Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/700382b5-459d-3865-8421-d8b9455ca16d.roa
File:                     700382b5-459d-3865-8421-d8b9455ca16d.roa (raw, json)
Hash identifier:          TSZIrooMGT0nagQ4DqBFj/0cM6/QI4UYhtXGJDqWQEg=
Subject key identifier:   0F:D8:9C:A6:D4:FC:3F:8F:0E:68:8B:24:10:03:F1:06:CC:6F:15:07
Certificate issuer:       /CN=900d3223-79ad-4ee2-af23-163d305bdd0a
Certificate serial:       010D0C9F4328584AB91BB4A4BF57363AEF0C2478
Authority key identifier: 7D:D6:33:9D:D2:D7:AE:48:75:4D:EE:25:DD:4E:7E:D5:65:C5:3A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/700382b5-459d-3865-8421-d8b9455ca16d.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        208.64.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b4:a4:bf:57:36:3a:ef:0c:24:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900d3223-79ad-4ee2-af23-163d305bdd0a
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=ee528e7c-551d-4482-8f92-d524d24d67a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e2:2d:bc:e8:a7:58:b9:50:3b:79:82:c8:02:
                    69:23:12:4e:2e:50:2e:26:fe:6a:0d:eb:d6:1f:b6:
                    11:8c:15:2d:b2:63:d9:ef:62:ae:67:d5:24:2c:2a:
                    bb:6e:4f:91:bd:6f:00:e0:3e:6e:6d:02:a1:6e:ec:
                    78:e4:6d:22:4c:af:b3:13:a9:b2:3d:99:dd:a0:4e:
                    1f:66:c4:3d:ef:42:9e:90:74:24:09:f8:b4:aa:83:
                    a4:ee:14:6e:70:8d:45:3a:80:0b:c6:67:e9:eb:43:
                    58:62:f0:a2:41:48:f1:a7:c3:e8:c8:69:aa:e7:c9:
                    13:80:01:8b:24:4c:fe:9b:0b:e1:82:68:69:52:c8:
                    c4:b8:c7:ef:8d:ef:3c:e2:54:42:17:9e:18:61:7e:
                    8a:d3:22:50:b5:63:8e:ba:cd:2e:83:5b:25:ca:29:
                    17:b0:25:65:9b:76:17:a8:fd:f5:7e:bd:38:fc:61:
                    f0:a8:ac:45:7c:ea:93:7b:61:37:00:a0:d3:63:27:
                    fa:0a:4f:15:67:1b:59:c8:d3:0c:b4:2d:ea:19:cd:
                    c8:ac:af:e0:70:bb:4c:bb:85:c2:9e:dc:1f:df:b9:
                    a2:8e:cf:7d:97:63:ff:60:87:42:d4:ae:c3:db:43:
                    70:35:f9:c8:f8:69:cf:57:9b:0e:9f:e5:64:e5:d9:
                    5f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D8:9C:A6:D4:FC:3F:8F:0E:68:8B:24:10:03:F1:06:CC:6F:15:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/700382b5-459d-3865-8421-d8b9455ca16d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.crl

            X509v3 Authority Key Identifier:
                keyid:7D:D6:33:9D:D2:D7:AE:48:75:4D:EE:25:DD:4E:7E:D5:65:C5:3A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:f0:15:e3:08:10:6d:42:19:96:ae:13:79:69:05:8d:a0:88:
         9c:c3:6e:a9:a3:23:ac:7a:36:c8:af:09:f0:b2:44:b0:12:79:
         d0:c6:75:74:d2:b8:12:a1:4c:a8:6c:9c:18:57:90:9a:b3:34:
         e2:df:c6:5a:42:c9:ba:28:e5:a1:50:3d:2f:32:5d:6c:05:02:
         12:bd:c1:e9:e1:aa:34:18:19:af:21:23:72:87:37:9d:c7:5b:
         6a:3f:ba:60:b0:fa:b9:aa:2b:94:03:41:d9:4d:98:8c:16:d4:
         92:ce:00:4f:d8:10:0b:d3:81:f8:7c:ba:17:37:11:50:be:35:
         06:84:79:6e:6b:49:ed:d6:59:c3:64:b9:92:ff:43:ff:de:d7:
         ef:ee:91:a7:a1:68:ae:2a:dc:74:7d:a1:6c:62:39:9f:d8:d7:
         b5:30:81:68:11:4e:fa:84:1d:b9:90:cd:c5:a3:d2:bf:e7:2f:
         82:51:37:06:c3:ef:a9:d9:da:68:96:6b:8f:89:7a:c9:49:43:
         38:80:c1:0a:1e:c6:01:2b:6b:f2:95:1f:71:a9:53:b3:49:20:
         07:d1:e6:61:4e:1b:05:c7:c9:04:d5:b7:1f:6e:ee:0f:d9:c2:
         76:dc:3d:c9:0d:91:73:5a:bb:fb:fd:16:27:b8:23:a4:55:94:
         1d:4a:79:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:09:19 2025 by rpki-client