Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4/07f6cc41-1ed6-3718-a24e-2c2317175251.roa
File:                     07f6cc41-1ed6-3718-a24e-2c2317175251.roa (raw, json)
Hash identifier:          4FSV4BNL76Zn0TpGolvoZIH4QKt0uTZQEuFRflFDtYE=
Subject key identifier:   6F:22:E8:F4:22:1B:E5:21:E6:AE:1E:56:0D:C0:9A:0B:64:65:0F:C8
Certificate issuer:       /CN=e84e88d1-804b-445f-9551-b2b8634de3c4
Certificate serial:       010D0C9F4328584A1E2AABE857B7988794AC2700
Authority key identifier: 73:8E:96:57:65:98:D9:4F:87:1D:7B:3D:E1:78:86:81:8D:BD:62:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4/07f6cc41-1ed6-3718-a24e-2c2317175251.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     376
IP address blocks:        205.236.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4/e84e88d1-804b-445f-9551-b2b8634de3c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4/e84e88d1-804b-445f-9551-b2b8634de3c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:ab:e8:57:b7:98:87:94:ac:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84e88d1-804b-445f-9551-b2b8634de3c4
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=09c9f3f8-2712-49fe-a357-e299264efb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9d:2a:8c:9e:9c:cc:35:7f:dd:fd:52:e8:48:
                    b2:ac:85:44:9e:2e:01:d2:4f:4b:95:e2:99:ca:32:
                    2d:63:54:51:62:19:01:eb:4c:86:1b:44:18:84:94:
                    7f:81:83:c8:68:e2:9a:e2:65:9a:92:9d:98:0a:84:
                    38:0b:8e:bf:1c:42:a4:0e:08:19:9f:c8:d6:94:0a:
                    72:2d:05:47:0c:f5:42:25:78:87:66:57:6b:87:e9:
                    d9:52:bf:d3:06:a7:cf:e3:93:46:1e:5f:08:02:83:
                    50:ec:f4:7e:1a:6b:24:4b:5c:6a:0f:b0:a7:09:62:
                    04:14:f4:f3:f9:c3:a3:8f:89:ad:72:bd:f6:5b:23:
                    9b:fc:5f:2a:c4:ea:8c:2d:51:50:8c:ef:85:af:b0:
                    c3:e2:8c:87:65:92:5b:b4:14:3a:21:5e:1d:8c:0e:
                    39:65:88:b9:59:00:42:4a:9e:66:02:c2:06:c3:7e:
                    b7:b3:e0:4e:e6:38:aa:51:c6:89:9a:05:b1:0e:dd:
                    2a:0b:72:9a:fe:2f:b8:77:ac:0c:58:72:eb:f7:68:
                    3d:59:7e:85:77:51:40:4f:4b:0e:91:3a:6d:d9:73:
                    1a:68:66:8e:67:4b:91:9a:9e:d8:b5:78:6a:25:b9:
                    ff:c5:67:90:53:99:7c:ee:e6:f9:d8:0b:05:e7:fd:
                    43:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:22:E8:F4:22:1B:E5:21:E6:AE:1E:56:0D:C0:9A:0B:64:65:0F:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4/07f6cc41-1ed6-3718-a24e-2c2317175251.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4/e84e88d1-804b-445f-9551-b2b8634de3c4.crl

            X509v3 Authority Key Identifier:
                keyid:73:8E:96:57:65:98:D9:4F:87:1D:7B:3D:E1:78:86:81:8D:BD:62:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e84e88d1-804b-445f-9551-b2b8634de3c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:54:b0:10:a7:d0:db:d7:fb:ff:ba:ad:2a:15:55:19:b4:f0:
         af:37:2d:a6:d6:05:12:3e:5f:eb:66:69:eb:a9:16:0d:c6:3f:
         8c:4e:d9:fb:9e:5b:d2:35:5a:19:04:c7:68:02:eb:09:ec:c2:
         88:92:fa:58:c9:ae:a8:10:af:25:19:f3:e9:0f:bb:2d:4d:98:
         43:a7:37:96:18:cd:ae:c2:8d:89:db:a3:eb:63:b3:22:8a:70:
         38:e8:96:46:6c:50:df:ca:8d:bb:93:e6:5c:1f:41:30:5b:39:
         10:94:3a:00:dc:a8:39:12:85:26:67:18:8e:ec:ee:e0:d5:45:
         f7:d7:e5:ac:0a:e9:e7:ac:4d:ed:d3:a2:47:3e:c7:91:95:d2:
         47:0a:6d:2b:8e:8a:ad:6e:24:73:c5:ec:fd:e6:e5:18:88:76:
         13:72:5a:6e:a2:6f:83:dd:ce:58:57:1a:0a:31:b3:74:6e:af:
         17:46:28:7a:2a:b3:99:41:f1:0b:a6:80:ee:7e:d0:87:16:61:
         03:4f:ea:5f:9a:df:93:45:36:68:fe:2d:9d:d9:ba:66:37:ff:
         d8:95:f5:6d:d7:ad:60:11:58:f1:f9:1c:7a:06:ec:6e:ad:6f:
         80:7e:c4:10:00:3f:a9:46:ea:77:59:2d:71:1d:b9:ad:ab:92:
         a6:ac:03:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:36:51 2025 by rpki-client