Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ea8c8f15-c687-3daa-b878-45a8368b74d7.roa
File:                     ea8c8f15-c687-3daa-b878-45a8368b74d7.roa (raw, json)
Hash identifier:          Gyi65FA3tljR8wO16HOq89+W9enkK00/dUrg+OLAYWE=
Subject key identifier:   FE:29:B3:FE:83:D2:E2:BB:70:A4:0C:24:C9:E4:62:17:C0:3F:4D:E8
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285849B57A159937AF73EDD6AFE500
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ea8c8f15-c687-3daa-b878-45a8368b74d7.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     55246
IP address blocks:        209.237.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:15:99:37:af:73:ed:d6:af:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=f7fd3eb3-ad4d-4b34-83fa-f0f53e1bf01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:06:87:50:24:6d:e1:02:5c:b4:f5:d6:75:ae:
                    e3:05:f3:cb:2c:5f:24:b5:cb:3c:51:9c:fd:49:8b:
                    84:3a:3f:8f:f7:18:e5:37:f4:63:58:1c:18:a2:ec:
                    2c:ac:ea:2e:1c:15:36:7b:cb:e8:74:04:49:fc:8e:
                    f6:cb:e7:19:ef:9e:d2:21:da:6d:ff:b2:f6:15:46:
                    28:2f:36:24:a7:25:c8:82:24:8f:51:37:1f:45:51:
                    cb:34:6e:06:8c:55:b8:66:1a:e9:d1:e0:31:f9:3f:
                    59:cc:42:5d:24:e3:05:2d:af:88:59:24:bd:fb:69:
                    ee:fb:7b:85:a5:3a:b1:f9:b7:d6:72:cf:1b:93:39:
                    52:c7:80:be:d7:cf:ef:92:15:5b:97:be:d2:59:31:
                    75:4b:7b:04:99:6e:21:ba:a5:dd:57:6b:c1:fb:30:
                    e5:38:0f:fa:20:4b:db:5c:a4:d6:fe:e2:19:b8:9d:
                    54:e6:f9:23:ad:85:a0:55:01:00:47:a9:9b:d5:a8:
                    fc:60:cd:5f:02:3d:68:3a:45:33:82:a4:c9:db:4d:
                    3a:55:96:d8:e6:24:f8:1b:16:da:98:18:0d:d3:57:
                    cb:eb:9c:95:a9:07:ce:b6:75:a1:d6:4f:cb:87:4c:
                    e6:3a:a2:9b:9b:af:7c:65:a1:3e:13:15:56:51:75:
                    94:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:29:B3:FE:83:D2:E2:BB:70:A4:0C:24:C9:E4:62:17:C0:3F:4D:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ea8c8f15-c687-3daa-b878-45a8368b74d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:2c:6e:05:f5:19:d7:ff:7b:80:44:58:9d:46:7a:ea:18:76:
         2e:ee:08:bd:e6:fe:eb:6a:9e:0a:e2:f9:2c:fc:cb:62:a6:8c:
         f1:a1:cd:c5:05:f7:1b:60:27:be:fb:69:a0:4a:7b:50:e6:83:
         ed:54:99:37:7e:e5:c5:5a:7c:8d:51:61:5b:2e:41:fd:5d:ef:
         a2:26:78:17:07:1d:6f:d4:3b:ad:35:4c:ba:9c:93:f8:2e:0c:
         91:1d:aa:a3:31:41:71:14:de:0e:73:b2:a0:f7:11:b3:51:69:
         ae:29:5c:02:e0:b9:eb:9f:ed:d7:e4:0d:b6:9d:9a:53:6e:da:
         88:88:69:d9:74:f1:f7:98:98:07:d7:1c:23:fa:c5:fe:de:2d:
         6d:e3:0a:64:91:d4:2a:f8:35:f3:e4:99:4a:77:86:26:c0:6f:
         42:12:33:c2:9d:a6:f1:1d:91:1c:d4:36:7e:64:cb:37:44:76:
         99:2a:f7:b0:a2:73:80:48:59:2f:52:17:95:96:0d:2a:d5:a9:
         bc:c1:33:0b:c3:3a:33:5d:94:5f:82:c4:96:f9:a1:26:0a:df:
         d2:a7:9f:14:e0:90:73:43:93:58:1c:7c:77:bd:33:a9:5a:5c:
         2b:a0:4d:fe:0a:1c:cd:46:74:a3:d4:3b:83:52:e6:1b:ad:2b:
         ba:1e:25:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:45:24 2025 by rpki-client