Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2473fa09-d6b4-3605-aa2e-ea544fe12cbd.roa
File:                     2473fa09-d6b4-3605-aa2e-ea544fe12cbd.roa (raw, json)
Hash identifier:          X3tW473BW2vMaN4zne59Wtq4+it/rgFeu/nXFeNQ9OY=
Subject key identifier:   29:F6:97:F9:2C:D4:28:51:31:FE:50:D8:37:7E:94:52:90:7D:E9:9A
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584A050A747FD1D0EF5C7DD0B080
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2473fa09-d6b4-3605-aa2e-ea544fe12cbd.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     399439
IP address blocks:        208.53.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:74:7f:d1:d0:ef:5c:7d:d0:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=f63218e5-83e7-4afe-a954-4b76e30022da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:82:e0:d3:ca:c9:37:a8:11:9f:64:de:bc:19:
                    fe:f4:9d:4e:ee:b4:89:bf:0f:73:c9:8d:8a:1f:4e:
                    37:6d:4f:65:86:81:e4:13:77:48:fc:68:57:e1:7e:
                    e3:5c:c9:54:a1:84:d3:4d:2f:bb:0c:c9:dd:21:05:
                    2a:45:08:66:e6:f5:0b:7e:e2:1a:03:90:c7:28:67:
                    53:d6:fa:e9:bf:d9:ea:7d:0a:77:cb:1a:f3:e5:26:
                    a9:b3:d1:0c:f6:59:83:6b:35:e8:5f:7d:69:4c:dc:
                    bc:48:f0:f6:66:6c:4c:cc:9c:f2:98:79:c1:e5:55:
                    98:e6:8c:aa:b0:7a:f0:39:7c:bd:d1:65:6e:77:bc:
                    80:3e:b3:a5:f5:80:74:99:2f:f3:14:2b:57:d7:35:
                    7d:d8:8d:f4:b4:51:08:e1:cd:db:78:8e:ae:41:e8:
                    9a:e6:fd:5d:36:41:c1:80:d4:e1:66:54:42:fb:b0:
                    1c:d2:be:e1:fd:4f:bd:9b:04:22:89:49:2c:36:bb:
                    c0:5b:0d:1e:56:d7:8f:14:a8:c4:0a:48:4f:9f:e1:
                    38:6f:7a:91:68:e2:82:37:82:e3:ad:59:74:c7:fc:
                    a9:b7:10:36:c1:1d:bc:97:7e:31:a3:33:e8:81:bd:
                    dd:86:ec:ca:44:16:c8:1a:65:7c:96:cf:a3:5c:64:
                    e6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F6:97:F9:2C:D4:28:51:31:FE:50:D8:37:7E:94:52:90:7D:E9:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2473fa09-d6b4-3605-aa2e-ea544fe12cbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.53.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:05:66:e1:30:34:b5:23:b2:c3:16:bc:65:1c:ed:86:c2:30:
         5e:c8:c8:93:64:a6:54:03:cc:4f:bb:29:c0:0a:75:11:fb:7a:
         6d:31:95:5a:8a:cb:31:85:4c:1d:5e:60:f1:9b:b0:4b:40:dd:
         18:d2:d0:7b:fd:2d:76:84:64:47:1e:a1:6e:2d:91:dd:95:b5:
         4f:9a:ae:01:d8:7e:28:d5:b7:7b:9d:9e:d4:2d:b3:a2:ca:4c:
         7b:b4:ff:6c:4c:ad:4e:90:01:16:1a:ae:89:b3:cf:0b:3a:7d:
         db:c1:88:46:c1:48:da:0f:60:37:c8:d1:3f:f2:7c:55:44:04:
         d5:53:7b:2a:2f:3b:ce:03:4c:62:80:fd:5d:6e:99:f9:6b:d4:
         5e:e3:a7:89:fd:ce:df:54:aa:37:b1:ee:8c:c8:ea:46:08:52:
         38:30:76:7e:ae:fe:0c:c9:4c:47:e7:f5:25:00:e7:25:7a:59:
         79:31:e4:20:8e:53:74:d1:64:97:00:9c:0c:c8:c7:c2:12:e6:
         f0:7f:52:94:dd:b2:73:13:7b:75:74:91:3c:bd:cd:cc:a0:6e:
         4c:ab:4e:b8:1b:6a:9f:f5:ea:26:d7:e8:8e:17:00:29:e7:a9:
         8d:45:57:c0:d3:7a:96:78:6f:ad:2b:7e:6d:7d:17:26:ea:1c:
         fa:a3:36:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:41:54 2025 by rpki-client