Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/f4d098bc-7d02-3a82-ae50-3f567f147f20.roa
File:                     f4d098bc-7d02-3a82-ae50-3f567f147f20.roa (raw, json)
Hash identifier:          BKsl5y9vCIV6FPZMzQ8NYLNS2D1WfGpJRTBeMtTgYWo=
Subject key identifier:   DC:DB:83:24:F8:37:6B:2D:F4:4F:C4:69:85:E8:19:8E:CB:D4:F8:50
Certificate issuer:       /CN=900d3223-79ad-4ee2-af23-163d305bdd0a
Certificate serial:       010D0C9F4328584AA160E1CBAD910316857D3D80
Authority key identifier: 7D:D6:33:9D:D2:D7:AE:48:75:4D:EE:25:DD:4E:7E:D5:65:C5:3A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/f4d098bc-7d02-3a82-ae50-3f567f147f20.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        208.64.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:e1:cb:ad:91:03:16:85:7d:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900d3223-79ad-4ee2-af23-163d305bdd0a
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=4334279f-dec5-4004-b0ef-6a77122ae0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b7:90:b9:46:b1:7b:f6:1c:ff:f5:72:2f:78:
                    c7:80:6d:82:10:45:88:cb:f4:17:d6:62:10:d2:04:
                    e8:6f:ae:01:70:df:85:19:99:73:c1:07:45:da:24:
                    33:42:74:00:5e:49:48:34:77:d0:a5:85:b0:ce:88:
                    7a:fe:53:f6:e8:4c:95:4b:ed:0d:8e:16:41:cf:c5:
                    40:d4:d0:34:09:d8:a8:08:18:ca:1b:fc:d5:9a:eb:
                    86:02:9e:f3:48:83:d0:f7:31:0d:95:cb:2e:c0:2c:
                    70:31:a5:c8:a9:55:91:bd:84:36:f7:73:40:75:dc:
                    64:1f:e7:a9:c5:8a:e7:74:ac:c2:b9:0e:50:f5:ed:
                    d4:5c:62:35:70:76:58:91:d5:4f:86:19:33:93:f0:
                    1b:3c:54:59:37:fb:20:58:e0:30:ed:76:89:6b:38:
                    55:9e:d6:03:c8:96:75:ad:f0:5e:f8:d3:82:78:3e:
                    6c:40:98:f6:4d:fe:5f:e5:c1:2d:9b:fe:e5:d2:a9:
                    74:0d:42:3e:a9:3a:01:02:87:54:ee:63:c2:e2:06:
                    06:b7:d4:e2:b1:d8:7f:71:46:8d:44:0b:af:bf:76:
                    b1:c5:f9:7b:ad:39:e4:57:0f:56:3b:42:51:1c:1d:
                    44:cc:c2:d6:08:2f:d4:a2:6a:71:51:af:9f:0c:9c:
                    8f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DB:83:24:F8:37:6B:2D:F4:4F:C4:69:85:E8:19:8E:CB:D4:F8:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/f4d098bc-7d02-3a82-ae50-3f567f147f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.crl

            X509v3 Authority Key Identifier:
                keyid:7D:D6:33:9D:D2:D7:AE:48:75:4D:EE:25:DD:4E:7E:D5:65:C5:3A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:28:c7:1e:8b:1b:ce:96:84:55:1d:4d:dd:e0:f7:d5:c6:8c:
         7f:a6:67:33:46:8d:de:b1:5f:9c:b1:15:3e:0f:39:43:b0:51:
         b6:01:ea:5b:fc:c4:5c:6f:04:ab:90:14:d4:6c:da:98:ac:d6:
         29:c7:8d:c0:fd:b9:00:18:af:23:84:b1:11:8c:cf:24:b7:b9:
         9e:86:29:0c:be:04:d6:9f:50:41:03:90:37:e4:9e:61:00:a4:
         16:80:2a:a3:74:4b:08:66:f9:9a:32:23:fd:bf:4d:e9:35:7a:
         86:e5:95:26:c1:c6:f4:86:8d:b8:9d:6c:e8:8d:a3:ed:12:1a:
         18:56:01:6b:4a:a8:11:23:5f:95:f9:2c:03:45:80:c8:b2:07:
         53:20:d7:8b:06:6f:04:0a:2e:3c:f8:20:3e:d2:30:07:f8:6c:
         c3:b6:7e:fc:a7:9b:aa:b6:23:62:48:e9:f4:ba:d9:3c:7b:6a:
         82:0c:5f:d1:3d:01:ad:a8:63:53:52:d3:88:6a:bd:2c:ee:83:
         ec:3d:c9:63:4c:13:e9:84:99:c1:db:56:1c:a2:1e:c7:a2:3a:
         6d:ab:30:88:27:82:eb:78:2a:84:b8:20:d5:63:7a:4c:a5:c2:
         91:ab:b9:03:7a:c2:c2:d1:72:59:ec:56:0b:61:67:66:ce:a5:
         9e:e3:37:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:52:18 2025 by rpki-client