Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/37703afc-ba3d-3b63-aba9-3ff8d1eb9f8e.roa
File:                     37703afc-ba3d-3b63-aba9-3ff8d1eb9f8e.roa (raw, json)
Hash identifier:          JFel1u+dzoQS+7g2jtK/b9LLwCuZXh32mtnSSm9jTCQ=
Subject key identifier:   3B:C9:55:7F:98:D7:56:83:7E:3A:F9:AB:85:4E:49:E1:F9:C0:F5:F6
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F4328584A23C00BC8B8CCFA773682BA80
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/37703afc-ba3d-3b63-aba9-3ff8d1eb9f8e.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     399412
IP address blocks:        208.81.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:0b:c8:b8:cc:fa:77:36:82:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=91f70279-bed2-45ab-beec-be23ebc24f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:55:d9:8f:05:5c:ae:6a:05:9e:b5:7e:da:1b:
                    75:92:35:ef:09:b4:30:cc:65:1e:fe:b3:c2:03:15:
                    f9:1a:ed:c8:7d:b3:cf:59:94:f3:7c:d8:17:c9:47:
                    59:3f:99:a6:0f:82:9a:3c:a3:66:0e:e3:a6:5f:19:
                    d2:9b:bf:f0:c6:9c:92:34:0d:f9:fd:ad:58:70:42:
                    8d:05:90:3c:87:b8:22:0a:4e:64:01:4a:fb:10:72:
                    92:ad:cd:d6:e1:02:f7:83:70:39:8a:0a:19:0d:57:
                    db:a3:a8:fd:81:6d:98:8a:21:34:70:0c:d4:fc:a2:
                    d5:f5:88:56:55:fc:c7:d2:17:77:7e:e3:10:2a:81:
                    88:e6:42:ab:44:0e:2d:e1:df:81:a7:57:4b:88:07:
                    92:8d:8e:b9:e0:5f:62:79:91:ac:79:bc:fa:53:0a:
                    44:17:41:74:22:21:d3:fb:f5:b9:82:a6:cc:db:bb:
                    ed:70:de:64:a2:c4:69:59:64:9d:69:25:10:6a:7a:
                    de:c5:05:ad:47:f3:77:51:e5:9b:0e:c9:df:9a:1a:
                    fa:c4:40:35:0e:8f:0f:63:a8:8f:74:52:ba:f0:fb:
                    2c:09:4c:85:9c:3d:6a:e5:82:e5:ca:41:e5:1a:7d:
                    fa:b0:04:ab:e4:88:d7:ea:d0:14:2c:70:c3:e7:22:
                    e9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C9:55:7F:98:D7:56:83:7E:3A:F9:AB:85:4E:49:E1:F9:C0:F5:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/37703afc-ba3d-3b63-aba9-3ff8d1eb9f8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:4b:70:c2:61:ba:bf:c2:36:8c:5e:6e:aa:f7:68:82:92:1a:
         a2:46:87:ea:b8:15:d9:a0:f9:d7:7d:4c:a5:c1:0c:21:ce:bf:
         05:32:ec:2c:79:30:3f:5d:31:67:50:89:eb:e5:36:f6:71:36:
         31:37:0c:c3:6c:07:84:03:f2:0a:fc:9b:e8:f7:3d:36:87:73:
         e8:cb:94:8a:e2:44:0a:b3:ca:76:8a:75:75:31:db:75:1c:15:
         0a:af:68:7b:15:a0:4a:28:c7:d6:3b:d4:60:c5:a9:87:15:95:
         f5:98:24:b9:12:05:af:0d:64:05:7c:3b:aa:a4:99:fb:ce:dd:
         5d:9b:da:43:0e:3f:04:e9:2c:2a:f7:e8:c1:0a:c1:60:9f:97:
         cd:b6:2f:25:2b:45:c6:f1:32:43:b1:54:49:99:08:08:a6:cc:
         97:2a:73:3d:07:13:7d:2f:0c:49:3e:90:35:1b:29:ca:a7:ac:
         20:51:b9:19:7a:ae:4d:8d:45:98:76:0e:1a:81:9f:bd:f4:81:
         80:c1:46:36:ed:52:70:b7:9d:ea:b8:7c:9b:b7:3d:43:e8:7f:
         48:8b:f0:1d:fd:09:fd:dd:fe:d6:e6:8a:bd:f8:c3:89:57:ed:
         6a:fe:23:7b:28:25:26:4a:c3:96:94:a4:a8:db:dd:50:9c:30:
         dc:19:c1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:29 2025 by rpki-client