Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/f7a9600c-1f06-3a65-a940-df685a255e63.roa
File:                     f7a9600c-1f06-3a65-a940-df685a255e63.roa (raw, json)
Hash identifier:          R0lIG+VUtqfyI2Fb5/Mj2m7cWGxWWGpsrJ1X6cngNM4=
Subject key identifier:   51:D8:51:6A:51:DA:A9:25:70:6D:B8:A2:A5:B0:FD:49:AC:D6:B9:3E
Certificate issuer:       /CN=7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92
Certificate serial:       010D0C9F43285849B6DF5A38271BDF8B8C8DF080
Authority key identifier: D9:88:ED:AC:D6:31:9A:84:0D:9A:49:23:C1:1F:E9:03:57:46:2A:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/f7a9600c-1f06-3a65-a940-df685a255e63.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     3851
IP address blocks:        207.197.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:5a:38:27:1b:df:8b:8c:8d:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=d2970780-8059-4998-8de4-2f7cb73fbccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:00:3c:3f:82:00:1f:6d:01:52:c2:a3:0c:bb:
                    6e:b2:73:8d:b7:6a:d8:a8:0b:fb:6f:81:08:7f:98:
                    8e:1d:6e:1b:c3:cb:bf:50:4f:fb:f8:9d:c5:07:01:
                    c0:a9:47:b3:25:b8:a5:5c:e3:90:42:03:d6:25:ae:
                    f4:94:b7:79:86:ac:b5:c9:29:53:65:aa:42:28:4b:
                    b5:af:56:ca:31:d4:a4:a9:bd:05:43:a3:d8:18:da:
                    1b:e2:64:6e:11:9e:fd:69:9c:bb:46:36:9f:64:fc:
                    3d:f9:52:44:ed:45:96:1d:7c:d6:fc:68:8a:c9:d4:
                    4e:ca:e5:91:c7:53:da:ee:7a:91:eb:d0:38:67:15:
                    91:03:2a:d0:79:1b:c3:b5:1d:52:7b:ac:d4:ca:34:
                    4a:f3:73:34:27:48:7a:6a:82:21:33:ca:1d:df:fe:
                    d6:f5:b7:37:a1:84:c9:8d:4f:b1:56:41:2b:f0:d4:
                    9a:9e:df:fd:40:1b:8c:85:35:a0:32:25:ed:10:a4:
                    b4:cf:11:11:95:07:ea:b6:85:6a:90:0e:75:b9:a6:
                    6b:04:4a:3f:b0:ea:bc:b6:11:8e:c2:1f:5c:22:d8:
                    74:bf:c4:dc:eb:5d:b6:37:39:13:cc:0e:de:a5:c2:
                    01:85:83:33:ac:6c:6a:c5:18:c5:b0:b2:fd:28:62:
                    b5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D8:51:6A:51:DA:A9:25:70:6D:B8:A2:A5:B0:FD:49:AC:D6:B9:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/f7a9600c-1f06-3a65-a940-df685a255e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.crl

            X509v3 Authority Key Identifier:
                keyid:D9:88:ED:AC:D6:31:9A:84:0D:9A:49:23:C1:1F:E9:03:57:46:2A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.197.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:74:2d:d7:66:1e:4f:a4:86:cd:38:dc:33:4f:0c:79:fd:90:
         bd:cf:59:50:3f:70:bf:2c:38:5f:27:57:84:f5:4c:b7:0c:c8:
         f4:2d:58:63:a5:73:98:ab:5c:c6:a0:da:08:4b:cf:13:d2:38:
         39:e0:a1:41:a1:e7:cd:7e:ca:b1:a9:c4:d7:1d:f5:d4:5d:ef:
         fb:c9:37:c9:7c:83:00:b8:f5:97:64:ed:c8:68:98:42:b2:81:
         58:b5:a0:24:32:e7:01:38:26:60:6f:e4:fb:f1:9c:97:b4:b2:
         fb:02:fa:c5:ee:24:b2:89:ef:05:3f:5f:29:9f:91:65:90:4b:
         00:1c:cd:ee:a6:0b:f5:42:a5:bc:f5:1f:f9:79:0d:a1:44:33:
         65:8a:fd:2d:62:96:26:32:98:6d:8c:1c:21:07:18:79:96:55:
         a8:67:a6:86:c3:e0:57:91:4a:8c:2e:4f:45:c1:ed:a0:77:a6:
         d8:ec:5b:97:f4:4d:ca:3f:9f:34:7b:33:39:21:9f:81:a6:92:
         e7:f9:4e:c1:30:94:22:7a:d9:ab:4b:8a:11:97:0d:3e:cf:08:
         f9:c0:79:9f:5c:e8:70:a8:96:28:89:19:68:08:af:bf:17:be:
         b7:e6:f1:26:80:69:df:4b:45:ad:20:a4:9c:a3:e2:05:62:83:
         cf:d8:08:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:14:42 2025 by rpki-client