Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/8cebcc62-899c-3d22-821c-dd22d2bf3fb5.roa
File:                     8cebcc62-899c-3d22-821c-dd22d2bf3fb5.roa (raw, json)
Hash identifier:          Smolzkv+9mt258XyVI2M/WaYgdZNWnmP5pLj6snZ9SA=
Subject key identifier:   58:DF:13:EE:BF:8E:8C:91:71:ED:3D:BF:91:81:43:31:84:ED:D3:3A
Certificate issuer:       /CN=a2fa2878-715e-4793-af2a-432583ea0699
Certificate serial:       010D0C9F43285849CE9A56DF6742006CAE845200
Authority key identifier: E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/8cebcc62-899c-3d22-821c-dd22d2bf3fb5.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        134.195.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:56:df:67:42:00:6c:ae:84:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2fa2878-715e-4793-af2a-432583ea0699
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=7f378417-0b67-491c-8edd-df4f71022faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a8:5a:82:23:c3:94:0e:15:9c:02:76:81:68:
                    b3:70:c6:7a:8b:1a:3b:85:41:c3:77:4f:cd:c4:25:
                    86:0b:4c:b0:92:7f:0b:d8:a7:43:4f:c2:70:16:a4:
                    60:c3:c0:c8:b1:f9:71:80:93:19:7b:6b:7e:db:c6:
                    9d:18:f4:a2:c3:85:34:a5:20:a4:40:e2:46:25:ea:
                    8c:13:2e:01:9e:3e:fd:83:7e:36:ec:44:8b:99:44:
                    6a:ed:30:d7:2b:fc:46:97:2c:f5:12:35:c7:62:f4:
                    0d:95:f9:60:6e:9c:a1:31:72:87:bb:fb:c6:5d:5b:
                    93:08:2f:84:6a:1d:1d:b5:70:f8:35:97:75:11:e4:
                    02:39:b1:4f:80:43:4b:f1:f7:54:70:6a:2c:f4:3a:
                    fd:9f:0f:27:04:be:07:93:14:df:2f:e3:e2:35:be:
                    64:06:48:da:36:b5:19:2e:9f:51:4c:85:bc:bf:b9:
                    e6:03:96:c5:78:12:ed:f1:ae:c0:f8:a9:e8:41:b9:
                    80:a6:94:e3:b4:6a:f9:1b:d7:66:2f:62:bc:6b:ef:
                    f2:fd:8a:ef:19:dd:c8:6d:b2:fc:cd:eb:02:c4:cd:
                    8e:ef:63:3d:ec:86:3a:17:b5:51:ff:7f:8d:71:cb:
                    3f:f5:e1:89:1a:16:bc:cb:54:79:c9:68:64:a3:5a:
                    dd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DF:13:EE:BF:8E:8C:91:71:ED:3D:BF:91:81:43:31:84:ED:D3:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/8cebcc62-899c-3d22-821c-dd22d2bf3fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl

            X509v3 Authority Key Identifier:
                keyid:E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e0:c1:e9:74:4f:a1:c5:60:b7:c9:83:1f:f0:68:bc:1d:de:
         b6:9a:af:29:f9:f6:29:51:a2:66:f3:07:46:4c:c8:ef:d9:b0:
         87:4f:f0:76:b0:64:53:06:a6:f8:63:13:4c:ba:fc:bb:c4:7e:
         22:e9:bf:0b:59:48:ee:8d:5f:05:f9:66:53:4b:51:e9:49:eb:
         7e:0b:00:d5:b1:85:23:af:ff:dd:97:a4:9b:1a:be:6b:91:22:
         d9:86:d1:73:6e:b3:3a:fc:77:a0:7e:07:90:fa:53:81:c2:fe:
         c9:a3:2b:61:5f:9a:a1:69:29:23:7f:b5:f5:dc:fb:60:ac:9e:
         23:dc:cd:6b:10:5c:13:88:d4:ed:26:2b:98:39:3f:1b:c9:8d:
         eb:40:79:20:54:d5:07:93:86:9c:f7:26:e0:20:12:7e:78:4b:
         e5:5c:4a:a0:4b:87:d8:6e:50:22:53:61:d8:8b:82:f3:d3:9d:
         f6:19:80:9e:af:56:57:55:5e:71:15:7d:91:4f:8f:08:ad:cb:
         07:60:70:25:e3:da:42:4b:b0:19:70:fc:cf:43:7e:69:94:04:
         af:69:b3:06:61:51:d5:99:7a:6d:6e:7f:75:21:77:8e:88:10:
         8f:f2:c1:34:38:88:2e:e8:73:45:ca:9c:79:ac:c2:ae:6a:9b:
         97:3b:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:18:23 2025 by rpki-client