Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/12b22e24-9cda-31d3-bb47-2ac0bbbaa092.roa
File:                     12b22e24-9cda-31d3-bb47-2ac0bbbaa092.roa (raw, json)
Hash identifier:          iJwBWhuGvutqGWUOM/VzB7FZXBEopOORSf9asPsIqVs=
Subject key identifier:   06:01:0B:0E:AE:2C:E2:CB:57:D7:10:87:22:40:B6:D5:61:82:E2:6A
Certificate issuer:       /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial:       010D0C9F4328584A43DB072D098827F8A2EE3C00
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/12b22e24-9cda-31d3-bb47-2ac0bbbaa092.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     7029
IP address blocks:        207.170.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:07:2d:09:88:27:f8:a2:ee:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=d9e8227b-1d47-475d-a9ea-7fd58fd8de1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:0f:2f:fb:f8:f4:49:4f:20:b7:4b:cf:94:
                    d6:b9:e7:de:69:f3:a5:67:4a:06:ad:aa:30:b4:3c:
                    e3:6f:89:14:e6:16:2b:ec:6d:5f:ef:77:68:b7:f7:
                    3e:e1:f0:9a:03:34:bd:66:c6:27:af:9b:0a:0c:f9:
                    f7:8b:d4:98:76:15:42:fb:0d:0b:ab:a6:f8:6f:c2:
                    2b:89:65:74:8e:92:9c:ea:e9:de:de:b8:55:25:6f:
                    f9:1c:0a:84:7d:12:b2:11:11:5e:80:6e:bf:13:41:
                    43:6d:e7:ff:b8:80:c2:e5:f6:10:fd:69:92:bc:db:
                    ef:52:2f:0d:23:1e:f6:f1:e2:f6:35:93:c2:b2:cd:
                    4c:3b:e4:af:9d:db:c1:d6:b9:45:1a:bc:0a:f8:1e:
                    4c:39:15:57:f5:f2:73:e6:e7:cd:a6:01:e9:ea:c1:
                    a2:0a:a6:4e:5b:e6:6e:48:ca:76:9f:1a:da:7f:f5:
                    60:5b:98:36:4d:ba:12:59:a1:7a:ac:27:6c:4a:ee:
                    10:26:ea:49:7e:b3:79:f1:a5:3d:83:9d:78:31:dd:
                    c0:2c:18:45:19:d4:e6:d5:50:cc:12:fe:54:6c:88:
                    d2:52:a1:ff:04:b2:ff:94:81:70:06:bb:93:33:b2:
                    e1:29:1c:0c:e2:1e:23:6f:79:b6:cb:a2:56:4c:f5:
                    3b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:01:0B:0E:AE:2C:E2:CB:57:D7:10:87:22:40:B6:D5:61:82:E2:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/12b22e24-9cda-31d3-bb47-2ac0bbbaa092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl

            X509v3 Authority Key Identifier:
                keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:55:6b:57:28:05:d8:ab:7f:a6:7b:98:43:66:9e:1d:64:db:
         1a:53:40:35:0a:89:19:86:0a:41:d9:25:ec:54:84:18:d6:4c:
         20:ae:ff:ed:b6:31:02:2d:9b:88:e0:48:a0:98:34:da:49:26:
         94:58:f2:76:fa:7f:57:a5:ca:d3:eb:d7:e4:7e:63:89:ae:d6:
         53:41:bf:9e:04:e4:4b:51:1e:4a:6a:ba:0a:da:26:50:98:a9:
         69:65:e0:16:32:95:74:05:89:e3:78:0c:4d:23:d4:3d:06:e3:
         91:b7:85:de:04:3f:e7:d3:03:da:9c:53:db:09:37:14:7a:e8:
         ab:98:9f:bb:69:35:c4:a1:43:f6:da:15:30:87:26:1e:41:1f:
         9a:f2:ba:96:6e:1b:ed:25:61:c8:1e:b7:54:a0:38:14:62:6d:
         2b:05:9d:49:2c:47:70:66:b9:b2:c8:1c:3c:7b:d0:54:06:5e:
         a1:e5:1b:3c:82:c9:1f:aa:29:e6:b4:75:f0:05:2c:c3:a2:56:
         33:66:92:51:d1:1d:a8:cc:58:bc:b0:21:d2:5c:b4:fc:a0:2f:
         a3:62:db:fb:d5:04:91:3c:1e:4f:c9:66:47:1d:13:3d:ce:41:
         f7:1b:a3:95:cb:e4:91:40:b3:7b:f0:17:4e:96:0d:62:3a:d9:
         7a:83:cc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:29:35 2025 by rpki-client