Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fba1aa51-6cbe-35d0-a42d-45c4ca8be260.roa
File:                     fba1aa51-6cbe-35d0-a42d-45c4ca8be260.roa (raw, json)
Hash identifier:          n9mWe7lAgRYb19qk3n/yfFgU8Jcja1IWkYHNiOySWsg=
Subject key identifier:   2B:91:0F:82:EB:86:BC:61:A9:81:E8:6E:56:53:A0:3E:67:02:BD:D5
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584A050A740F9C0D2D7490D6D800
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fba1aa51-6cbe-35d0-a42d-45c4ca8be260.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     13576
IP address blocks:        208.53.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:74:0f:9c:0d:2d:74:90:d6:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=5a5dc220-2b93-4b67-a8c3-fd35f35103fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5e:e4:43:42:19:5f:b6:3a:87:c2:3c:c9:30:
                    e9:cc:9e:2c:07:a8:56:f7:9f:20:6c:98:1d:60:94:
                    e9:6e:c9:e8:8c:0a:ab:c7:d4:c2:30:d5:f9:d8:c9:
                    8c:b6:1f:f5:8a:44:ec:c7:76:72:ac:f8:e4:81:e9:
                    e1:fb:f3:12:92:12:0f:ea:5b:62:df:8a:59:08:6e:
                    bb:47:5a:e3:ce:96:79:b3:2c:cc:41:08:61:ff:65:
                    33:f0:32:bf:16:84:27:23:a5:bf:fc:c4:41:15:db:
                    b8:90:f2:76:d7:14:09:49:78:6f:dd:5f:59:bf:3a:
                    ab:e9:94:92:d0:cb:66:37:d6:df:d3:8b:b0:b3:f5:
                    66:76:ff:45:48:96:0c:97:9f:7b:ed:60:50:02:60:
                    a3:97:6d:c0:45:fc:ae:20:a2:06:1d:04:3a:7d:17:
                    75:49:3e:55:04:64:c0:fa:c5:d4:09:f3:be:4f:ba:
                    5d:6a:82:15:06:99:3c:6b:72:82:26:9a:20:4a:fb:
                    75:ba:cb:a4:a7:5a:32:eb:61:e0:0c:e9:77:3d:ce:
                    40:74:73:a0:17:a7:42:ce:16:04:a5:d3:94:ef:ca:
                    1d:4f:bd:b8:ed:6e:4d:90:a6:86:8d:10:47:d9:53:
                    ce:fa:76:b6:a6:b5:49:50:0b:c3:4d:3e:7d:e8:15:
                    9b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:91:0F:82:EB:86:BC:61:A9:81:E8:6E:56:53:A0:3E:67:02:BD:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fba1aa51-6cbe-35d0-a42d-45c4ca8be260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.53.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:79:5d:77:bf:77:81:39:a6:a5:69:a3:a3:c3:93:f7:da:05:
         45:bc:14:3f:84:58:4f:9b:d2:53:0b:8f:f9:f0:a2:88:51:60:
         b4:30:97:1f:92:0f:ac:4c:47:3d:6a:1d:a4:ce:a4:a9:f2:de:
         94:de:6d:71:b9:a0:f8:20:a5:f5:80:6f:fa:40:c4:d8:64:39:
         ac:47:25:55:90:c5:ca:91:4b:d7:17:0b:a6:fa:a1:9b:ee:e5:
         44:74:e1:d5:ce:a0:e7:55:88:3d:3b:7a:73:71:2c:7d:ca:f5:
         ad:4c:8c:99:bc:b5:46:50:9b:5a:78:d9:01:06:f9:97:ff:7f:
         7d:e6:70:7f:44:c8:ef:63:a7:79:87:1f:9f:dc:2b:ad:2f:c6:
         41:b1:78:cf:0c:e6:78:ae:c6:d7:01:a5:df:48:55:87:27:63:
         75:d4:c5:88:9e:3e:27:a2:fa:be:9a:11:48:ea:12:34:f3:07:
         71:55:56:1b:6f:14:8f:8c:ed:e6:e1:b5:e1:b9:54:97:ad:d1:
         bd:ed:94:05:f2:a2:87:a2:46:e8:5f:16:b1:58:a4:1d:da:24:
         e2:d9:83:89:31:e6:4b:de:ad:c3:7b:05:7d:92:36:d3:33:ae:
         84:51:66:6f:f8:c2:d7:f7:a2:f1:f1:8e:f1:d9:34:48:39:08:
         f0:54:6d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:45:53 2025 by rpki-client