Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c10ad1c5-e340-3b8f-a523-d9122f4920fc.roa
File:                     c10ad1c5-e340-3b8f-a523-d9122f4920fc.roa (raw, json)
Hash identifier:          7YUr7/c/pjO9QQJFBM7osuoMR7Imz/aLu68mU0DJRDs=
Subject key identifier:   9E:1D:17:91:BE:FF:2F:A5:9A:A8:18:DD:C5:F1:7E:91:C5:DB:4E:B5
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584A374AC7FD06BFBB5ABE0471C0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c10ad1c5-e340-3b8f-a523-d9122f4920fc.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     22781
IP address blocks:        207.204.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:c7:fd:06:bf:bb:5a:be:04:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=079281a3-7ad4-45f4-95fc-a7ee5aedad15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:28:4e:1c:86:c3:64:39:b6:25:fd:cb:fc:c6:
                    e4:3b:b2:65:4d:73:47:52:07:69:05:0c:8c:bb:35:
                    ae:57:09:84:01:dd:0c:07:29:c1:ff:6c:6a:d1:0f:
                    4d:e0:f9:e2:80:da:e2:0d:20:a2:d9:63:f3:e3:fe:
                    60:9a:f7:5f:c1:b3:d1:4b:2c:27:fd:19:9a:8d:26:
                    ff:36:ac:bb:8e:55:30:79:01:89:82:47:d8:ba:8e:
                    94:fd:6f:86:d4:16:99:e0:b1:a8:bd:7f:96:da:a1:
                    cf:2c:25:91:dd:e2:7c:56:f2:9c:41:15:c3:0b:5e:
                    fe:b6:d6:3b:ff:0f:9f:63:bf:5a:af:2f:6f:b7:8b:
                    32:fa:9f:b4:55:d7:fa:d9:75:e2:44:99:bb:b0:3a:
                    09:21:01:42:20:07:32:e0:c7:74:67:fc:8b:00:27:
                    d4:f5:51:f7:b1:ec:80:ad:01:5f:e8:33:35:88:c8:
                    18:08:3b:c0:3a:26:ae:41:a3:cd:08:51:ea:64:c8:
                    5b:51:4b:41:0c:86:11:88:ff:b3:5a:09:8f:3c:32:
                    db:0f:1e:08:7c:fa:b5:38:30:c7:5b:2d:7a:2e:79:
                    cc:3b:91:ef:9d:9d:26:b9:34:d7:de:1e:81:d1:4f:
                    91:9d:68:27:c4:c1:41:b8:d1:ef:c3:db:62:81:59:
                    8f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1D:17:91:BE:FF:2F:A5:9A:A8:18:DD:C5:F1:7E:91:C5:DB:4E:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c10ad1c5-e340-3b8f-a523-d9122f4920fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.204.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e0:cb:43:a8:65:b0:2a:ce:cc:1d:38:b5:70:ea:07:c4:60:
         99:9e:b4:cb:41:a7:35:8a:9f:6b:08:b1:4d:a6:48:a3:76:87:
         71:c3:8e:6c:53:98:51:e8:d6:7e:04:2b:0c:e8:5e:e9:74:39:
         c5:b7:28:f5:d7:e3:44:48:0d:72:c4:7e:61:0d:45:8b:a9:d8:
         c0:25:1b:6e:e0:78:80:a4:cb:0c:36:f3:00:ee:8a:94:e9:fe:
         b7:20:dd:42:03:0c:66:0b:8f:41:a9:57:21:c5:21:be:10:03:
         02:b0:93:c9:23:f3:8d:7e:75:11:b8:34:3c:e4:e9:a4:66:d0:
         1d:c8:45:0d:17:87:f9:0c:e2:17:f1:c7:d4:43:b5:b6:bc:70:
         52:aa:96:b9:ac:22:d8:de:31:98:06:c1:66:b4:cd:a7:ea:3b:
         70:88:04:d5:45:61:f7:a2:ab:bb:20:4a:de:07:03:12:53:56:
         8a:0b:35:49:32:33:9b:a6:ad:16:57:2f:35:e2:a1:68:07:1c:
         53:10:50:cf:29:83:63:dc:f7:6c:1d:99:4a:a0:fd:35:14:e5:
         fc:7c:fc:05:81:fa:2d:8d:14:6e:14:13:8b:a9:84:f7:04:bb:
         43:81:1f:e7:db:d0:a5:64:1c:4f:53:76:a4:f1:48:2b:98:5f:
         21:bc:6b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:17:28 2025 by rpki-client