Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e920d619-27ea-3d8f-bfbf-79053cf7cd93.roa
File:                     e920d619-27ea-3d8f-bfbf-79053cf7cd93.roa (raw, json)
Hash identifier:          YMzyxBkSvL0ZG/Q1eIzM4pBPHd4SXUXaD834io22ZgA=
Subject key identifier:   3F:53:27:9A:A4:6E:61:F6:35:4C:86:1B:06:BE:7D:C8:F3:52:9D:E0
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584A841176FA310689CFF5A40E00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e920d619-27ea-3d8f-bfbf-79053cf7cd93.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        208.117.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:76:fa:31:06:89:cf:f5:a4:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=8137845f-f5f7-4eb3-8429-b224a05e4c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:42:14:0e:7d:c3:f9:ef:49:2b:e0:44:a6:
                    ae:e1:67:d7:22:63:c1:13:03:31:8f:18:38:62:58:
                    e4:7f:1f:92:d2:9a:60:85:98:37:99:36:02:9e:d8:
                    a0:9d:64:90:e1:6b:ca:14:6e:1b:5f:6f:9a:d8:14:
                    e9:b2:8d:87:cc:ec:9c:be:69:9b:ba:69:46:44:af:
                    8e:95:50:c4:9e:58:65:2a:00:53:2d:ab:67:84:ad:
                    7e:5e:60:16:48:47:6b:f6:68:c3:87:f1:d3:d5:40:
                    9e:22:b3:5e:dd:8b:41:26:60:1b:82:6e:4c:c3:6f:
                    f2:fb:92:de:ed:f7:7a:2e:a8:21:ad:b6:af:5e:62:
                    54:a2:b2:f4:1e:f8:7a:51:0b:1d:c6:64:97:ae:da:
                    54:5c:ec:db:9c:42:e8:05:94:45:9e:2d:69:75:e6:
                    5d:54:ca:4a:32:1c:5d:15:fd:25:9a:95:ff:98:f8:
                    55:67:e1:c9:4d:70:3a:df:a7:c5:31:fb:13:c0:9c:
                    90:dd:1f:2a:77:ac:d7:84:d4:9b:1e:e2:53:0e:30:
                    0b:18:a7:19:dc:90:41:c5:0f:3e:06:ea:f1:79:c6:
                    c9:a7:42:ec:37:d3:37:bd:f6:a2:79:6f:43:fb:45:
                    86:7c:55:5c:39:5b:29:03:cd:5a:4d:cc:42:29:7a:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:53:27:9A:A4:6E:61:F6:35:4C:86:1B:06:BE:7D:C8:F3:52:9D:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e920d619-27ea-3d8f-bfbf-79053cf7cd93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:69:f3:7a:06:1e:c4:42:a3:e0:2f:70:12:b3:35:5b:07:a1:
         5b:62:b7:68:1b:31:ef:d3:fa:80:8b:b0:6d:13:ef:f4:e8:27:
         71:f1:28:f7:84:62:18:02:dd:73:7f:36:b1:10:55:0f:e7:05:
         ea:5e:53:32:3d:92:80:3f:67:bf:94:d2:fc:fc:98:34:cf:7c:
         21:c0:96:5a:e2:b7:b4:58:35:70:a7:50:94:2f:18:ae:fb:d3:
         2d:be:dc:82:a0:46:4a:87:be:67:59:c5:c1:bf:b6:44:06:5d:
         c4:1f:49:82:d4:a7:c7:4e:98:e2:d1:60:41:6c:6e:39:f1:f5:
         0c:c7:13:62:f2:37:78:98:5b:29:f3:18:b3:3a:ad:55:e0:8f:
         52:51:2f:55:60:3a:43:21:b4:1b:12:80:be:15:98:62:d6:81:
         58:37:2a:2b:35:2d:ad:ce:7a:7d:cf:ef:39:19:7e:2c:70:56:
         9c:1e:58:23:9d:61:c6:fb:dc:f4:34:f6:07:ea:2f:19:0a:40:
         a0:75:91:2f:9e:43:cb:ea:10:81:37:7e:01:dd:28:d7:01:d8:
         43:da:75:92:aa:b1:07:10:73:90:d7:8c:81:43:46:e4:d7:4a:
         dc:5e:0d:c2:cf:28:25:e2:22:54:5a:77:9f:28:b5:7d:58:82:
         6b:d6:81:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:12:28 2025 by rpki-client