Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/cb03ab98-a527-393a-8dba-c54f0bbbdca7.roa
File:                     cb03ab98-a527-393a-8dba-c54f0bbbdca7.roa (raw, json)
Hash identifier:          8958/y//rHzrGm4Pefyue0x57byP29OPtEn/VvwlpGA=
Subject key identifier:   7C:0E:36:40:CA:40:95:4C:7B:7C:95:54:6D:5F:F3:6F:12:7A:8A:01
Certificate issuer:       /CN=09c8b616-1a95-4b1a-848f-f755fed5e23d
Certificate serial:       010D0C9F4328584A7BFAE5026B6A1F77D424A800
Authority key identifier: DA:92:48:39:34:D2:A7:FD:AA:8D:07:A2:F7:DE:C2:83:0A:44:B3:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/cb03ab98-a527-393a-8dba-c54f0bbbdca7.roa
Signing time:             Fri 11 Jul 2025 15:30:43 +0000
ROA not before:           Fri 11 Jul 2025 15:30:43 +0000
ROA not after:            Thu 09 Oct 2025 15:30:43 +0000
asID:                     396972
IP address blocks:        208.73.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/09c8b616-1a95-4b1a-848f-f755fed5e23d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/09c8b616-1a95-4b1a-848f-f755fed5e23d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:fa:e5:02:6b:6a:1f:77:d4:24:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c8b616-1a95-4b1a-848f-f755fed5e23d
        Validity
            Not Before: Jul 11 15:30:43 2025 GMT
            Not After : Oct  9 15:30:43 2025 GMT
        Subject: CN=1f58755d-4778-4996-9381-75bb27411611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f4:0b:f9:a4:5e:a0:2a:32:54:4f:82:5f:e2:
                    9d:31:94:da:f1:97:fa:65:83:5c:95:ad:82:f6:96:
                    04:5c:60:a5:43:30:49:6e:5d:12:19:5f:02:13:8b:
                    87:8c:4c:4c:4d:8d:40:b4:16:94:c6:09:10:cb:72:
                    e8:60:0b:4f:7d:59:b0:b3:ed:c8:19:02:31:0c:cf:
                    14:cb:4c:34:80:a8:91:40:5f:49:b0:cb:43:5b:da:
                    16:5f:09:cc:61:26:ca:d8:ce:0e:40:b2:49:77:8d:
                    04:6f:6e:2a:bb:27:b6:b2:ee:ee:60:b4:95:22:74:
                    6d:73:34:01:39:a1:9c:b9:46:3f:4f:fb:cd:86:d5:
                    25:c6:2a:3a:49:91:a6:61:42:ef:11:41:72:2b:15:
                    54:4b:e7:24:cc:41:e7:75:ee:0b:b6:4b:78:a4:35:
                    8e:91:bc:78:4a:74:60:07:88:07:a4:a0:f0:df:35:
                    86:01:45:ee:2e:d4:47:0d:98:92:7d:93:41:d2:e3:
                    27:23:d1:be:b7:08:7a:b7:53:a2:ba:6f:dd:c6:92:
                    0a:f7:db:c4:9b:4e:66:1f:f1:f6:e0:28:53:34:66:
                    0a:f3:ae:a5:a1:82:f8:93:5e:0c:a5:33:a4:ee:56:
                    9e:cf:1b:20:ee:8b:2e:76:79:0c:3d:c6:16:3a:a9:
                    1b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0E:36:40:CA:40:95:4C:7B:7C:95:54:6D:5F:F3:6F:12:7A:8A:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/cb03ab98-a527-393a-8dba-c54f0bbbdca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/09c8b616-1a95-4b1a-848f-f755fed5e23d.crl

            X509v3 Authority Key Identifier:
                keyid:DA:92:48:39:34:D2:A7:FD:AA:8D:07:A2:F7:DE:C2:83:0A:44:B3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:0f:68:d0:d4:2d:bb:b7:1a:74:bb:0b:43:b7:34:d4:93:4a:
         4f:34:7f:30:40:c8:4c:ae:06:9c:1b:30:da:85:fc:ea:ab:13:
         5a:7f:fd:32:c9:18:52:6f:c9:1a:c1:85:e5:e7:86:f9:e4:d3:
         0f:71:c2:f3:61:6e:61:91:b0:7c:0d:1e:4a:5d:cc:94:0b:de:
         a2:b2:9b:32:37:b6:50:40:7a:76:f7:be:60:24:1a:21:5a:25:
         89:10:43:34:35:84:58:32:98:f5:b9:82:f9:48:29:85:6d:a9:
         bb:39:48:c0:4e:63:16:d4:46:68:45:f2:7a:02:56:b6:a2:31:
         86:10:49:23:75:07:0c:6c:02:2e:d8:50:56:1b:52:4f:c8:a2:
         8d:22:47:e0:f2:60:64:e7:f7:7d:bb:24:7d:87:b6:d2:aa:26:
         8f:34:e4:40:f1:fb:a8:d9:81:af:e6:2a:d5:63:8c:d7:3e:b4:
         33:3c:51:fb:08:75:dd:a9:14:df:60:46:19:d3:e7:7b:13:32:
         da:19:f4:2a:25:1d:2e:be:8a:0e:aa:6e:88:ea:c3:b0:b2:ed:
         ce:c4:04:9f:c8:71:f3:e2:a7:22:5e:8b:7b:aa:23:37:27:d0:
         92:36:5f:5f:a8:43:ab:d2:86:dc:5b:d2:56:16:36:02:6b:eb:
         0c:c5:57:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:42:05 2025 by rpki-client