Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d747de3d-f605-3632-9f13-455c4bcb98c2.roa
File:                     d747de3d-f605-3632-9f13-455c4bcb98c2.roa (raw, json)
Hash identifier:          7uc9H/MDIN1cEa0he/CAxNGfRWZcpxt2n+tuFSjCH1M=
Subject key identifier:   0C:3C:8F:87:D1:B3:D0:7C:6C:5C:FD:05:4E:9A:E3:4A:F0:30:49:E4
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584A841221BDBF775A65E378D900
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d747de3d-f605-3632-9f13-455c4bcb98c2.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        208.117.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:21:bd:bf:77:5a:65:e3:78:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=eeb38b7c-d9b5-4333-a4d8-dee7bf49e0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:e0:8c:3d:16:7a:1e:53:a4:3c:7a:10:b4:
                    4f:f5:4c:36:5d:90:72:eb:ec:51:4e:7c:06:ce:8d:
                    b2:0a:9f:42:75:48:a0:7d:6d:62:55:eb:75:b8:00:
                    4c:04:ae:f2:b8:ca:d8:10:ea:70:9d:35:cd:03:2a:
                    5e:01:18:83:bb:c8:a0:06:29:ce:91:62:37:a6:f8:
                    98:06:f2:c9:13:b8:ac:11:73:ec:84:52:29:c6:7d:
                    91:de:a3:29:0c:b9:24:a2:02:bc:30:29:ce:bd:cc:
                    1a:eb:6a:fb:cc:59:d4:8d:bb:ac:f3:df:1e:cd:9d:
                    4d:e0:27:17:7c:fc:4e:f4:19:c8:87:f9:5b:d0:47:
                    10:df:13:f7:6b:0d:3f:b1:8e:f8:61:ca:6e:63:ab:
                    1e:2f:16:95:e9:64:07:ee:ef:6c:1e:ab:2b:4e:41:
                    eb:41:0b:e9:e8:74:ab:d3:c2:2c:52:4b:75:c2:45:
                    f1:58:39:bf:3b:3a:d9:8d:32:98:20:0a:83:a0:b1:
                    c0:1c:1c:7c:59:b8:5a:c9:95:44:20:dd:11:3d:d1:
                    40:fb:60:30:a7:68:de:24:b3:22:9b:9d:d6:02:6a:
                    b4:5c:5f:70:36:40:fc:df:6a:30:63:db:e4:97:e2:
                    32:59:3b:49:84:4b:a3:0c:42:b0:2d:92:da:4e:7b:
                    cd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3C:8F:87:D1:B3:D0:7C:6C:5C:FD:05:4E:9A:E3:4A:F0:30:49:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d747de3d-f605-3632-9f13-455c4bcb98c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:bd:ea:b9:0d:fb:0a:a4:98:4d:17:b0:32:27:c5:88:1d:bf:
         ca:03:e4:fa:a6:ed:2b:7c:70:83:0d:76:02:ec:9d:b1:9c:65:
         69:ac:0c:2a:dc:d0:09:e5:88:39:17:1a:28:19:ea:73:ca:ee:
         d3:a1:c3:10:cb:a5:34:7e:3f:6c:8a:09:bd:3c:e8:ad:46:b9:
         ed:0f:d9:60:71:1d:62:61:32:b4:a0:e3:51:98:a9:66:4e:49:
         b1:81:ac:9c:cf:ad:0e:79:6d:7e:2a:cf:e3:22:1d:ac:3c:12:
         32:b7:3c:f8:28:2a:a4:dc:7e:a8:a9:2a:60:27:d3:79:13:c5:
         27:7b:5e:1a:94:ec:21:37:8b:eb:98:ca:21:37:61:b8:99:1c:
         23:d9:e3:5b:67:60:64:5f:a2:cc:10:f9:19:38:23:8d:3a:31:
         d9:1c:48:f4:f6:96:f4:69:c9:0a:ff:e1:43:44:f7:cb:a3:fd:
         bc:0b:e6:27:a6:49:10:3c:61:35:5a:1b:df:6f:bf:4d:59:18:
         f0:be:e9:b4:49:a6:67:87:fc:77:ca:63:99:ff:97:3e:13:0f:
         bf:53:bf:b0:74:7d:d0:ef:94:b5:af:3b:30:65:16:50:fd:77:
         3c:41:75:ac:24:9d:8b:af:70:00:9a:5a:4d:33:e2:fc:b2:51:
         d8:7f:2c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:07:36 2025 by rpki-client