Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/710444b4-47b7-328c-9870-a8d92c70f4cf.roa
File:                     710444b4-47b7-328c-9870-a8d92c70f4cf.roa (raw, json)
Hash identifier:          hMwNvkUkMejiyTm5VPpeKvrOKH67R4L2EsSj0dvmFZ8=
Subject key identifier:   C6:48:09:1A:90:36:C9:AB:26:CB:A4:C0:B0:AB:5B:11:A5:CE:5A:17
Certificate issuer:       /CN=7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2
Certificate serial:       010D0C9F4328584A4FCD8F7BB9D696B715E71780
Authority key identifier: AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/710444b4-47b7-328c-9870-a8d92c70f4cf.roa
Signing time:             Wed 25 Jun 2025 19:43:48 +0000
ROA not before:           Wed 25 Jun 2025 19:43:48 +0000
ROA not after:            Tue 23 Sep 2025 19:43:48 +0000
asID:                     13347
IP address blocks:        167.253.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:cd:8f:7b:b9:d6:96:b7:15:e7:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2
        Validity
            Not Before: Jun 25 19:43:48 2025 GMT
            Not After : Sep 23 19:43:48 2025 GMT
        Subject: CN=36f15204-c829-48ff-b32c-9860071732dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f4:6e:08:a1:80:cf:6a:69:70:89:53:60:1a:
                    e5:47:fb:e1:3e:9b:f2:f9:d2:96:58:83:39:5f:9c:
                    10:d1:48:a4:81:50:e5:fb:e6:eb:de:96:dc:f7:85:
                    d0:0c:2c:75:0d:67:50:80:0e:1f:31:16:de:fb:9a:
                    62:be:39:0f:6a:8a:c6:97:78:bd:2d:5b:2a:57:33:
                    4c:21:ad:37:0d:16:d0:bf:ed:e4:1a:80:0f:15:bb:
                    86:f4:99:85:7a:17:73:eb:92:ea:c0:5c:19:9b:85:
                    ab:8f:c2:0c:12:9e:fb:4b:9d:99:9f:e3:bf:dd:c9:
                    4a:ad:77:6c:61:35:b1:8b:74:57:f2:86:57:86:d6:
                    61:23:7a:a5:5b:19:0d:42:ba:25:e2:a4:56:8c:64:
                    01:ba:52:93:00:2a:04:6d:6c:e1:fc:ff:f6:a7:94:
                    c2:54:51:a9:31:32:6a:7e:00:08:fd:8f:c4:f6:e0:
                    d7:af:20:cc:84:50:9b:e1:7b:a7:66:8d:94:d8:93:
                    bb:90:b5:c2:e3:b1:d9:10:b0:18:b1:14:a4:c2:70:
                    f6:fc:b9:69:18:61:78:20:86:6d:d3:a0:ec:9b:1a:
                    53:8a:81:cd:4d:31:63:3b:97:1b:83:b0:f0:2a:6c:
                    d4:fa:18:ca:d2:3f:0d:19:95:11:1b:8c:a8:ad:19:
                    69:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:48:09:1A:90:36:C9:AB:26:CB:A4:C0:B0:AB:5B:11:A5:CE:5A:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/710444b4-47b7-328c-9870-a8d92c70f4cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.crl

            X509v3 Authority Key Identifier:
                keyid:AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f7:3b:d0:9c:c0:e9:e8:76:6f:83:6d:e0:09:dc:e2:c3:f9:
         c1:ff:c9:2f:3e:f8:01:f3:f1:f5:67:71:3f:56:04:d5:56:f4:
         3c:d2:ba:f2:da:18:57:a1:cb:f2:f9:b1:1e:42:31:05:59:89:
         d3:e6:c0:e7:1d:56:e5:2e:35:17:41:6d:32:84:6f:d7:10:9d:
         ac:cc:a5:c5:ac:1f:92:4f:1c:44:0b:2a:04:47:50:81:17:e1:
         6a:09:3e:d9:29:c1:9b:b0:f5:39:64:fb:50:74:e8:98:a0:37:
         46:c6:24:ec:95:e1:93:7a:66:77:25:a0:d2:97:17:89:0f:53:
         a2:b1:ee:d4:d9:e9:89:33:6a:1b:e0:94:ec:5d:15:ef:63:29:
         63:6f:7e:b3:1e:a2:ef:10:95:0c:62:cc:96:7f:d2:7a:fe:a7:
         99:f7:1c:7a:6d:66:ef:1c:8e:d1:7d:f8:93:c6:d1:a3:8e:a6:
         0c:0d:54:42:bc:8b:b9:4f:a2:4b:f9:09:be:50:58:84:15:76:
         09:f7:bd:3c:f8:aa:68:23:5f:e5:7d:b9:12:06:22:ab:d5:3f:
         fc:4c:5b:54:07:ff:c0:0a:4c:6f:bc:c0:4f:12:ad:1f:92:9c:
         18:70:72:95:97:52:3e:5c:4f:d6:21:8c:0f:fb:fb:b6:53:ab:
         31:e0:ac:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:25:34 2025 by rpki-client