Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7ac65614-f40b-3045-9991-1b68e7b268b9.roa
File:                     7ac65614-f40b-3045-9991-1b68e7b268b9.roa (raw, json)
Hash identifier:          72Qs93Q8zM/gMQ1KW1SdoX9ztbn9W9gxnRpm8bJtV5s=
Subject key identifier:   93:34:FA:44:43:35:4E:CB:9D:1E:E9:DF:1E:59:31:2E:C5:E0:51:6B
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584A45403AE56AFBFA19B6D5AF40
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7ac65614-f40b-3045-9991-1b68e7b268b9.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     397375
IP address blocks:        207.23.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:3a:e5:6a:fb:fa:19:b6:d5:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=bf0610d5-cd3c-4948-8494-133bfee5c30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:30:8c:61:e5:51:42:ca:b0:6b:f7:8e:bd:b1:
                    ef:77:93:8a:ef:78:ba:2d:a6:b6:f4:88:c9:93:8e:
                    d3:45:a3:c1:92:66:67:3e:b5:34:44:ae:cc:ec:63:
                    18:f2:40:23:41:30:73:b2:c2:9c:a9:76:c6:7c:6b:
                    63:51:db:d7:25:a3:fd:29:4a:dc:c0:cd:2c:36:79:
                    0d:67:bb:8c:ca:f8:f7:08:dc:43:e8:83:1e:33:83:
                    b6:b8:80:9f:ee:07:6a:ec:f0:e8:46:c1:50:73:cc:
                    30:e7:47:f9:ab:b8:33:02:ea:66:d7:01:d0:ed:58:
                    33:4d:cc:33:2e:b5:2c:6e:de:e0:38:78:f1:99:44:
                    b7:a9:5f:25:00:fd:23:d4:c2:16:40:90:e0:0b:bd:
                    f5:31:98:f6:49:41:b3:ae:0f:57:4f:ff:ad:51:8c:
                    22:d7:86:5c:ed:49:1d:56:27:e3:7d:1c:7d:28:3b:
                    1f:44:67:01:47:c7:26:48:74:9c:32:59:af:61:25:
                    35:8c:d8:d0:0d:43:54:33:6a:2d:fb:d7:28:26:52:
                    79:8c:e0:a9:4e:20:e8:56:5d:68:8e:c8:9e:cd:57:
                    33:50:ad:34:7d:97:f9:26:bc:01:a1:01:4c:63:8b:
                    b7:96:cd:e8:29:75:2a:2c:91:50:54:23:1f:9a:09:
                    92:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:34:FA:44:43:35:4E:CB:9D:1E:E9:DF:1E:59:31:2E:C5:E0:51:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7ac65614-f40b-3045-9991-1b68e7b268b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:56:75:67:49:6d:e5:30:1c:aa:f6:85:bb:98:06:6c:5d:79:
         0c:ed:8a:85:8b:91:41:da:40:1c:48:29:70:d9:71:cd:0e:13:
         63:88:38:ce:be:77:bc:22:e3:d1:91:b9:a3:b9:22:25:54:c6:
         7b:93:3f:c9:86:99:82:33:b4:18:61:16:dd:31:d0:53:18:04:
         4d:87:2e:c5:35:41:9f:d9:58:3f:fd:56:91:8f:79:f9:5a:4c:
         cf:f7:f7:bd:15:bc:9b:08:be:28:94:0f:76:b3:b2:ec:3d:f1:
         7a:b3:c3:f5:64:3a:14:ad:a4:74:3c:5d:8a:a3:21:0b:13:55:
         4e:55:f4:e0:fc:28:80:d5:bc:5f:94:3a:09:09:4d:b4:77:2b:
         94:fd:69:52:57:71:e3:c8:9f:74:44:a5:f4:64:6f:48:21:fd:
         e6:d1:11:fe:76:96:c3:dd:b0:d0:95:9d:66:4a:28:aa:e3:11:
         77:68:93:d9:e2:a5:44:17:db:eb:df:3b:31:69:b1:a1:0b:a3:
         cb:cd:f0:f0:12:0f:49:5c:03:ae:78:16:be:4b:f2:eb:73:b5:
         15:a5:1f:bd:90:39:41:8f:23:38:1d:11:b8:4c:a4:d7:ef:6b:
         39:8a:a1:7d:e5:d7:bb:7c:9f:dd:3f:af:2b:fb:02:80:9b:97:
         8c:c7:79:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 22:04:10 2025 by rpki-client