Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d1163ff2-7e8b-3eab-9988-119ddbd15ec7.roa
File:                     d1163ff2-7e8b-3eab-9988-119ddbd15ec7.roa (raw, json)
Hash identifier:          uNWiWa7jAXDIb1bkcaw4M2aOMJ0AdldD6GUyPRZQRP4=
Subject key identifier:   AF:A1:03:42:E9:56:BF:A0:CA:58:84:4C:77:D4:B1:32:62:A1:BA:47
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584AAB265D9C9DAB8DF4E9A0F000
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d1163ff2-7e8b-3eab-9988-119ddbd15ec7.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        208.73.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5d:9c:9d:ab:8d:f4:e9:a0:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=e583602b-d9ef-44df-88a7-d9e9eb869359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0e:83:25:5c:1e:df:6b:1f:43:b9:49:df:ed:
                    47:b3:97:e2:ea:29:cd:e2:41:8a:7c:c0:5b:26:fd:
                    4a:cd:ef:7e:a2:7f:fd:95:ea:ff:c3:f4:06:3a:25:
                    66:83:45:7d:6b:68:71:70:33:86:2f:90:16:6c:fc:
                    59:e6:39:77:5c:6e:3e:da:d3:33:6d:36:63:09:d7:
                    71:fd:7f:dc:4f:f6:5c:ce:fe:78:f3:ae:6a:4e:ba:
                    73:9c:22:9e:bf:0d:99:2a:a6:0d:e3:dd:d1:89:67:
                    38:c6:7c:47:ba:9f:b1:4c:26:7a:41:09:0e:a7:5c:
                    dc:34:73:82:3f:f9:26:7d:18:b5:e6:d0:03:32:c9:
                    3b:14:dc:4d:ff:95:68:c9:c2:59:6e:3c:2c:77:08:
                    89:89:9e:eb:cc:f5:4c:b5:10:5a:76:3c:20:01:9e:
                    b9:fd:d9:5d:9f:20:87:03:de:29:61:0e:b1:b7:c0:
                    cc:3f:5a:db:8c:00:14:31:69:0c:a2:53:31:3d:16:
                    34:5b:05:f5:d7:9d:1d:06:e3:fa:87:81:51:69:0c:
                    13:3c:bb:2c:42:f7:07:06:b7:c3:c5:ca:f2:a2:9b:
                    c0:00:db:3d:4d:7c:54:69:e1:7a:fd:10:ae:e5:c0:
                    68:4d:50:34:e8:36:17:4d:ec:3c:72:14:d0:b5:70:
                    62:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A1:03:42:E9:56:BF:A0:CA:58:84:4C:77:D4:B1:32:62:A1:BA:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d1163ff2-7e8b-3eab-9988-119ddbd15ec7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:51:b6:14:a2:ac:e7:cf:74:69:82:ab:b5:74:54:4f:b2:7c:
         16:e1:50:05:8a:01:9a:26:39:f2:e0:73:15:92:b7:d9:61:b2:
         54:8e:92:e6:71:04:87:a0:f1:7f:68:55:20:16:97:bc:56:26:
         87:12:33:50:2f:7f:04:1a:7f:bb:af:38:52:f1:8f:4a:57:3e:
         2b:a9:3d:ca:fa:ae:4d:66:a5:81:2c:ff:26:72:de:c2:05:41:
         05:90:6b:0d:d9:51:8c:9d:66:31:2d:a6:05:e3:a6:59:b6:ae:
         1a:72:39:44:3f:bf:9a:13:da:fc:78:66:6e:03:00:19:2e:c5:
         9c:f8:3a:8c:a5:de:96:a2:1b:93:9c:ba:f3:2f:a8:a4:a6:57:
         e9:ae:21:a5:eb:a7:9e:a8:88:91:f9:ee:af:89:60:fd:cc:c5:
         52:4c:df:9f:a3:67:ec:5a:af:32:8d:ae:33:3d:14:d6:92:82:
         af:89:af:62:95:19:30:1e:38:9b:7e:70:25:f5:4f:55:3a:ab:
         7b:eb:08:26:89:07:82:51:fe:84:d7:2f:82:08:76:15:a3:6a:
         81:b9:0d:59:4e:a3:26:27:3d:81:9c:3f:22:55:ca:7e:be:dd:
         2b:bf:da:0e:ca:5a:29:95:e7:ea:c4:05:e9:20:02:70:7f:cf:
         3d:2b:13:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:12:33 2025 by rpki-client