Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f7b9331e-5aaa-3717-8b43-0c72f9d7f633.roa
File:                     f7b9331e-5aaa-3717-8b43-0c72f9d7f633.roa (raw, json)
Hash identifier:          uQRKNENa2iGpostMJ5kb2ZTVV6ZnloBipyRdtE8/aIk=
Subject key identifier:   E4:3E:C2:FE:95:4A:A6:A7:7F:AB:2D:73:CD:7E:10:E0:0A:F3:67:1E
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584A1E2AA9CE8D8B44DFD1C79A60
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f7b9331e-5aaa-3717-8b43-0c72f9d7f633.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     7018
IP address blocks:        198.145.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:a9:ce:8d:8b:44:df:d1:c7:9a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=d966e438-0244-4f24-a70b-3fcfbe4d0bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e2:59:18:df:9f:6c:3c:07:44:1a:e1:cb:1f:
                    de:ed:40:a6:7a:c8:6c:d4:e5:2d:0c:67:58:13:14:
                    a9:f4:24:8d:c1:38:cd:4f:84:26:40:99:bd:9b:b6:
                    8d:a4:04:66:14:bd:07:3e:56:b5:da:b8:26:aa:1f:
                    5d:37:5b:dd:03:9d:2d:35:86:30:dd:4e:9e:a3:d8:
                    ce:64:a0:50:21:d4:6e:79:b1:e7:ad:21:66:4d:03:
                    f7:f4:8b:83:74:37:a2:56:61:90:88:06:10:e4:86:
                    e2:8b:44:8f:9f:62:ed:c1:25:eb:a3:96:ce:85:6e:
                    a3:af:2a:c9:b5:42:29:3c:eb:73:d6:31:7a:29:01:
                    8b:28:55:61:94:63:80:57:3f:b0:e1:fe:e2:93:99:
                    8a:9a:21:54:21:ea:bf:1a:59:6b:2e:a7:d6:1b:3b:
                    ad:fe:5d:2f:e9:1e:87:01:01:68:41:ac:c1:ae:89:
                    0e:97:3e:9d:27:6b:15:9c:dc:0b:3c:65:40:56:4f:
                    ca:e9:0a:72:61:a1:4a:e7:5d:48:39:96:eb:04:fb:
                    b0:44:99:8d:9c:86:c9:6f:39:10:03:ed:c4:e0:94:
                    7e:52:c1:0a:b4:d7:88:61:75:a9:d1:98:5c:36:a4:
                    53:ae:e5:7c:3d:0f:82:0e:62:14:3d:43:52:17:7c:
                    3d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3E:C2:FE:95:4A:A6:A7:7F:AB:2D:73:CD:7E:10:E0:0A:F3:67:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f7b9331e-5aaa-3717-8b43-0c72f9d7f633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:c0:10:f6:ba:76:91:6a:ec:ed:50:ea:80:93:7b:52:87:75:
         45:37:66:41:c8:e7:6d:01:9f:12:02:5a:8f:b7:1a:f5:ac:1d:
         67:21:d2:cf:76:1a:f5:9a:e8:6f:e5:74:1e:db:72:a2:9b:bd:
         15:71:96:8f:3f:aa:61:fb:8f:0f:dc:38:1f:77:29:c1:6e:ec:
         93:a4:92:6a:5e:9e:6b:d2:18:01:42:ad:7f:99:00:c4:bb:a4:
         eb:c0:ac:a1:e4:e6:23:a1:3d:45:55:d4:1a:dd:36:15:ae:26:
         7b:a7:6d:8a:19:a2:26:a5:26:ad:f7:02:32:7a:90:88:69:90:
         45:46:63:2a:41:39:f7:0c:db:17:58:dc:6b:3b:fc:77:4b:bf:
         c3:6b:76:d2:fd:47:0c:53:52:45:91:ab:a0:67:0d:b4:6b:24:
         9f:c5:3f:b5:1c:9c:d4:f2:4d:73:24:c3:1f:3f:24:c1:57:cb:
         86:fe:79:95:9d:2c:54:a2:81:98:e2:95:c1:ce:ab:39:6d:4f:
         43:d3:c0:e0:6b:b2:1a:f4:63:fb:5e:bb:3e:49:26:bf:5c:64:
         af:a3:bc:13:5d:27:14:2f:80:af:d0:3c:02:1c:e5:16:4c:5b:
         eb:70:c5:61:34:bb:88:6e:8a:ad:69:5c:47:27:3f:ec:35:1c:
         a6:b5:65:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:47:14 2025 by rpki-client