Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2212b82e-48ef-39d3-bc69-7f64c6197522.roa
File:                     2212b82e-48ef-39d3-bc69-7f64c6197522.roa (raw, json)
Hash identifier:          wUmLregFWE4xAn7WiGMcBaVV5R+6widRUVcsklgo+sg=
Subject key identifier:   E4:EC:2D:F9:D2:CB:D3:68:36:0A:82:88:3F:4D:7B:7F:90:83:4C:71
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A427588D588D57DC00AD1A380
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2212b82e-48ef-39d3-bc69-7f64c6197522.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     202
IP address blocks:        170.30.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:88:d5:88:d5:7d:c0:0a:d1:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=51d27cfa-654a-4a60-af4b-e8cdee720d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:30:ad:05:b6:da:74:49:e4:00:e1:8a:23:ce:
                    0d:2c:2e:de:ea:99:db:6c:5d:11:78:28:d4:40:83:
                    93:dd:91:1e:9e:b2:74:9d:99:84:43:37:0c:c0:da:
                    92:57:88:1d:75:ac:29:ed:08:34:0f:29:4a:bf:23:
                    6c:17:f6:78:e5:8b:1f:c9:b1:01:f0:38:18:a0:a8:
                    f2:69:0e:2d:90:c3:cf:b3:b7:4f:e9:ad:1c:69:14:
                    9e:b6:19:4b:20:82:fc:9b:41:60:f5:d1:41:10:f7:
                    14:20:0c:7e:01:4a:29:f9:53:8e:73:3e:01:92:6f:
                    46:bc:97:15:d8:31:5e:c6:fa:f6:78:9d:e6:2b:ba:
                    42:6d:13:1c:97:ef:36:c7:6d:0f:6e:34:a1:5e:18:
                    ec:91:dc:4c:57:1f:8a:59:71:80:bb:d0:5f:af:2e:
                    b4:b1:f4:b5:55:f9:f3:a2:f0:29:78:e5:e9:74:43:
                    7a:75:3f:43:83:8c:b2:25:56:3b:69:63:c4:99:cb:
                    a1:dc:59:8c:c0:eb:ee:c7:ee:a1:a4:40:57:6f:c9:
                    12:3e:95:47:ed:a5:a4:82:d7:76:2a:ab:f3:bd:37:
                    9b:d0:20:69:60:ec:92:0b:35:e2:a7:67:0e:f1:87:
                    c5:f4:3b:4c:c2:23:fc:ba:53:e9:5c:b3:96:7e:26:
                    50:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EC:2D:F9:D2:CB:D3:68:36:0A:82:88:3F:4D:7B:7F:90:83:4C:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2212b82e-48ef-39d3-bc69-7f64c6197522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e9:ec:6e:29:f7:83:1e:ad:cc:53:84:f0:2d:c4:97:02:b4:
         d0:aa:ba:0a:f5:2e:47:4a:66:2f:0a:84:6a:c4:52:69:70:2f:
         74:b3:42:62:64:7a:38:43:4a:7d:81:04:d9:c1:93:0f:7a:ec:
         e5:96:73:ec:14:51:c8:e9:33:f6:5b:f5:d0:cf:af:c7:63:a0:
         e9:d2:c2:b8:a2:48:9e:9a:75:f9:f4:af:86:20:45:1b:e2:30:
         a8:85:a8:d1:7e:28:0e:f5:a6:b3:29:bc:fb:62:4a:c6:02:c7:
         05:46:69:d7:5c:a9:af:ff:d1:b2:fd:17:2f:df:97:73:d8:e9:
         a5:1d:2c:d2:c6:55:d3:4d:0f:bf:a9:ab:8f:30:ea:a7:e2:d7:
         a8:95:96:8b:29:df:7d:8c:88:7e:13:37:18:3a:0b:85:7a:53:
         96:5d:e8:10:4e:b3:7f:be:5a:50:fb:64:93:19:22:26:d0:f6:
         ac:f0:66:b3:74:65:47:02:9d:56:d7:42:0d:15:65:0f:67:02:
         b4:49:56:1f:92:98:bf:e8:49:f0:b7:96:34:6c:8d:15:69:8d:
         3b:76:e2:c3:58:d7:2b:35:30:74:f6:e5:3d:14:3c:b8:a3:e9:
         ba:bd:7f:25:5c:e7:a9:34:7b:32:ab:9f:7d:f2:a3:28:bd:dd:
         3e:ef:39:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:45:45 2025 by rpki-client