Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/c2382b7b-7222-37b3-b036-98a129340a43.roa
File:                     c2382b7b-7222-37b3-b036-98a129340a43.roa (raw, json)
Hash identifier:          KITWOyLrmGf8ALWDB888UNv7WSr7nx/9e+TjptmTOWk=
Subject key identifier:   72:D8:39:B9:61:D6:58:DF:60:6D:D1:F7:0A:CA:79:C1:59:41:01:CD
Certificate issuer:       /CN=8ee8b7f9-2148-4099-8192-6428b14301be
Certificate serial:       010D0C9F4328584A2C20205C7589177B11533380
Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/c2382b7b-7222-37b3-b036-98a129340a43.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     10364
IP address blocks:        207.157.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:20:5c:75:89:17:7b:11:53:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=97f55c34-ae68-42fe-bee4-9344359e4b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:63:78:bb:6d:81:2b:0a:71:20:cb:46:83:90:
                    1a:c7:62:41:7a:b9:d9:f5:d1:91:08:23:20:a2:37:
                    d9:2c:29:92:6e:06:5c:1e:f7:2a:c0:bb:cc:83:4b:
                    57:d7:42:e9:23:6f:11:c1:64:04:64:c9:f8:8a:0e:
                    bc:75:9a:bd:f4:08:c2:3e:46:88:9a:15:fd:b8:59:
                    9c:a8:c8:5d:6a:b3:15:dc:73:01:43:f9:5d:a6:83:
                    a1:42:0b:5f:b4:10:63:cf:66:77:95:d1:f0:c6:b8:
                    62:ff:c7:f0:e0:50:02:8c:f5:09:a5:36:40:d2:6e:
                    99:a7:60:c9:2d:31:71:62:e1:57:00:09:15:f2:18:
                    83:d9:fb:be:0e:49:21:93:83:3c:9f:08:db:2e:18:
                    27:34:42:af:c1:b4:51:fb:ae:f1:2b:da:6b:0a:4c:
                    a2:1a:7e:81:e8:e1:f7:d7:0c:76:e3:48:f8:c8:b9:
                    7c:54:c2:51:45:fe:58:10:7d:7b:7e:aa:f7:6c:c3:
                    9f:af:d3:74:24:45:ad:24:42:15:a7:e1:57:20:ab:
                    ad:fd:b2:58:0f:57:41:d4:c1:68:32:17:61:3f:60:
                    3e:1e:60:54:38:17:09:7d:4a:53:85:d9:ae:ed:61:
                    c6:d2:7a:d7:11:4e:b8:47:3f:50:4f:92:dd:85:08:
                    f5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D8:39:B9:61:D6:58:DF:60:6D:D1:F7:0A:CA:79:C1:59:41:01:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/c2382b7b-7222-37b3-b036-98a129340a43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl

            X509v3 Authority Key Identifier:
                keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.157.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:1c:01:bb:81:2c:05:4e:5d:55:e7:b4:7c:45:fb:d7:43:4a:
         38:4a:30:e5:78:fc:0f:39:0b:de:ba:b0:75:0e:9d:43:9b:63:
         0c:a2:dd:ae:d6:98:bb:01:27:ee:6a:bd:79:96:4e:fb:05:0c:
         96:ab:d8:d4:87:5e:95:89:e5:fc:84:74:57:80:8f:26:6b:46:
         7d:57:cf:c8:2e:19:15:ce:c5:bf:4b:64:e5:0e:be:01:d8:4a:
         9a:9c:72:cc:61:0c:e9:2c:76:e3:1f:39:ce:e9:af:fa:a1:02:
         35:73:81:25:b7:df:21:7c:ff:8e:cd:29:8e:6c:9f:35:1b:a2:
         c3:8c:1c:8d:62:1c:e7:ba:ab:58:81:9a:18:46:bb:8b:24:68:
         a3:99:ed:b3:ab:36:af:bc:ac:75:47:0d:4b:f2:47:79:74:cb:
         76:ca:81:77:fb:07:1a:bb:a5:e3:da:95:4b:7d:c6:b9:f8:bf:
         c7:c3:fc:2d:de:f8:c1:55:0b:d2:a4:cc:f5:2c:f2:c3:2e:12:
         ce:ea:1e:e6:0b:24:36:23:4b:56:0d:eb:6d:c2:0b:3b:1c:6f:
         3e:4c:9a:8a:be:d9:82:d4:46:65:cc:43:1b:dc:f6:75:10:a6:
         9f:8f:de:04:21:78:6e:a6:bf:aa:f0:0b:76:69:1f:1d:5d:7c:
         1c:60:0b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:01:31 2025 by rpki-client