Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e7aedaf3-aafd-3d85-b68f-6e44ab47baf2.roa
File:                     e7aedaf3-aafd-3d85-b68f-6e44ab47baf2.roa (raw, json)
Hash identifier:          zipLbXjTS7bB7laIHQeGQDR4dI/yDxM51Su4ZSvqmSI=
Subject key identifier:   DC:18:21:1D:AD:B9:AF:8E:E7:EC:F6:88:A9:57:AC:67:BA:0C:EA:69
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F43285849FCAA7B747DD6E02CC1A18280
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e7aedaf3-aafd-3d85-b68f-6e44ab47baf2.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     21949
IP address blocks:        207.22.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:7b:74:7d:d6:e0:2c:c1:a1:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=7f9910b7-ae2b-443f-a305-6db949539814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:75:6c:f7:b0:12:b1:5c:fc:65:e9:b9:d0:50:
                    06:e1:5c:19:67:30:b9:5e:62:42:df:89:12:7f:16:
                    86:15:7e:60:b8:80:b4:5a:74:28:16:60:e3:58:05:
                    11:09:7b:97:d1:79:28:42:2e:27:64:43:51:73:c5:
                    92:1f:94:b4:8c:01:f6:86:9d:8c:02:a6:f1:12:c3:
                    7b:34:96:bd:89:6d:93:8c:93:e5:79:ce:ce:9a:a3:
                    54:3c:7b:bb:02:33:8a:ba:94:d2:43:8a:75:43:ce:
                    95:e7:e4:8d:17:40:65:3e:8a:b6:9a:ce:c8:e9:21:
                    ef:ed:12:40:44:d2:ff:d8:d9:47:41:6a:fd:3e:34:
                    45:02:aa:ca:db:c5:ce:5e:0c:4c:dc:f1:45:3f:a3:
                    bc:4b:76:b8:66:34:5d:50:b0:73:6e:b5:68:6c:81:
                    a4:71:6b:14:e3:72:40:75:c9:40:f8:8e:fd:11:86:
                    d9:88:8c:cf:f6:c7:66:de:01:7f:c3:48:e6:3c:31:
                    fb:4e:88:11:5d:00:b4:55:bf:16:d1:35:90:98:bb:
                    72:47:44:f6:f6:01:75:a3:81:94:11:a4:0e:08:af:
                    24:d7:8b:51:9a:a3:20:e3:28:f0:0f:88:73:a8:01:
                    46:e7:49:63:b7:4c:38:fb:5f:b0:80:27:ee:11:10:
                    b8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:18:21:1D:AD:B9:AF:8E:E7:EC:F6:88:A9:57:AC:67:BA:0C:EA:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e7aedaf3-aafd-3d85-b68f-6e44ab47baf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.22.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e9:52:59:04:a3:35:b7:03:08:4f:41:f3:a9:c2:b5:f7:03:
         b8:4f:63:3e:7a:e4:81:95:a5:6e:94:e9:70:a6:b1:66:fd:6b:
         55:10:ab:87:d1:df:d4:82:c9:9a:d3:d7:90:99:1f:11:2f:2f:
         c1:22:24:cc:38:94:25:17:54:eb:01:25:00:d4:84:28:f0:53:
         cf:5b:bf:1a:4c:3b:5b:ee:11:54:b4:67:fd:0b:f0:b1:69:c2:
         6a:14:7f:76:07:91:87:3f:a9:c1:15:18:27:f0:ec:b9:70:16:
         6a:a2:34:93:53:70:b3:c2:e4:15:27:89:c9:45:63:72:30:eb:
         5a:de:f0:3a:19:df:83:80:74:90:56:00:9c:f5:c1:2c:cb:89:
         f1:65:87:e3:92:66:65:51:22:b5:ec:f9:39:18:a9:96:c9:1b:
         1d:d1:71:f9:8e:c6:5d:d0:61:ee:d1:30:a3:3e:03:23:46:0d:
         25:e3:b3:6c:fe:9e:4d:88:ff:83:c0:94:d7:de:ab:92:52:2c:
         6c:c8:c9:d6:c0:5f:19:c4:1f:02:c9:f6:a0:7c:33:f6:b7:4e:
         5f:18:bc:cb:4b:aa:55:1b:73:ee:79:8d:c7:c4:50:d3:90:5d:
         d2:cb:f3:99:b0:97:15:c0:14:5e:bf:4d:9f:95:e2:36:30:26:
         68:40:3b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:32:57 2025 by rpki-client