Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/700382b5-459d-3865-8421-d8b9455ca16d.roa
File:                     700382b5-459d-3865-8421-d8b9455ca16d.roa (raw, json)
Hash identifier:          PgwPIPrTby4fnAg2tGynjnxQqqFnLjBkkDtCdOubOV4=
Subject key identifier:   E6:EE:99:87:6E:1D:70:D1:DF:4A:06:C7:15:9F:8F:7A:7B:8A:15:27
Certificate issuer:       /CN=900d3223-79ad-4ee2-af23-163d305bdd0a
Certificate serial:       010D0C9F43285849D85FABBC5CDF84BA3870CEC0
Authority key identifier: 7D:D6:33:9D:D2:D7:AE:48:75:4D:EE:25:DD:4E:7E:D5:65:C5:3A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/700382b5-459d-3865-8421-d8b9455ca16d.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        208.64.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:ab:bc:5c:df:84:ba:38:70:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900d3223-79ad-4ee2-af23-163d305bdd0a
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=b60f4068-c5b5-488f-bd2f-41fcf393128d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d1:97:2f:18:c4:71:7e:ce:91:74:c7:e2:32:
                    d8:f9:ef:47:9f:55:d4:e8:4b:18:24:3e:54:71:a4:
                    ea:0f:09:4f:0a:95:d6:0a:62:23:d7:89:0d:b7:16:
                    76:f4:e4:40:42:ed:d9:af:86:8d:fa:da:81:17:2d:
                    c3:cb:b6:00:2a:c1:69:11:d2:34:5e:73:a2:e8:d3:
                    8e:5d:eb:5f:5f:7e:d2:9f:7b:69:f3:54:df:55:8c:
                    78:4d:52:51:8a:27:3d:f6:d5:3c:c6:10:2d:d7:18:
                    7e:33:d0:20:6c:13:81:c6:3b:d7:c1:c9:f6:ab:81:
                    1f:02:57:78:92:a1:7c:0f:8d:6d:06:be:46:89:15:
                    24:28:91:01:70:48:49:1b:f9:9c:e3:56:90:99:7f:
                    36:0c:bd:54:a7:17:5d:fc:aa:95:d4:67:74:9e:fe:
                    4a:78:e0:00:49:c1:1d:95:ff:f4:0a:4c:37:29:e4:
                    2f:c3:20:d0:50:55:c4:9d:62:90:88:93:58:e7:66:
                    e6:29:44:f9:54:d2:ab:12:91:21:f6:5d:80:f0:18:
                    42:8c:30:41:1c:6a:ed:8f:b3:53:32:47:95:c4:02:
                    63:30:1f:15:5a:4f:e1:c8:ba:6e:9d:52:ca:b7:10:
                    4e:32:8c:0f:a7:33:aa:52:e3:ad:23:fc:d9:8c:07:
                    a6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EE:99:87:6E:1D:70:D1:DF:4A:06:C7:15:9F:8F:7A:7B:8A:15:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/700382b5-459d-3865-8421-d8b9455ca16d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.crl

            X509v3 Authority Key Identifier:
                keyid:7D:D6:33:9D:D2:D7:AE:48:75:4D:EE:25:DD:4E:7E:D5:65:C5:3A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:d4:f0:88:44:7a:5d:0b:d1:a9:e6:7a:26:c3:64:e4:9a:36:
         02:11:ff:4e:5d:2f:24:19:54:e4:e3:c5:cc:88:25:e2:af:fa:
         92:f1:d8:ca:88:6f:d6:34:1e:ca:a5:15:79:92:36:bf:d9:45:
         15:77:89:5a:b3:43:dd:1e:d5:14:9c:9b:fb:ba:14:99:a8:d7:
         f0:61:84:db:47:75:70:a5:5c:ad:aa:fc:84:ef:4b:6e:03:a8:
         7d:96:f7:22:85:da:be:ca:d9:15:75:98:43:b7:df:3c:b7:ed:
         5a:4d:dc:6a:e5:d0:35:9f:8f:66:84:4c:b7:b4:39:03:22:b1:
         96:79:38:63:6d:5e:09:a9:ce:e2:c6:91:15:40:e6:90:0d:5e:
         ef:cb:a1:e6:3a:7a:97:7b:db:81:b2:40:91:19:92:0a:71:93:
         98:f8:1b:71:02:d8:b1:08:0e:e7:f3:65:d0:ce:85:68:6b:d1:
         88:13:f3:a9:49:6e:e6:84:fb:b0:bf:b0:09:38:82:d2:74:53:
         a4:01:87:b8:d9:92:d8:a9:bd:c2:34:ad:99:08:49:b2:19:f7:
         0f:89:ac:11:49:13:3d:d9:02:38:fa:39:77:42:46:72:5e:9e:
         1e:88:c9:80:40:f7:c2:98:78:98:5b:95:b7:11:bc:27:b3:ac:
         dc:13:11:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:55:46 2025 by rpki-client