Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/071c6257-ad4f-34ad-b0ed-c68a2a127d71.roa
File:                     071c6257-ad4f-34ad-b0ed-c68a2a127d71.roa (raw, json)
Hash identifier:          W4bx8ueHX3DNOfufyIeRPsCIlO3gJ4aOeO58nYBkSG4=
Subject key identifier:   07:71:59:5E:64:CF:AB:24:73:3A:E5:0D:E7:E3:4D:DA:D7:84:E9:D8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A3A158E328564390700409500
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/071c6257-ad4f-34ad-b0ed-c68a2a127d71.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     9009
IP address blocks:        67.207.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:8e:32:85:64:39:07:00:40:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=82b0b7f3-67c0-49cd-abd7-4fd98288c882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d2:87:e4:94:44:a7:a4:ef:8b:c5:a4:12:8f:
                    2a:10:0d:6a:8f:07:07:e6:11:5d:d2:18:bd:4c:32:
                    bb:f0:dc:69:f9:1c:ee:63:ed:cd:62:84:ee:ac:1d:
                    6e:37:c5:3e:7a:83:b1:be:5d:c4:b5:b0:a8:98:d4:
                    29:de:cf:d2:fa:ad:b5:a2:fa:6d:37:f8:c9:54:59:
                    b4:33:4c:b9:d8:29:b2:56:79:f6:91:c5:06:db:df:
                    90:8c:cf:65:bc:11:26:ad:f1:eb:e2:2c:f0:57:ce:
                    42:be:8c:0a:83:be:4d:f0:32:4b:ae:3b:9b:7b:2c:
                    74:46:af:c2:10:2c:1a:89:28:3a:79:f3:f2:5a:0d:
                    e0:eb:90:e0:40:62:e4:7f:1c:b3:32:52:86:80:cc:
                    60:28:1c:f8:bc:08:b4:db:83:71:a7:8b:c7:36:f5:
                    30:32:22:a5:c2:bf:cf:0a:71:bc:fe:ec:7d:35:42:
                    75:00:f5:f8:c5:49:fc:15:21:59:e1:ea:46:e1:2c:
                    78:1c:61:6b:a5:a0:da:21:a9:34:7b:04:f1:f7:56:
                    b7:52:34:a3:e3:18:31:a3:19:5a:75:41:82:c1:38:
                    3a:c4:43:5b:16:91:e8:9b:b5:73:ea:a8:74:81:1f:
                    b4:32:2e:f3:3f:4f:1f:fe:e7:bd:57:71:8d:d3:9c:
                    bc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:71:59:5E:64:CF:AB:24:73:3A:E5:0D:E7:E3:4D:DA:D7:84:E9:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/071c6257-ad4f-34ad-b0ed-c68a2a127d71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.207.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d1:0e:1f:2a:05:1a:d1:04:0e:9d:c8:13:41:19:4c:6f:f9:
         90:a9:54:00:e1:eb:20:2f:ca:1f:e0:7b:fe:cb:db:18:75:d5:
         8a:28:ea:60:64:c4:8d:f8:a5:41:bd:54:d1:16:97:18:6c:17:
         71:6a:43:a8:ca:08:87:0d:ea:14:06:3b:ef:19:df:4b:68:64:
         48:89:33:f7:b4:98:2d:0d:3c:78:46:00:6f:49:ff:76:d8:3a:
         bf:39:a6:c6:92:79:a2:ac:1c:5d:1d:a8:a7:e0:2a:8f:79:fa:
         c4:41:2a:30:ea:8b:af:c2:f7:db:4c:02:75:3b:12:a0:89:c9:
         bc:6a:b2:70:07:03:bb:89:34:bf:f0:f9:9c:ca:9c:bd:57:38:
         32:fc:66:ec:a6:0b:8e:1c:03:85:8a:bc:81:e7:19:e8:a8:29:
         97:58:bf:4b:ec:4d:92:e4:5e:c5:ee:74:a6:7c:fe:49:f7:54:
         d1:04:46:23:9c:64:5c:74:63:b0:4d:04:4e:a8:eb:77:ac:3d:
         48:50:86:88:e4:26:64:83:ff:18:ee:4c:1a:d7:36:0a:b9:ff:
         76:fb:e3:db:53:61:92:65:02:81:90:0a:cb:f9:8d:f6:75:94:
         36:fa:3a:bd:ad:39:3b:34:57:16:64:3a:40:d1:7d:11:45:f6:
         db:ca:60:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:22:49 2025 by rpki-client