Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/559bd815-2f54-3ec2-9322-c904668bbbce.roa
File:                     559bd815-2f54-3ec2-9322-c904668bbbce.roa (raw, json)
Hash identifier:          NyYY22aOiNByd7FtzabcxsTeZB03SuL+AaPBbOl/ZfM=
Subject key identifier:   C0:C2:8D:1A:A0:EE:4F:B6:3C:8A:23:24:67:99:D3:46:10:F3:86:84
Certificate issuer:       /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial:       010D0C9F4328584A3B7AF976C926524E5AE3AE80
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/559bd815-2f54-3ec2-9322-c904668bbbce.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     7029
IP address blocks:        207.170.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:f9:76:c9:26:52:4e:5a:e3:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=4d4aadcb-7fac-496c-933d-ebb0719fd14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6e:87:ce:21:ca:de:36:2d:03:17:73:ab:4e:
                    e2:72:c8:a8:6d:23:fc:8f:b3:9f:44:4c:28:37:18:
                    c7:a2:ea:1b:14:05:de:55:fe:f4:54:e0:79:e0:b5:
                    cf:2d:8c:bb:f7:6e:bf:61:c6:bb:c2:13:12:39:b4:
                    09:0b:05:f6:10:74:e1:0d:85:55:3e:e5:c3:52:18:
                    af:15:81:c4:4b:4f:c3:89:b4:4b:86:2e:8f:94:63:
                    fb:03:9e:07:56:9f:f5:4c:17:15:fd:dc:7c:31:b9:
                    ce:0d:0e:56:9b:85:c9:b6:76:d2:d5:49:3d:da:55:
                    73:fc:ce:de:3c:8b:b0:b4:c3:32:cf:83:35:60:de:
                    c2:52:ba:ef:a1:37:9c:c1:a7:35:d9:8a:cb:e6:e3:
                    11:c7:01:14:1e:c0:69:31:06:31:b3:bd:87:bb:29:
                    3e:50:9a:7b:92:52:a8:5a:a6:08:18:a4:ca:ee:24:
                    90:40:79:be:f9:aa:f7:fd:ab:52:e9:3a:46:01:fb:
                    a4:20:8a:25:59:79:8b:13:65:a9:16:31:8a:2d:72:
                    95:9d:13:ab:74:6f:03:31:58:30:ed:5a:54:f2:82:
                    2b:60:2e:ce:d9:d7:53:50:be:c5:92:36:ef:b3:a8:
                    e9:0d:d4:3d:22:57:7a:e5:64:04:a9:69:e1:b7:70:
                    92:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C2:8D:1A:A0:EE:4F:B6:3C:8A:23:24:67:99:D3:46:10:F3:86:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/559bd815-2f54-3ec2-9322-c904668bbbce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl

            X509v3 Authority Key Identifier:
                keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:6a:99:2c:99:f7:82:50:e1:2b:cd:3d:3b:9a:cb:68:7b:52:
         f2:bd:b4:c6:21:01:f8:3f:51:c5:ed:b8:3f:10:ea:17:ca:b3:
         bc:7c:8a:17:a3:81:ce:87:b1:84:64:e7:9f:34:c5:2f:fe:8c:
         f5:1d:58:a3:ac:52:85:8f:3c:fc:71:1f:ab:4d:b8:7c:32:c1:
         c0:96:90:91:6d:f1:f4:54:81:d4:4b:ae:ce:cf:92:36:87:25:
         37:33:20:06:f0:3f:37:ca:24:c5:3e:89:d4:92:fa:88:6e:00:
         fc:4b:54:17:a4:93:8e:b2:d5:23:65:92:5d:92:c8:e0:ba:60:
         75:2d:8b:da:e1:dc:04:5b:62:28:51:98:2b:a1:bf:c8:c5:e7:
         e3:67:6c:b8:56:f5:5a:33:04:8f:6c:12:b9:a9:fb:a8:d2:98:
         af:73:39:08:ee:98:b3:42:9b:cd:bf:66:0e:59:11:e0:a8:d4:
         42:f6:16:75:b2:8a:0d:89:ac:59:22:b3:a7:05:4c:ac:bf:3d:
         e2:65:d8:3d:9d:f1:57:5a:58:e7:80:c4:2c:69:b5:21:61:d1:
         e1:51:18:d1:a2:27:11:38:c3:80:54:2f:48:16:bd:2d:27:71:
         a4:4e:09:2f:cc:2a:bf:ab:13:39:40:95:2d:21:df:04:3b:9a:
         d7:3e:e7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:43:49 2025 by rpki-client