Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dec07807-8faa-3b41-931a-cb77c1f3110f.roa
File:                     dec07807-8faa-3b41-931a-cb77c1f3110f.roa (raw, json)
Hash identifier:          KgR7gEU+h/DQbQsL80P2j1lLyju8DcYvtx45EgYx5pc=
Subject key identifier:   CA:21:78:65:F5:53:04:16:EB:21:74:89:13:15:FE:AE:7F:FA:5B:B3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A4F05D5C6761336CB3DDA7700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dec07807-8faa-3b41-931a-cb77c1f3110f.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     397220
IP address blocks:        199.7.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:d5:c6:76:13:36:cb:3d:da:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=e7b5b9a8-c443-4ada-8245-a2676088dba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:be:88:b9:e4:eb:21:31:b9:c9:de:de:46:55:
                    fd:ff:55:7d:1a:73:4a:c9:46:df:2c:03:f0:e0:0b:
                    39:a6:c2:d7:87:d3:3d:b1:1e:aa:e6:19:1d:4c:9d:
                    d2:ad:b1:c2:27:81:9e:50:9e:27:b2:5f:62:f8:a7:
                    b3:6f:78:a2:4c:89:89:82:eb:15:7a:1a:e4:6f:0f:
                    c4:cf:0f:7b:51:e9:08:ef:c5:18:38:b5:70:3d:30:
                    10:48:9b:d4:a1:51:b2:f4:c4:7a:bf:dd:fb:34:78:
                    ec:7a:62:09:e7:45:02:30:80:f5:b5:6f:97:e9:7a:
                    6e:a7:93:6e:d3:e9:e5:9e:8f:de:c5:16:fe:e9:ff:
                    f4:7e:5a:b6:7d:62:bb:e1:65:de:fb:cf:9b:81:e6:
                    c2:27:6d:4e:96:13:95:f2:17:03:82:92:c4:01:3d:
                    24:3b:ed:af:8b:d3:66:c4:9e:31:ec:27:6b:30:7e:
                    20:24:05:40:fb:e7:5d:c0:8d:50:9e:25:8d:43:f9:
                    55:a0:8d:ba:1c:d6:98:75:2b:8d:de:a6:03:8f:d4:
                    44:19:dc:87:69:b6:04:22:0a:96:37:3a:32:06:8d:
                    dc:51:e5:65:0e:dd:2b:68:1a:6f:e6:d2:a0:dd:7b:
                    13:c1:13:a7:0d:88:44:8a:fc:e2:a0:a2:88:54:3d:
                    35:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:21:78:65:F5:53:04:16:EB:21:74:89:13:15:FE:AE:7F:FA:5B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dec07807-8faa-3b41-931a-cb77c1f3110f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c1:f4:4e:c0:99:6d:9e:61:66:fa:58:6c:c7:3d:45:85:64:
         ab:69:02:96:46:25:6e:52:78:50:ed:d4:69:88:5b:32:02:1c:
         df:7c:13:9d:c5:01:c7:d9:d5:2a:55:e3:ce:bd:24:cd:80:b1:
         78:d5:0d:1e:70:4f:23:0c:53:5c:66:28:b2:4b:1c:8a:7d:ed:
         5f:db:2c:f8:6a:0f:b3:9d:6b:cd:8c:bf:af:98:c0:78:ce:4f:
         18:2e:be:63:a3:a8:83:92:90:0a:30:2b:24:f7:90:9a:77:e3:
         fe:2b:a2:ed:b6:02:5c:72:1c:da:22:b6:4b:3c:fb:50:d4:14:
         c5:e0:98:4a:96:23:34:a5:e7:a5:1f:b7:89:6a:47:97:5e:26:
         e8:ab:d7:b6:76:43:39:0f:89:59:e9:aa:53:9d:39:b5:1f:8e:
         e9:84:b3:b6:ac:66:7b:38:3c:c4:8f:2b:9e:32:9b:2a:69:c6:
         ca:bc:f7:95:18:bf:00:64:55:c5:26:1c:be:dd:3c:9b:24:76:
         ca:80:50:4e:8f:e2:af:1e:52:02:6f:c3:c7:39:20:9d:ea:d8:
         fb:e4:06:55:c3:26:63:46:ab:05:3c:1b:ef:01:d6:6b:ab:41:
         60:05:73:fb:83:f8:39:5b:e9:11:7d:3e:27:fb:42:f9:1f:dc:
         17:5c:92:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:40:02 2025 by rpki-client