Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/37f5eb07-a40d-3482-901c-9f9b4beba4f9.roa
File:                     37f5eb07-a40d-3482-901c-9f9b4beba4f9.roa (raw, json)
Hash identifier:          tYsmnXxOfzgGadmc5Vb+PVfEFhTuT2DV2uIMriVxKXw=
Subject key identifier:   23:1F:8E:E8:D4:BB:4F:AF:0E:26:A6:DA:96:54:E9:56:9A:DA:18:EC
Certificate issuer:       /CN=e04c037d-f06d-4c01-9af5-ef0b2ad3ede8
Certificate serial:       010D0C9F4328584A048624FFA2EC1B961B08CC80
Authority key identifier: 83:5B:F9:D0:F2:7D:65:2D:96:86:2F:E8:56:AA:BA:1D:9F:C5:60:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/37f5eb07-a40d-3482-901c-9f9b4beba4f9.roa
Signing time:             Thu 29 May 2025 20:34:17 +0000
ROA not before:           Thu 29 May 2025 20:34:17 +0000
ROA not after:            Wed 27 Aug 2025 20:34:17 +0000
asID:                     30967
IP address blocks:        146.88.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:04:86:24:ff:a2:ec:1b:96:1b:08:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04c037d-f06d-4c01-9af5-ef0b2ad3ede8
        Validity
            Not Before: May 29 20:34:17 2025 GMT
            Not After : Aug 27 20:34:17 2025 GMT
        Subject: CN=98e6044c-ff27-4c3e-8f5d-c5986b2c0344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:09:ab:91:51:56:72:dd:51:68:01:d0:a7:96:
                    43:d4:da:33:06:73:00:8f:3c:59:f9:98:52:e6:69:
                    c5:92:01:0b:6b:ce:1c:8a:1f:0a:a2:3a:2e:d2:87:
                    2c:74:f4:3b:e5:14:cc:8c:22:6f:10:03:3c:75:6d:
                    dc:3f:93:c2:66:32:63:97:e6:f4:37:06:6f:73:54:
                    f3:53:15:78:6b:6a:79:62:ab:65:13:37:fb:f6:a5:
                    e0:d5:88:f1:cd:83:e0:83:ce:69:f2:12:6c:19:46:
                    b2:f2:27:06:9d:fd:1c:7e:cd:0f:6d:54:49:c2:7d:
                    d3:9d:41:42:11:86:82:f9:98:91:5a:c6:c8:d4:6c:
                    76:2a:79:27:50:45:23:1e:0d:02:e7:4d:53:02:77:
                    f2:7e:2a:0a:97:78:82:5a:d7:e0:78:2c:43:e7:ab:
                    b9:48:94:1b:31:21:6f:1e:59:24:59:fb:17:eb:57:
                    0d:48:8d:1e:4c:18:8a:56:c6:1e:97:59:4f:7a:be:
                    93:90:41:76:31:c8:83:ab:2d:a0:bf:dc:e8:3c:0c:
                    06:e1:7a:59:8e:14:3a:c4:7f:50:f6:8d:5e:33:51:
                    44:3a:8e:90:49:a8:81:63:d6:5c:8a:96:b5:a4:6c:
                    a3:98:f4:1f:fd:63:fd:db:5f:b9:e3:97:61:d5:bc:
                    72:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1F:8E:E8:D4:BB:4F:AF:0E:26:A6:DA:96:54:E9:56:9A:DA:18:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/37f5eb07-a40d-3482-901c-9f9b4beba4f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.crl

            X509v3 Authority Key Identifier:
                keyid:83:5B:F9:D0:F2:7D:65:2D:96:86:2F:E8:56:AA:BA:1D:9F:C5:60:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.88.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:79:34:b1:9f:32:66:78:a5:a2:e0:55:74:09:84:cf:41:7d:
         db:fd:f2:2a:6f:d9:d3:41:c6:04:f0:ce:c7:72:5f:af:7e:f7:
         46:09:9d:c9:46:49:c1:13:c6:a4:03:de:ca:5b:b1:0c:f9:60:
         9f:3e:05:9a:d1:b6:d6:78:92:08:52:16:e5:ef:97:0c:62:b2:
         aa:0a:85:d4:97:50:23:d1:50:21:30:70:c1:43:58:b3:84:4e:
         7f:90:cc:94:73:c9:a2:8d:37:dd:56:b4:10:9a:1a:b3:c8:0e:
         3e:f9:d7:ec:c7:20:d0:53:9b:9a:ac:b2:34:6d:fa:86:be:0c:
         ea:9c:8c:a1:86:1f:56:82:42:39:26:9b:db:69:ac:88:2e:27:
         ab:c7:d9:54:d0:a3:ab:ee:b4:9a:a6:aa:f1:dd:79:35:f7:06:
         5c:ca:1d:eb:65:31:a4:5c:1d:57:93:84:1d:07:3f:0b:d2:d2:
         b4:64:c5:07:ae:88:79:ea:96:10:0f:74:95:be:09:3a:05:a9:
         9a:26:68:23:b5:e4:be:f6:60:9e:e5:26:c5:bd:7c:63:6e:88:
         7f:05:2f:1c:d6:6e:63:9b:44:d9:a0:26:ce:ab:52:d7:1e:40:
         5c:fb:0f:92:f8:14:9a:73:85:66:fd:eb:ae:08:aa:4f:4a:36:
         f0:a6:c0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:37:27 2025 by rpki-client