Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/167d23da-fc89-3195-8b3d-de6216436402.roa
File:                     167d23da-fc89-3195-8b3d-de6216436402.roa (raw, json)
Hash identifier:          vS2xFGccaSyWv/3zrBRdRAKSG43H9Q10ni1HUXi2XHg=
Subject key identifier:   3A:F1:58:2F:E6:AE:1A:12:98:08:67:95:00:15:C8:F5:D5:E7:D4:C4
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A612B0B3B2486D65C78B2FB80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/167d23da-fc89-3195-8b3d-de6216436402.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     395075
IP address blocks:        207.253.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:0b:3b:24:86:d6:5c:78:b2:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=9c564df1-69ff-40aa-8965-35174b081fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:df:4e:0f:5b:06:52:54:20:65:6d:aa:23:b1:
                    5e:a7:50:89:9c:89:af:b3:cb:6f:8a:d9:3c:ee:84:
                    16:e5:43:54:af:91:b5:66:f1:63:f8:3b:13:aa:55:
                    bf:1b:a6:83:f1:8c:5a:9e:02:3c:5a:7f:25:ef:90:
                    f3:92:7d:b9:a6:44:47:25:e6:7c:73:5b:d4:2c:4d:
                    c4:61:91:d7:c6:09:01:43:09:d9:9b:dc:5e:0c:56:
                    8c:10:ba:c9:62:f2:8b:d6:d7:74:5a:ad:f2:a0:af:
                    9b:17:72:22:0b:b0:9c:7b:8e:86:9b:3b:c8:b2:b3:
                    ea:e7:83:10:a1:bc:a7:4a:54:84:2e:31:4f:10:89:
                    58:4d:7d:c5:98:b6:5e:91:4c:c8:58:8b:16:ad:1c:
                    b5:cb:86:d1:f2:db:b6:af:26:f7:b0:76:6f:0c:1e:
                    ce:db:d3:a9:be:b7:1e:4a:6c:9a:ec:37:f2:9a:24:
                    3d:e2:e9:0b:46:80:13:ac:b9:43:a4:f4:1f:ab:90:
                    df:2d:47:33:91:15:06:ba:f6:b8:0b:73:d3:25:a7:
                    eb:da:aa:a9:3c:28:9e:b6:ce:86:fd:ed:1e:b3:c0:
                    1b:ad:f1:01:99:66:c6:80:58:9f:eb:1c:5d:be:b7:
                    d2:3b:5c:db:f7:3e:cd:45:76:e1:12:40:cb:be:73:
                    52:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F1:58:2F:E6:AE:1A:12:98:08:67:95:00:15:C8:F5:D5:E7:D4:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/167d23da-fc89-3195-8b3d-de6216436402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e0:01:be:fd:dd:10:de:88:33:2c:87:f7:39:40:71:1c:c9:
         6c:c7:23:90:47:d4:a9:22:41:3c:20:f8:fc:1c:8f:2b:49:20:
         3f:11:63:79:9f:ec:1b:1c:2f:2a:78:f0:1a:8d:25:ea:da:8c:
         ad:4e:9d:32:ba:a1:9b:66:0f:96:7f:8a:83:c7:3d:da:7f:62:
         c2:7a:0b:2d:64:5e:29:a8:05:86:90:a2:fc:c2:67:e4:91:a7:
         07:6a:59:aa:f6:92:2b:75:17:3b:53:bd:25:ba:6c:b0:e1:d5:
         d0:cd:d2:e0:ac:cf:93:cf:4e:9a:17:fa:08:d2:59:ac:b7:f0:
         06:7d:b7:af:63:3b:aa:69:38:5e:1c:56:e5:fb:fd:22:10:1d:
         4a:17:ce:94:a9:d0:48:4e:15:31:2b:9e:b3:05:8f:73:af:88:
         47:e6:54:c4:3c:3b:da:0a:49:62:73:a9:f4:a9:85:47:c0:57:
         bc:62:43:d1:d1:51:77:60:47:af:09:bd:71:aa:49:57:f2:62:
         2b:eb:ab:8d:4a:0e:d4:b2:0f:0a:5b:4c:1d:67:bf:c0:2e:a9:
         aa:82:30:dc:17:15:9c:73:12:95:34:5c:7f:45:d5:93:d4:b3:
         ca:fb:ff:30:b9:6e:ba:63:af:1e:1b:f5:25:be:d1:ad:0c:0e:
         d0:d9:ca:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:16:48 2025 by rpki-client