Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/f8dfea87-2967-3040-a456-25a1255398bf.roa
File:                     f8dfea87-2967-3040-a456-25a1255398bf.roa (raw, json)
Hash identifier:          EmreqWKutdoj/zY1EcY4AtWdifccwQ405WIU1jzBdj4=
Subject key identifier:   E8:4B:49:10:B7:D6:4C:36:C2:C0:F2:9F:A4:FB:1E:43:39:92:A9:46
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F432858497BCAF40137D1F1467C586D60
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/f8dfea87-2967-3040-a456-25a1255398bf.roa
Signing time:             Thu 10 Apr 2025 21:07:11 +0000
ROA not before:           Thu 10 Apr 2025 21:07:11 +0000
ROA not after:            Wed 09 Jul 2025 21:07:11 +0000
asID:                     23280
IP address blocks:        208.83.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7b:ca:f4:01:37:d1:f1:46:7c:58:6d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Apr 10 21:07:11 2025 GMT
            Not After : Jul  9 21:07:11 2025 GMT
        Subject: CN=93dc55ee-75a4-46c5-8035-494330cbb845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:75:7d:1f:6b:da:33:47:38:15:9f:cf:6c:
                    43:98:ed:a1:19:75:bc:ec:53:a6:29:9b:b7:38:f6:
                    f2:6b:b8:1d:56:4a:51:da:d5:52:6f:55:d5:5f:1f:
                    5a:1b:28:0c:71:ca:06:83:4c:3d:87:5d:a1:96:91:
                    64:24:bc:8a:92:3d:98:ff:ac:6a:fd:5f:54:d7:40:
                    e4:4d:1a:d7:b9:d0:66:0e:5e:bb:82:e9:b9:fd:37:
                    e6:29:df:5d:69:d0:4c:6a:7a:0c:1f:7a:01:0f:7c:
                    9d:8a:75:ec:64:85:6b:c3:d1:e9:10:76:2a:28:3d:
                    85:61:40:f8:fe:90:f0:05:d9:fa:0d:13:18:18:f5:
                    af:a4:9c:49:b5:2d:d4:02:04:bb:1a:65:d3:d6:24:
                    7d:94:da:b6:15:21:77:ed:d3:f6:bd:f9:29:a8:ef:
                    ca:ba:4b:67:0f:fd:d8:91:25:6b:ff:cb:87:96:dd:
                    71:26:71:12:b7:e7:28:8f:7a:70:a5:89:77:14:45:
                    07:4f:63:ab:7b:d2:2c:cd:03:55:20:6c:64:0f:e5:
                    a1:fd:50:6f:df:1a:13:28:c1:84:94:d6:ca:55:94:
                    58:a3:96:88:bc:92:d6:e2:8b:bc:78:7f:75:8d:8d:
                    d6:51:a5:91:ac:81:de:aa:07:70:62:e1:21:aa:bc:
                    ba:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4B:49:10:B7:D6:4C:36:C2:C0:F2:9F:A4:FB:1E:43:39:92:A9:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/f8dfea87-2967-3040-a456-25a1255398bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:41:e9:f8:75:27:26:c1:e6:13:f5:c2:f1:b0:e5:8f:cb:0c:
         34:44:f7:eb:67:19:05:d7:a6:ba:2c:a0:6e:4d:34:32:1b:15:
         52:30:10:fc:41:b6:01:ea:40:2f:03:57:b2:16:03:1d:66:98:
         79:82:05:a5:4b:85:9b:f2:0d:98:9c:82:94:7e:97:0a:c3:c1:
         ea:b7:0c:2e:2c:e4:17:de:ca:d1:0e:2d:53:f8:ac:a2:f7:a8:
         a6:21:07:6a:d3:55:b5:99:7c:81:a9:f2:c7:94:dd:f2:b2:ac:
         6a:30:33:2b:e3:f2:01:dd:e1:9a:c8:a1:85:2e:9a:bc:c3:8c:
         1a:a3:7c:f4:3c:ed:02:0d:4f:82:b6:24:96:79:7e:98:88:bf:
         ad:be:45:6d:21:ac:4b:ca:c2:60:8a:af:2d:23:97:61:2e:7c:
         10:1b:bb:1d:b8:cb:4c:03:93:68:52:ec:fe:57:59:e8:b8:6d:
         17:82:61:c0:cb:89:6f:6c:ff:a3:4c:dd:d5:eb:66:3d:c2:3b:
         be:b9:74:f3:47:8b:e4:2d:b8:89:a6:d4:f3:c6:82:87:18:e7:
         98:6e:51:a9:16:91:37:f1:93:a9:c8:5b:ba:53:3c:00:82:d8:
         b5:19:e7:dd:86:31:49:c9:09:df:c1:51:83:92:78:ca:ba:d9:
         c2:f3:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:46:28 2025 by rpki-client