98:f3:03:cc:
         a7:f9:d9:4e:03:10:6a:cc:2e:e0:54:1c:ed:49:4f:24:db:ab:
         2b:a3:b9:ea:8d:88:4b:f5:c4:4f:fe:80:92:d0:af:53:1b:88:
         94:74:dd:88:71:61:dd:ba:1c:63:63:35:b2:1b:18:fe:e3:91:
         4f:b9:b6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:09:05 2025 by rpki-client