Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa
File:                     f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa (raw, json)
Hash identifier:          RpbdCIgSLbaTRSTXN8QtU0/eed7NBIf3goAM/H6Ezj8=
Subject key identifier:   6D:A2:41:32:8E:54:F1:98:2D:53:C4:15:E7:C7:3A:0C:43:F7:1C:A0
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A4F05D6558CC74A48AA9B4D00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     397229
IP address blocks:        199.7.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:d6:55:8c:c7:4a:48:aa:9b:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=80a6ea66-7fa6-4dba-b98c-612fc5b4bd49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:aa:9d:ae:fd:cc:4e:7e:5c:e1:10:38:ef:0e:
                    91:e2:ae:97:e8:0f:3f:cf:a9:0d:56:97:72:ea:9d:
                    69:02:45:a7:38:c1:e9:81:79:cb:c9:c8:fa:93:da:
                    bc:19:38:2b:53:d7:1b:79:6f:32:22:23:1d:cf:5f:
                    d2:b2:34:93:7e:2c:e1:b8:3a:66:ea:69:04:44:ff:
                    33:da:9b:f4:f1:ca:9d:7a:b0:be:48:d1:87:38:66:
                    38:cd:a1:7d:56:3e:6b:96:14:6b:f2:fb:d9:73:ff:
                    bd:18:54:2d:69:0d:4f:44:35:ec:24:31:32:73:d8:
                    38:02:99:af:37:7b:b1:2c:f1:86:92:f2:37:c6:8f:
                    72:74:96:14:8f:fe:d0:5a:4f:f0:3e:d6:a5:6b:47:
                    43:35:47:25:71:00:96:cf:26:d6:35:82:14:7c:d0:
                    8c:1c:65:ec:f5:f2:fd:7f:c7:11:32:89:0f:64:c8:
                    cd:ab:7b:1a:e8:32:39:93:c6:cc:0f:ab:f4:05:cc:
                    b3:f8:14:8b:d0:01:b3:f2:e8:9a:c8:c0:08:5d:45:
                    07:dc:ee:6a:c5:2f:1f:eb:83:a6:94:b2:c5:8b:bb:
                    34:11:66:dd:5e:d5:a0:68:82:62:07:c5:85:b1:2e:
                    40:8b:03:0b:62:0e:53:f5:33:ef:53:da:85:f7:6d:
                    98:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A2:41:32:8E:54:F1:98:2D:53:C4:15:E7:C7:3A:0C:43:F7:1C:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c0:44:09:c4:52:22:31:88:fd:72:b4:36:c5:32:04:ef:1c:
         fa:8b:bb:13:a7:dd:be:75:72:31:f5:58:ff:c5:2f:b6:be:7e:
         ff:5d:96:57:99:6c:8d:23:02:c3:62:c2:9b:dd:eb:b3:14:34:
         05:b1:7c:46:08:fc:2c:27:41:56:f1:f9:9b:dc:a3:4f:af:de:
         93:db:ec:79:da:bd:ca:e2:f1:62:89:eb:0d:74:e3:d0:f0:58:
         b5:bf:64:d6:34:32:1a:52:76:fd:99:36:57:15:cc:0b:a8:da:
         ac:e7:17:ac:02:74:1d:ee:6b:ce:0f:f9:07:b1:2a:30:6d:87:
         84:38:47:b4:17:93:dc:3b:52:cc:07:a5:12:4d:00:66:49:9d:
         85:ae:0c:f4:56:27:f7:93:22:55:0f:de:50:22:3f:a7:68:be:
         44:da:40:ed:a8:c0:f4:0a:9f:54:2a:9c:92:93:92:fb:79:18:
         d5:86:e2:8a:1c:63:52:ab:8a:9f:a0:97:ae:2d:92:61:ba:11:
         7f:20:e5:4c:ce:bf:a3:e9:62:44:01:e5:b3:67:5f:cd:d7:9d:
         0b:66:4c:3e:74:57:36:21:74:bf:94:2f:09:ec:03:12:3c:66:
         b5:91:ae:e5:bd:63:0b:15:0a:0e:d7:aa:e4:24:7e:c4:82:b7:
         cd:55:72:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:54:43 2025 by rpki-client