Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa
File:                     dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa (raw, json)
Hash identifier:          EjRPIqSoSPaR7H+J0m22IcYhs+56ymuljbLhHjLYOe8=
Subject key identifier:   CE:66:E5:62:6A:26:7B:78:E8:A3:F9:08:B4:FF:FE:A9:51:EF:98:88
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F4328584A43DB0459DFC9B2A9DD319200
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     395915
IP address blocks:        207.2.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:04:59:df:c9:b2:a9:dd:31:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=e47a8cd3-fd8d-4a36-9567-0e4ff18268a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0a:27:9b:fb:57:54:3f:af:50:cd:38:fe:0f:
                    14:75:56:55:d6:1a:72:b3:59:71:27:92:74:6e:75:
                    d8:46:95:c9:e3:1b:d9:0a:dd:68:e9:f8:c2:22:e5:
                    13:04:07:59:ab:56:6b:b3:b8:0c:66:64:18:33:76:
                    a8:50:e6:6e:fb:e5:99:b6:8a:10:7e:47:1b:17:6f:
                    2d:17:e6:73:9e:68:b0:2b:04:56:40:90:2a:47:12:
                    00:6d:bf:78:42:2f:b7:90:9e:1c:b9:d5:a9:a8:09:
                    9f:c9:e0:75:14:a0:ba:05:e3:af:79:d3:6d:64:24:
                    31:a5:d8:10:1c:9e:d8:4c:f3:19:25:d6:a8:63:31:
                    a7:94:43:7d:aa:c0:78:df:3f:01:9e:34:de:b3:ad:
                    21:4d:3d:ff:b8:58:29:5a:cb:d5:56:db:8b:bd:6a:
                    89:3e:34:e1:e9:ed:9b:ab:36:5b:82:4e:fc:a6:c5:
                    e7:83:cd:86:4a:8e:96:ff:c7:f5:8e:ff:ac:38:b0:
                    fe:8c:06:a3:7e:6d:0e:7a:cb:ba:f1:9a:26:25:95:
                    2e:1d:7b:6e:7c:38:4a:31:bb:14:58:29:79:9d:4a:
                    55:21:c3:0d:45:cf:b3:c0:0f:d6:79:46:be:81:a9:
                    a1:66:e7:74:4e:01:45:d1:8c:6e:3a:ac:3e:4d:b5:
                    9e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:66:E5:62:6A:26:7B:78:E8:A3:F9:08:B4:FF:FE:A9:51:EF:98:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:09:b4:03:11:bd:ad:f2:15:f5:e3:6b:9e:6d:6d:ef:2b:43:
         40:65:fb:f3:c3:7b:bb:1b:b4:d7:e1:33:1d:b4:2b:50:7c:ac:
         ae:aa:5f:ab:cf:9a:0e:ae:b2:61:5e:c1:d9:a7:65:69:45:c6:
         b0:dc:29:a3:68:05:3e:2d:a6:55:4e:3a:5c:4b:5e:d9:2c:7f:
         04:15:ac:79:00:39:12:1f:94:dd:ee:51:d6:47:2f:43:d8:2b:
         cd:d6:4f:49:33:9a:79:34:7c:5c:df:a6:1d:f3:50:05:79:fa:
         6a:17:7a:fb:32:72:33:76:f1:1e:8d:6d:16:47:31:ee:34:5d:
         95:6c:59:d1:00:72:56:36:77:01:fe:2b:8e:d1:80:8c:d6:31:
         06:f7:9f:51:5a:c1:d7:9a:7f:20:b7:60:09:35:d9:94:71:34:
         f9:d8:94:6a:28:6c:cd:8d:15:75:16:72:32:08:e4:24:47:30:
         cc:73:58:85:b5:78:3f:1c:c3:5e:f5:d3:14:a9:b0:66:77:8c:
         ee:be:05:29:42:3c:88:9e:38:90:6a:99:ec:d0:b8:fb:76:42:
         84:fe:fe:93:4b:55:8a:79:b6:be:72:2d:fe:db:42:5d:95:e7:
         3e:d1:7f:b8:ed:7c:21:42:50:f6:9f:a9:af:8d:62:7c:05:ec:
         ea:8a:6e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:52:15 2025 by rpki-client