Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/fcd8ef4b-0632-3d6a-89e1-840ed9931851.roa
File:                     fcd8ef4b-0632-3d6a-89e1-840ed9931851.roa (raw, json)
Hash identifier:          anteJ6nGs/KbpCYnj50025FtsgGcQfmAwu9s+k0IqA4=
Subject key identifier:   C0:A7:D4:14:A4:E3:82:CC:3C:98:92:B1:04:1F:FF:AD:E9:57:6E:2D
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F43285849CE9A5B4FA7DD01D87E3AA780
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/fcd8ef4b-0632-3d6a-89e1-840ed9931851.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     11260
IP address blocks:        208.96.64.0/18 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:5b:4f:a7:dd:01:d8:7e:3a:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=bfeed048-a827-423e-b5ec-630619e942e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:15:7f:a9:6f:c2:de:c6:9f:f8:06:1d:e2:43:
                    f0:49:72:8e:e3:23:f8:4a:8a:9a:57:fc:fc:e0:85:
                    26:2c:a4:84:c4:1e:95:84:95:d1:ac:45:66:0c:14:
                    06:4f:03:bc:ff:9f:35:31:c9:a2:d4:f7:cc:47:56:
                    86:7d:a7:44:a6:93:5a:ee:96:cb:4c:7e:01:43:de:
                    53:f6:05:65:cc:cc:a2:eb:55:97:89:db:2c:38:81:
                    79:29:81:6f:13:05:92:ed:cd:41:c7:52:60:49:68:
                    91:ec:1d:0a:ce:8d:a6:87:1d:21:17:c7:69:f3:fd:
                    31:5d:b4:ad:64:1f:3d:d3:8c:57:86:51:bf:f4:ef:
                    8d:32:ba:ba:d4:ac:eb:d6:cc:ec:ef:d7:c8:71:28:
                    47:c0:0d:f2:d2:52:f0:c1:a3:5f:cc:ba:17:e8:30:
                    e2:85:95:5a:ba:a4:a1:b8:5a:f7:77:66:b4:4f:e0:
                    34:3e:b4:66:b7:bd:ae:fd:d8:e4:17:a2:13:3f:f0:
                    ad:db:12:45:e2:60:3e:63:fa:b3:cc:5a:7e:ab:e3:
                    62:27:41:25:b3:70:c8:b3:d2:1c:80:c0:dc:3b:ef:
                    a0:f8:71:3b:c7:bf:45:64:46:1b:18:86:4b:e2:60:
                    cd:93:a2:04:92:1d:7e:06:00:bb:31:55:b6:05:8b:
                    8f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A7:D4:14:A4:E3:82:CC:3C:98:92:B1:04:1F:FF:AD:E9:57:6E:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/fcd8ef4b-0632-3d6a-89e1-840ed9931851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.96.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:71:87:ab:94:63:71:21:d8:d8:72:e4:a0:4e:31:c8:5e:53:
         ba:f0:72:f7:d0:72:5a:40:41:24:0c:68:01:21:5f:74:07:ee:
         0e:c7:9a:74:c9:e9:6a:84:a3:87:0f:7c:f7:b6:fa:43:ea:0e:
         b1:48:d4:12:77:36:38:e6:28:7f:ea:b6:ee:13:61:f2:9c:c3:
         8a:b1:51:98:53:51:db:ae:b8:de:78:db:18:03:1d:b7:82:80:
         ab:96:19:af:fb:af:6f:8b:b7:02:9a:77:25:20:06:23:a8:7d:
         5d:03:84:3f:4d:b8:89:9a:c4:b7:8f:b4:eb:aa:8f:e7:89:4b:
         bc:04:c8:58:d3:c6:9c:88:84:dc:04:de:2c:b7:10:1d:93:7f:
         5d:72:41:7b:c6:2f:2c:6c:8e:56:c0:f9:72:df:12:19:f4:f1:
         a9:c0:f8:9b:75:a7:3e:ad:4a:26:9a:64:a7:67:bc:75:81:1c:
         49:bd:ab:ce:79:91:1c:ac:ba:0a:21:57:db:92:f8:90:8e:8f:
         31:a5:5b:9c:04:39:3f:24:13:82:d2:3c:ea:8c:5e:4f:37:cf:
         67:31:8d:7c:b5:36:59:94:6a:c7:67:a1:8a:a2:f2:ad:38:37:
         33:f7:8a:63:81:18:78:3c:30:4f:1d:7e:d0:54:4f:0d:02:e2:
         86:36:18:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:40:44 2025 by rpki-client