Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/fa274737-772a-321f-98b8-948a660441cf.roa
File:                     fa274737-772a-321f-98b8-948a660441cf.roa (raw, json)
Hash identifier:          3KM3POkwR2k4Ccj1PJzZXj8VYpUMpyA/od5UquET67w=
Subject key identifier:   DB:28:F3:46:1D:87:7C:22:8C:6D:F2:6E:84:5F:0A:B6:0B:9F:82:D3
Certificate issuer:       /CN=c15b8440-9734-4ec3-ad87-b3e0c47586dc
Certificate serial:       010D0C9F4328584A41104F4FBF2E733B2C5EE980
Authority key identifier: FF:17:0B:AE:47:7C:44:66:95:8F:A1:ED:33:77:5D:AD:D2:67:8B:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/fa274737-772a-321f-98b8-948a660441cf.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     62633
IP address blocks:        207.231.110.0/24 maxlen: 24
                          207.231.111.0/24 maxlen: 24
                          2606:cc0:200::/40 maxlen: 40
                          2606:cc0:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/c15b8440-9734-4ec3-ad87-b3e0c47586dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/c15b8440-9734-4ec3-ad87-b3e0c47586dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:4f:4f:bf:2e:73:3b:2c:5e:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15b8440-9734-4ec3-ad87-b3e0c47586dc
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=1be01a95-837e-4a79-8936-87d82e2718bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a4:9a:5a:4c:9c:e7:ce:90:a3:cb:ba:99:c8:
                    dd:30:29:f3:d7:62:41:55:4f:b1:ff:e5:49:68:9d:
                    09:f9:c9:5c:58:e0:f4:57:fd:e4:2b:40:fa:fd:5d:
                    ad:86:4f:67:59:e8:cd:64:ce:1f:dd:83:da:26:39:
                    a4:4f:f5:e7:bb:76:71:98:92:a1:ed:db:b4:83:4b:
                    45:2b:b4:aa:18:ce:df:78:20:9c:90:84:89:12:8d:
                    da:16:60:2e:e0:84:89:20:23:6b:ff:93:2f:d1:45:
                    c0:14:c8:77:98:12:df:f5:d5:30:1e:8c:90:9b:cb:
                    97:b1:6e:5c:13:75:2e:9a:e8:0b:ad:7a:f3:5a:79:
                    41:38:63:96:ee:d7:92:1b:aa:e8:3d:28:be:80:17:
                    e8:90:6a:f1:f7:ec:7c:81:ab:52:1a:5c:19:90:72:
                    4a:4a:a5:7c:e2:b0:d3:9f:e5:12:11:89:bc:69:5b:
                    1d:f3:82:3c:68:3a:28:61:2d:0a:a2:b5:49:2b:fa:
                    32:a2:69:99:25:5d:16:29:8f:a1:0b:67:35:93:43:
                    01:29:62:85:9c:1c:a2:8a:d5:44:95:68:1b:e2:b3:
                    c8:2b:55:13:d8:5f:5a:87:7d:18:ae:47:0c:57:5f:
                    a9:3a:37:b5:cc:7d:94:70:0e:aa:d5:21:b3:a6:4c:
                    ac:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:28:F3:46:1D:87:7C:22:8C:6D:F2:6E:84:5F:0A:B6:0B:9F:82:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/fa274737-772a-321f-98b8-948a660441cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/c15b8440-9734-4ec3-ad87-b3e0c47586dc.crl

            X509v3 Authority Key Identifier:
                keyid:FF:17:0B:AE:47:7C:44:66:95:8F:A1:ED:33:77:5D:AD:D2:67:8B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.231.110.0/23
                IPv6:
                  2606:cc0:200::/40
                  2606:cc0:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:5b:0f:54:b0:55:4d:4b:da:95:01:41:78:de:04:31:70:a2:
         2e:10:5a:df:05:e4:cf:71:cc:43:50:83:79:f7:17:7d:79:c6:
         d0:fb:22:39:84:ff:9a:db:05:b1:b0:ff:80:de:1a:73:ec:73:
         f2:af:54:45:e9:d1:c7:7f:15:cc:a9:6a:e1:5f:26:b4:a7:62:
         2b:b5:f6:44:25:bd:3c:34:81:e0:e6:f9:25:66:28:f0:df:63:
         42:80:0f:6e:6c:ec:14:22:35:c7:0e:2e:ff:0a:d4:e7:35:ff:
         e9:94:1c:3c:f0:57:68:65:dc:28:63:f7:c0:4e:ec:1b:ce:7b:
         d3:9f:67:be:6d:f5:fa:7b:e8:e3:5f:41:20:c0:f3:6e:c9:81:
         cf:2f:64:9d:12:dc:e1:09:09:36:4c:62:e9:bf:0e:76:02:15:
         05:10:dc:93:bb:10:92:b1:31:32:45:08:05:47:2e:ae:03:01:
         22:9e:61:00:19:cf:3b:a9:a1:85:a2:84:52:e6:c2:67:09:34:
         25:7f:b0:88:ad:41:7e:46:a2:40:bc:fe:7b:86:8c:e9:28:f0:
         13:ee:2b:9e:c3:33:70:74:a6:67:89:96:23:ad:2f:d9:0a:22:
         6c:06:a3:68:1f:3d:81:0e:1d:d4:3b:47:0f:9e:f0:a2:d6:bc:
         ab:79:b6:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 4 21:52:29 2025 by rpki-client