Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/037804c2-e65c-3513-b219-6bff621c810f.roa
File:                     037804c2-e65c-3513-b219-6bff621c810f.roa (raw, json)
Hash identifier:          id3HxKa5eOjyXFLq+0lify+XTCOQ+6r+059ae52bHzw=
Subject key identifier:   6E:21:37:E9:07:3A:2C:BD:EE:D8:F4:B8:DD:EC:44:D4:9B:2A:7A:E6
Certificate issuer:       /CN=7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158
Certificate serial:       010D0C9F43285849B14A0CFF24582A5E09E95380
Authority key identifier: 28:F6:4B:EA:12:08:2C:FE:26:90:08:15:D5:3D:99:F6:12:C0:77:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/037804c2-e65c-3513-b219-6bff621c810f.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     400620
IP address blocks:        207.174.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:0c:ff:24:58:2a:5e:09:e9:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=04348b59-365d-4acc-9f78-959c26303aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:73:5f:33:e9:c5:08:fe:64:97:1c:1f:7e:1b:
                    e0:e3:a7:83:d5:f5:d7:3e:d7:fe:d4:72:ff:24:b7:
                    2d:20:b6:0d:7e:0b:e6:7a:31:48:68:31:81:cd:09:
                    14:00:a7:44:06:fb:e2:a1:68:03:8c:93:9b:fa:85:
                    d1:38:33:df:35:7f:ea:ef:b5:f3:94:46:37:96:29:
                    f6:0d:d7:9a:24:25:e7:1a:63:f8:c4:65:bd:ad:aa:
                    90:47:b0:e4:64:8b:48:1d:45:d4:9f:f8:46:0a:d1:
                    c1:09:52:76:35:26:d6:c6:95:e0:57:79:89:b8:d6:
                    2e:dc:df:4b:90:c9:c0:b5:b1:a4:d2:52:c7:be:13:
                    28:8e:3b:a6:b9:3f:0a:6e:c1:09:e6:5b:0d:8e:05:
                    3c:92:ef:b1:0e:fc:20:ca:24:da:c0:74:8f:6d:38:
                    d4:a7:f1:3c:c5:a9:79:c5:6c:5e:57:ad:ed:10:db:
                    bc:74:77:59:67:6e:3d:f2:f8:05:32:24:d7:75:d9:
                    56:f5:a6:91:08:59:ad:d4:e7:16:34:82:6e:96:47:
                    6c:fa:61:b1:96:21:7e:42:20:83:e0:19:dd:33:f7:
                    c3:62:3f:40:e8:f5:ae:d1:98:c6:51:43:c3:aa:b6:
                    11:7a:18:9f:3f:75:1b:d8:e7:f8:8d:38:ca:15:a0:
                    f0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:21:37:E9:07:3A:2C:BD:EE:D8:F4:B8:DD:EC:44:D4:9B:2A:7A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/037804c2-e65c-3513-b219-6bff621c810f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.crl

            X509v3 Authority Key Identifier:
                keyid:28:F6:4B:EA:12:08:2C:FE:26:90:08:15:D5:3D:99:F6:12:C0:77:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:17:74:5f:ba:8e:60:8a:7f:a7:15:6f:7a:1d:9d:c7:fc:34:
         c9:a5:b2:81:91:5b:7c:f9:b5:f3:0d:d9:3a:b7:5c:37:9a:16:
         bf:e8:59:21:a0:0d:41:01:13:84:a7:ed:ea:d4:45:77:fc:84:
         af:e4:08:bc:86:55:66:29:36:12:4c:f3:49:78:68:09:3b:dc:
         6c:36:25:16:93:3e:0e:7d:df:e3:ca:85:6c:f4:ab:10:48:60:
         f2:6e:6f:12:1b:8c:83:b7:29:47:51:c8:d6:27:0e:4a:c0:ee:
         de:e0:69:a5:7a:e1:f0:8b:02:6c:05:67:59:22:60:3f:ae:12:
         09:24:35:65:fa:08:39:49:38:e8:fe:5f:10:79:81:a8:b2:f2:
         5e:3e:9f:58:2b:b0:7f:70:8e:7c:57:fb:77:6b:56:34:d5:5c:
         84:5a:71:1c:32:5d:c4:1f:ec:fa:51:dc:fe:d5:8f:a6:6e:07:
         c7:78:aa:6c:d3:4e:0b:c8:1c:59:55:da:fc:5a:00:e7:62:59:
         cf:ca:b9:8b:29:87:c4:77:ec:75:0b:c9:a8:84:e0:ba:08:3a:
         59:94:c7:fc:bd:ed:65:34:dc:f2:30:f3:6d:a0:d1:8b:b5:11:
         0d:e2:b2:25:99:d2:d1:dd:0e:2f:ba:79:d4:0d:6b:65:04:37:
         d9:d7:8c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:32:32 2025 by rpki-client