Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/163ccf03-b850-3f5a-bfea-efea83b66d6c.roa
File:                     163ccf03-b850-3f5a-bfea-efea83b66d6c.roa (raw, json)
Hash identifier:          D3AXWoWjir3m9QZTly8tJqiiKx8HJPP6T7iiGYEg97M=
Subject key identifier:   8D:45:2F:AB:98:C4:72:1A:44:9E:22:58:AB:9B:C6:13:10:56:A8:D4
Certificate issuer:       /CN=a2fa2878-715e-4793-af2a-432583ea0699
Certificate serial:       010D0C9F4328584AB650D03E8C93B7A90BCF68E0
Authority key identifier: E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/163ccf03-b850-3f5a-bfea-efea83b66d6c.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     35916
IP address blocks:        134.195.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d0:3e:8c:93:b7:a9:0b:cf:68:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2fa2878-715e-4793-af2a-432583ea0699
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=c6279a66-0bde-4a6f-871e-eba47fe33b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:78:98:df:b3:c5:52:f6:e9:3c:e4:f8:4b:
                    d5:67:d1:11:17:de:7f:2b:2d:5d:15:25:d5:11:32:
                    98:d4:42:01:59:71:76:a0:c2:2c:80:e4:d0:b9:07:
                    99:95:92:84:84:6e:3d:00:f4:38:fe:50:a8:2c:45:
                    05:73:c8:44:77:37:75:8d:09:4f:33:cb:e2:ed:4e:
                    a1:e2:f5:60:89:1c:93:0b:17:ba:32:39:ba:21:d7:
                    68:46:25:3d:39:2d:5e:f7:66:69:82:fd:bd:78:76:
                    d8:94:52:84:b5:74:5b:68:b0:03:f4:0e:56:68:e4:
                    82:c1:28:9a:2f:fa:34:9f:9e:3a:18:b2:68:6b:59:
                    96:17:12:50:39:13:42:9f:3c:6c:4e:46:81:03:e5:
                    6d:e9:43:7a:00:75:d9:e2:52:9b:1e:1d:95:ab:1e:
                    d3:e8:f2:68:14:43:74:6f:4e:27:13:56:b6:15:4d:
                    77:08:a9:a9:1b:9d:f8:85:94:39:86:02:34:31:08:
                    e4:63:58:79:0d:78:62:b6:22:84:c6:36:3e:60:86:
                    f2:5e:20:d8:f1:c2:8d:35:31:58:d9:ed:25:65:9b:
                    2d:4c:93:d1:72:4e:0f:ed:56:bb:b9:f8:a0:f2:ca:
                    5f:a1:36:05:28:26:50:f9:6b:ef:99:fe:59:03:44:
                    40:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:45:2F:AB:98:C4:72:1A:44:9E:22:58:AB:9B:C6:13:10:56:A8:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/163ccf03-b850-3f5a-bfea-efea83b66d6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl

            X509v3 Authority Key Identifier:
                keyid:E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:dc:5b:78:74:1e:98:3d:d9:fe:8c:b0:91:df:5b:63:52:00:
         51:8b:ff:69:1f:c3:54:67:96:36:c5:44:8c:c8:69:57:e1:9a:
         74:1a:29:1a:b6:0b:ce:ec:23:e3:1b:01:4a:80:e1:1c:ab:40:
         b6:d3:77:ce:48:15:a8:99:92:38:d8:16:73:1b:75:65:97:97:
         b9:0a:3c:46:60:61:30:bf:72:c4:9e:8e:1f:ae:f0:b1:03:f8:
         c0:41:5f:66:62:ff:ba:18:3b:d4:88:71:23:e3:6d:2c:dd:48:
         e8:cc:5a:b6:57:74:c0:06:d2:87:8d:90:f8:02:24:d8:cb:f9:
         2c:38:9d:22:e6:a3:46:58:ad:a2:46:35:79:9a:af:1a:3e:7a:
         06:7c:09:ce:7b:85:23:20:2a:85:2c:69:e3:f0:38:a1:5b:91:
         b1:c7:02:60:13:d6:fd:97:0f:98:75:53:c3:af:6d:d4:ff:8c:
         77:48:df:83:8a:23:9d:1b:38:92:cf:67:48:fc:3d:00:2f:7e:
         80:92:88:5e:eb:62:38:be:69:f7:28:8f:fa:54:43:9c:5c:4c:
         5b:de:c3:30:06:ef:e7:7a:f0:63:d2:84:b5:b4:21:57:56:79:
         32:59:fc:d8:08:b6:15:e8:b9:06:aa:31:da:f3:7d:4e:f9:ab:
         a4:bf:10:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:10:18 2025 by rpki-client