Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/02e6ecfe-4d10-34f2-ac4e-06d62206b050.roa
File:                     02e6ecfe-4d10-34f2-ac4e-06d62206b050.roa (raw, json)
Hash identifier:          TBiZYfQ5leratcqRdfXvdAv0wdHkz86Glwgh7Dd4qXo=
Subject key identifier:   5C:87:9C:A6:8C:94:E8:91:49:C0:4D:7F:4A:78:F9:16:E4:31:43:B5
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584AB220D27EC43722B849B50980
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/02e6ecfe-4d10-34f2-ac4e-06d62206b050.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     2734
IP address blocks:        208.84.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:d2:7e:c4:37:22:b8:49:b5:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=d17d6942-11ff-42c8-a4f3-7cef7a60f300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:9c:06:58:a7:59:ec:f2:fc:16:9e:b3:43:
                    78:b9:3a:6a:cc:71:ff:83:75:05:85:76:8a:7e:f0:
                    1c:50:04:08:2e:ac:d9:2d:dc:04:30:29:35:e3:a4:
                    52:a5:b4:da:cb:5e:b6:6b:65:3f:c3:d8:59:9c:30:
                    54:2e:51:d2:ec:9d:6a:e2:d6:f4:28:7c:3c:75:9f:
                    ab:e5:c1:1b:f0:ed:83:3d:d3:bd:47:a4:3c:f1:78:
                    29:3f:34:8b:30:6b:62:bc:c9:4e:26:2a:74:be:c0:
                    49:59:31:12:c7:5e:35:00:eb:11:41:10:a4:31:33:
                    06:fa:1b:cf:a4:2c:64:ef:5d:c1:37:41:62:19:49:
                    3c:42:c6:35:c8:bb:ba:95:38:8f:ae:14:4a:5f:a8:
                    47:ef:06:5a:05:8b:3f:f2:e6:6c:a4:3d:75:e3:af:
                    5e:a2:75:29:c0:00:ef:3f:a3:7c:d8:a3:84:11:58:
                    dd:85:34:1f:d7:f5:48:c1:45:d6:31:82:40:49:ee:
                    7c:0c:9b:ae:34:c4:1a:c2:b5:d9:40:7b:d0:7f:84:
                    84:f8:9e:b9:d4:60:69:57:9b:a1:0a:8d:4a:e7:b0:
                    e6:3a:41:15:74:11:a6:37:3a:a8:90:24:00:72:0b:
                    92:1b:15:2e:4c:8f:c1:cd:97:01:b5:5f:3e:bf:44:
                    47:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:87:9C:A6:8C:94:E8:91:49:C0:4D:7F:4A:78:F9:16:E4:31:43:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/02e6ecfe-4d10-34f2-ac4e-06d62206b050.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.84.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:b6:9b:d0:45:b4:36:70:4c:69:04:1a:8d:e9:75:b0:5d:69:
         c1:d9:36:c4:58:ac:76:ac:3c:42:52:e3:8f:e9:3f:c0:05:10:
         5b:3a:63:37:22:06:89:d7:fd:b2:5a:b0:52:c5:f6:4e:c8:2b:
         b7:f7:31:47:69:df:ba:6a:98:1f:7d:8e:16:b6:a3:66:4c:8c:
         78:e3:b6:93:22:cd:bb:16:07:3c:77:62:1e:12:b4:18:de:cf:
         b5:07:cd:19:17:21:9b:95:72:6c:81:a6:77:c3:c6:95:13:fa:
         98:67:48:26:c4:d6:0b:29:ab:6a:e3:8d:7a:c2:b7:28:2d:e9:
         aa:14:eb:32:06:07:57:c1:45:17:5f:75:1d:51:5d:7e:62:fc:
         5d:23:2b:a6:61:a3:eb:55:a6:d5:3b:f4:7b:9d:6c:67:62:9b:
         86:2e:f7:5f:b1:2b:c7:ee:a4:95:6b:83:c7:32:40:36:35:f7:
         66:ad:38:16:37:e4:f4:53:d5:c5:9a:82:c0:d4:23:3e:ea:3e:
         57:c6:41:24:f9:3e:b0:f2:88:c6:61:61:f5:ae:c6:8c:6d:e9:
         2b:81:2b:0c:74:c9:b6:70:96:91:f3:d8:66:b8:43:f7:9c:49:
         53:ee:81:3d:73:e7:8c:58:bd:ee:d5:68:05:e2:d1:55:88:6c:
         8f:a0:6c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:04:54 2025 by rpki-client