Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ff08f32a-f185-3549-bd1d-46d56c37ebb1.roa
File:                     ff08f32a-f185-3549-bd1d-46d56c37ebb1.roa (raw, json)
Hash identifier:          gBKRW8Uz67sw3l0I7GY/9kIpnqj/82ZaOtCQaux+WyY=
Subject key identifier:   FD:BC:E1:CF:BD:DB:05:1A:BB:45:53:14:15:0C:C0:DA:EB:1D:94:22
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F432858499829C005560C389F15795500
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ff08f32a-f185-3549-bd1d-46d56c37ebb1.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     54004
IP address blocks:        207.210.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:c0:05:56:0c:38:9f:15:79:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=53c5957a-3116-4212-9331-46eb0b84b5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2e:b2:45:48:12:68:91:88:0d:cf:1f:0e:ac:
                    7f:2e:d7:3a:ed:83:53:0d:b3:29:80:17:15:b4:65:
                    f3:1c:a4:88:10:30:16:5f:d0:0b:d4:61:65:72:39:
                    ee:b6:7f:cd:8e:de:e5:d1:9f:70:eb:f7:f4:ba:ea:
                    a0:4f:0f:46:1f:55:43:b0:72:ad:d4:12:ae:5b:b8:
                    40:bb:d2:b2:7e:d5:a7:3c:39:f7:30:19:51:39:de:
                    46:b3:78:17:2d:20:cf:0f:ed:3c:aa:37:74:35:39:
                    9f:02:79:5b:a1:24:8d:5f:23:94:50:cc:b4:8c:a3:
                    c6:a2:5c:8c:29:97:46:8b:36:d3:0f:74:83:c6:6a:
                    d1:56:4d:63:85:cb:87:6f:b3:28:7b:d9:29:c3:8e:
                    9f:d4:63:63:12:fc:22:61:cb:6f:33:e7:2c:91:37:
                    cd:23:02:0a:06:fd:f7:86:aa:34:85:3b:aa:bf:ca:
                    c9:d1:d9:21:eb:1b:50:84:c7:51:cf:78:d2:f0:8b:
                    8f:93:72:16:fe:f3:f3:43:03:e6:2d:11:47:f0:10:
                    54:18:88:5a:0d:8a:a9:b7:3c:89:fe:45:f3:90:00:
                    a9:6f:83:9b:2f:63:34:ea:2a:03:f1:3f:1d:e2:97:
                    c0:2a:e8:47:5b:4d:5b:5d:65:86:7e:88:f7:f0:ae:
                    dd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BC:E1:CF:BD:DB:05:1A:BB:45:53:14:15:0C:C0:DA:EB:1D:94:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ff08f32a-f185-3549-bd1d-46d56c37ebb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.210.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:23:47:a6:b2:f9:4b:1d:f3:e1:02:1c:42:5f:c3:29:b5:9a:
         26:a2:b0:f3:7d:66:2b:95:07:0c:12:f8:fe:49:51:60:0d:73:
         81:ec:96:9e:37:f4:8a:91:d1:75:77:1f:22:47:22:3b:9b:9b:
         05:91:c6:f2:31:1e:44:41:c4:63:92:b1:e4:33:c1:fc:98:ef:
         31:e9:3c:d2:81:59:90:d2:c0:3f:13:58:0f:13:ab:1a:0a:af:
         f9:a4:45:0a:8a:55:83:0c:24:97:d4:14:37:83:8d:03:8f:18:
         a5:a4:2d:6a:74:73:91:a6:82:ed:62:ab:d9:7f:a7:4f:3c:d4:
         6c:d6:6a:f1:9e:80:c6:ad:7a:a6:bc:64:18:37:25:ae:01:7e:
         1d:d7:30:32:0e:4d:51:51:c9:c7:1f:0c:da:a7:8f:28:9f:8e:
         74:60:1f:f0:17:a3:f6:2b:b2:fd:ed:54:42:04:52:d6:68:9f:
         60:fd:da:a8:ea:28:68:0e:f3:83:54:7c:f1:54:a8:07:c8:34:
         f1:9b:95:65:f2:e1:54:7a:d6:3c:0d:69:c7:3d:85:a3:aa:79:
         92:6e:ca:b5:5e:54:9e:57:1e:61:65:e9:56:4c:2d:97:53:5e:
         64:79:1b:05:1b:84:48:9b:64:f2:4d:89:fe:70:b8:55:44:57:
         18:62:a2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:31:29 2025 by rpki-client