Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c0c75c10-2f6b-3ca9-8a7d-4b3390ca79dc.roa
File:                     c0c75c10-2f6b-3ca9-8a7d-4b3390ca79dc.roa (raw, json)
Hash identifier:          JOuqNnzvt1IC0s/dtVrpRRwhR7WZKIAnH6UrphkroQY=
Subject key identifier:   85:4D:5D:22:B4:F7:DC:90:AC:7A:A1:B6:66:AA:F5:59:39:01:27:F7
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584A4B38484CCBE83F7DF19EC1C0
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c0c75c10-2f6b-3ca9-8a7d-4b3390ca79dc.roa
Signing time:             Tue 24 Jun 2025 04:19:47 +0000
ROA not before:           Tue 24 Jun 2025 04:19:47 +0000
ROA not after:            Mon 22 Sep 2025 04:19:47 +0000
asID:                     63023
IP address blocks:        208.67.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4b:38:48:4c:cb:e8:3f:7d:f1:9e:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Jun 24 04:19:47 2025 GMT
            Not After : Sep 22 04:19:47 2025 GMT
        Subject: CN=88879c1c-b6ad-4b6a-8436-f6c2f6221370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:b9:e7:dc:e6:9d:d8:bb:5b:d9:0d:88:cb:
                    1b:07:5c:fc:d3:f0:c1:84:cc:f6:94:3a:74:be:80:
                    4b:4d:ab:ec:63:41:03:ff:19:51:d7:17:98:66:ef:
                    1c:fb:2f:66:42:49:bc:90:da:b9:68:3e:96:d8:3f:
                    c1:42:a3:39:09:4e:63:a3:0b:c8:5b:ef:b2:b4:95:
                    3e:70:2d:9c:df:f4:85:70:10:79:cf:d2:50:e9:7b:
                    41:87:a4:28:95:4b:9f:d5:a4:1f:79:13:dc:ed:c1:
                    5c:b6:03:7a:d0:a1:35:9f:f5:7a:56:8c:d5:87:4c:
                    96:16:25:29:10:03:8d:04:a5:1d:5c:fe:c5:1e:45:
                    60:5c:5c:6e:0e:8b:64:32:39:b6:2e:6d:85:fd:ed:
                    3c:ff:ca:2a:b1:47:12:90:c7:8d:20:f3:b3:3c:e1:
                    4d:20:64:01:4b:36:73:bf:23:78:23:d0:c1:71:89:
                    0e:1f:b3:43:c4:50:ff:21:68:c8:a7:2a:d3:93:6e:
                    4d:d6:33:fe:90:80:09:f2:88:bf:9f:76:71:56:63:
                    f4:a0:ee:6a:8a:db:06:51:38:4b:ee:9b:0f:a7:81:
                    89:78:4a:80:a2:a8:21:a2:2d:a2:27:d5:bb:cb:a8:
                    4a:3f:49:5a:02:d7:24:aa:bd:aa:24:43:05:c4:fc:
                    59:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4D:5D:22:B4:F7:DC:90:AC:7A:A1:B6:66:AA:F5:59:39:01:27:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c0c75c10-2f6b-3ca9-8a7d-4b3390ca79dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:c7:7a:19:68:ed:c4:db:20:04:1e:67:ab:19:91:59:6f:ac:
         0a:8e:fe:fe:18:03:49:b0:39:bb:e2:0f:7f:f1:72:35:67:c6:
         1a:1c:b8:7b:13:a8:82:b5:c7:3b:ee:14:fd:f4:c2:47:c9:04:
         3d:68:4e:bd:26:63:40:90:3a:df:c1:3d:29:35:ca:6b:5b:82:
         f7:a2:33:21:f6:8b:47:f7:85:25:b2:24:20:62:0c:fd:27:b0:
         9b:c2:91:6b:72:79:f2:31:5c:45:a1:8d:e7:f4:81:36:18:78:
         3e:b1:d6:0e:8b:bc:2a:4a:81:0c:28:5a:83:9f:88:55:48:fc:
         fa:09:bf:80:6b:0e:0c:a7:8d:d1:89:fb:98:3a:8c:9c:42:1d:
         e8:f5:a8:cd:65:5f:ab:cb:b4:66:cb:35:bf:e3:b4:d4:5f:97:
         5e:0f:d7:60:7b:aa:ab:9a:da:52:b5:fd:2c:73:3b:07:77:11:
         1f:79:88:28:97:6a:78:f1:f8:d9:1e:62:cf:6c:be:3c:0c:30:
         13:33:56:6e:b8:d5:b8:20:98:99:96:a6:64:8e:be:27:3d:9d:
         0e:c0:66:fb:c0:60:ff:a7:4a:be:9b:34:c0:ed:35:0f:8b:d0:
         cd:4a:10:ed:73:25:42:36:f0:22:18:1e:78:da:03:8c:db:29:
         d6:59:91:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:45:35 2025 by rpki-client