Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/49f4f873-e26d-3c89-be18-a10d45ad89e3.roa
File:                     49f4f873-e26d-3c89-be18-a10d45ad89e3.roa (raw, json)
Hash identifier:          pDXKomMY00tiZWuneai+AtLY4NeN4xhBA9OeZVefM9k=
Subject key identifier:   8E:A9:CD:30:DD:41:3A:1C:FC:A4:FF:80:D2:C4:76:DB:62:51:44:3B
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584A3A158080351579301EBCDF80
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/49f4f873-e26d-3c89-be18-a10d45ad89e3.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     55044
IP address blocks:        67.130.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:80:80:35:15:79:30:1e:bc:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=a2c68076-f703-44d7-90fd-c0cb67cd3ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e5:b3:6b:a1:22:6c:9f:c3:f8:e9:25:10:b5:
                    c6:fe:cd:17:da:85:9a:ce:a2:09:82:8d:5e:5e:c2:
                    c5:78:b8:c1:09:f5:5c:64:26:36:d1:3b:d7:c4:0e:
                    4c:12:fa:f5:fa:62:7d:cd:45:0d:c0:23:f6:09:bb:
                    a3:ac:f8:a8:c7:51:bc:fb:61:4e:09:a9:6c:8a:6d:
                    7b:bb:b5:b1:e1:78:c6:15:db:e6:ff:a2:17:d2:dd:
                    a7:a6:56:90:58:1a:10:0d:f4:c5:d0:91:41:8a:a7:
                    37:d0:5c:24:93:c8:61:9d:d6:90:b3:a9:63:d7:ee:
                    b5:1c:4d:ba:20:22:3b:b0:2a:1d:11:1a:47:87:9e:
                    01:a6:06:32:60:82:bf:65:ee:72:99:c6:71:23:fb:
                    b9:91:dc:89:95:e7:df:73:f2:b3:a6:ad:83:f6:3d:
                    35:aa:78:00:7a:34:bf:30:f3:90:cb:7f:42:c6:46:
                    20:77:22:63:0c:42:c1:09:ab:84:45:e8:a5:ec:b9:
                    50:8d:48:65:1c:ce:88:4e:95:bc:7b:ad:78:ed:ce:
                    5a:56:ae:4a:af:ce:28:5a:c9:d5:a7:50:0b:4d:30:
                    f2:b8:7b:c1:8a:f0:6f:63:ea:1b:98:07:d4:99:c9:
                    bf:6f:21:7e:d9:1f:73:29:81:a5:65:d3:b6:1d:de:
                    49:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A9:CD:30:DD:41:3A:1C:FC:A4:FF:80:D2:C4:76:DB:62:51:44:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/49f4f873-e26d-3c89-be18-a10d45ad89e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.130.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a8:3c:50:9f:bc:60:83:01:bc:2a:00:08:1e:03:86:69:ee:
         f1:99:2c:08:34:2c:ee:52:81:fe:b9:89:a3:fd:2c:6b:8f:3e:
         6e:c5:87:0e:54:38:99:9c:c2:87:b2:87:72:a5:15:84:94:65:
         28:5a:57:d7:b7:fc:1d:8c:e0:7b:41:d6:7a:44:e5:54:f1:5d:
         7f:ec:26:ab:32:26:7a:3c:dd:47:01:e0:75:4f:0c:72:7e:45:
         95:b1:2d:fa:8d:a5:91:47:78:c0:be:e5:f6:86:31:08:8b:e7:
         75:6c:27:5c:9f:c4:44:2f:82:ef:c1:fc:8a:8d:ec:c3:75:51:
         ab:d0:01:04:9f:f9:14:3f:e4:18:35:70:5c:44:e0:ff:30:28:
         48:a1:13:c1:aa:1e:b1:1c:6e:17:7c:99:32:c8:74:7a:5f:9c:
         4a:54:e8:95:dc:d1:9f:d2:36:c3:8e:17:fc:e8:a3:03:6a:12:
         be:08:c3:ae:fd:bb:eb:62:c5:58:f9:6f:6a:d1:82:6f:03:87:
         e4:1c:14:fa:82:b2:e5:d7:d8:a5:67:18:54:ec:e7:b5:b5:ef:
         62:bb:25:ef:8b:93:d6:63:cd:82:c2:e2:02:b0:52:38:54:50:
         f5:d3:9a:1a:9e:d7:16:35:28:f8:f1:7f:23:54:53:94:ad:36:
         8d:ea:81:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:58:21 2025 by rpki-client