Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/ed02ea75-a5ca-3f71-be34-541ed6ad9c56.roa
File:                     ed02ea75-a5ca-3f71-be34-541ed6ad9c56.roa (raw, json)
Hash identifier:          z05wzAAz4BkzrZxeUBrylh0NyLmVvzt47yC5cckoxgo=
Subject key identifier:   9F:B3:67:6A:09:B2:7C:0F:8E:22:F2:7C:A0:1A:CF:97:D6:2F:3B:C9
Certificate issuer:       /CN=677759b4-a247-47ea-badb-bb809bc80a31
Certificate serial:       010D0C9F43285849D2CA1CD61396F03EFCB43D48
Authority key identifier: 49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/ed02ea75-a5ca-3f71-be34-541ed6ad9c56.roa
Signing time:             Mon 12 May 2025 01:00:47 +0000
ROA not before:           Mon 12 May 2025 01:00:47 +0000
ROA not after:            Sun 10 Aug 2025 01:00:47 +0000
asID:                     14955
IP address blocks:        207.45.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d2:ca:1c:d6:13:96:f0:3e:fc:b4:3d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677759b4-a247-47ea-badb-bb809bc80a31
        Validity
            Not Before: May 12 01:00:47 2025 GMT
            Not After : Aug 10 01:00:47 2025 GMT
        Subject: CN=3cc3a7ef-1c5e-4c13-ba0e-c26b0bf8b95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6e:01:1d:a0:3e:ed:2a:ef:88:97:2c:f6:e0:
                    4a:ca:e8:9b:a0:52:1e:7c:92:8d:4a:80:db:56:93:
                    b3:06:b0:da:33:94:a9:9d:0e:2a:ab:9a:d8:35:64:
                    26:e5:bc:30:df:7a:66:73:80:08:46:59:46:c3:99:
                    01:c0:51:ae:f1:4f:7c:9a:59:5b:6d:15:14:79:53:
                    17:4f:6d:66:9d:3f:ed:a6:80:e4:4f:97:d2:2b:8d:
                    e3:d0:41:76:13:27:25:c7:72:26:8b:d1:a0:3d:da:
                    e9:d2:e7:50:e8:f3:aa:b2:be:77:f7:c6:0e:bc:9d:
                    36:62:cb:57:70:c6:8d:2e:4c:62:86:28:d2:d7:52:
                    e2:5d:8f:39:3d:a7:90:05:fe:0f:77:91:71:19:22:
                    2e:57:e4:eb:17:d0:49:e4:f7:cc:68:11:f9:8d:5c:
                    96:b7:d8:57:3e:d0:f6:65:72:85:95:16:9f:fc:a6:
                    65:29:13:65:60:68:b1:48:d6:fc:eb:98:0d:b7:7e:
                    55:8e:17:8f:c3:b6:75:f0:41:f0:6b:0f:49:0f:b8:
                    85:74:80:ae:9f:ae:f4:80:db:1b:1f:95:39:c8:0b:
                    a6:b1:b9:2e:b7:88:18:e5:7a:58:b9:6c:e3:53:f5:
                    6f:d6:d0:6c:9e:53:00:d0:ad:da:33:b0:df:a7:16:
                    fc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B3:67:6A:09:B2:7C:0F:8E:22:F2:7C:A0:1A:CF:97:D6:2F:3B:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/ed02ea75-a5ca-3f71-be34-541ed6ad9c56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl

            X509v3 Authority Key Identifier:
                keyid:49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.45.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4e:c0:b8:05:e7:85:d4:36:63:2f:63:c0:25:41:63:42:83:
         6c:fd:97:5b:78:5a:48:29:1d:39:ff:a9:bf:1e:fe:c6:d7:9a:
         1a:c1:8d:80:cc:ef:de:de:73:97:34:db:1d:f6:f9:91:af:ee:
         fe:a8:ef:bc:13:46:d9:df:f3:ab:39:62:bd:dc:4b:25:7d:aa:
         29:d8:20:e5:70:ba:be:a8:57:34:08:30:f7:fa:60:50:91:9d:
         bf:7f:3a:de:a0:d2:11:4f:ca:0e:6a:f9:25:ce:ad:0d:30:1e:
         a8:e5:84:29:72:e5:65:e7:58:6e:1a:52:c5:5d:22:69:87:56:
         cd:54:46:87:bc:ef:72:65:06:fb:29:81:cd:d8:2a:75:f9:ea:
         0e:45:2b:b8:c9:c2:8e:61:af:be:20:ba:18:f3:e7:fa:10:99:
         8e:19:30:5e:6a:41:25:02:1f:8b:96:9d:f6:13:ee:74:b9:be:
         93:47:6a:4c:5f:fa:ee:64:d6:08:36:78:dd:a7:e1:87:5c:0d:
         32:9b:07:26:ac:70:5a:3e:02:df:a4:d9:b3:14:d7:d4:3d:cf:
         67:38:ca:9b:57:8f:db:d5:ab:03:8f:49:b6:27:5e:0c:c3:7e:
         fb:b5:81:64:24:56:ee:50:2b:06:af:44:2a:22:f9:05:c6:e2:
         4d:56:6c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:52:15 2025 by rpki-client