Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/4f6946ef-3fa3-3171-a005-7f1a91efff46.roa
File:                     4f6946ef-3fa3-3171-a005-7f1a91efff46.roa (raw, json)
Hash identifier:          cE7wLMQIsn8UdXOCLI4znoonko+xND3MZTP2umjQWpc=
Subject key identifier:   DA:DD:03:AF:FA:49:8A:97:91:83:DE:CD:A1:63:83:AC:6C:97:1F:B0
Certificate issuer:       /CN=69182550-6727-45f4-8b5c-c13c70b39cf9
Certificate serial:       010D0C9F4328584A5335A565B1D17779668C8D00
Authority key identifier: 7E:A7:A0:1F:72:2F:B7:AF:97:66:CB:DA:6A:FB:48:58:EE:3C:FA:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/4f6946ef-3fa3-3171-a005-7f1a91efff46.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        207.207.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/69182550-6727-45f4-8b5c-c13c70b39cf9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/69182550-6727-45f4-8b5c-c13c70b39cf9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:a5:65:b1:d1:77:79:66:8c:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69182550-6727-45f4-8b5c-c13c70b39cf9
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=0d654fb6-0ce8-4a88-ba3f-3c2941003e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:17:8c:b8:93:7c:34:e1:68:49:0a:d5:18:
                    cc:8c:38:ff:86:8e:68:d6:ab:16:df:a9:56:05:47:
                    e7:e3:e8:8f:e4:f2:37:f4:e5:41:67:06:41:e7:e5:
                    c9:65:dc:01:78:85:3c:53:55:ca:3f:64:7e:2e:22:
                    cd:24:67:f7:b4:93:a1:1b:d8:7d:00:d9:ef:dd:03:
                    48:f8:64:a1:24:29:80:e9:da:ed:59:8c:22:12:1b:
                    e7:51:42:d9:86:af:ef:3e:24:fb:64:ce:d4:f9:36:
                    bb:97:a1:cb:18:d4:bf:1d:05:10:78:f6:a0:0e:5c:
                    3a:14:c1:52:c1:9e:cc:d5:6c:31:fa:33:f4:12:6b:
                    26:d6:f0:6a:0d:25:80:4a:99:b0:fd:6f:94:5f:1f:
                    2d:3d:49:90:e8:92:91:54:12:3b:a3:50:1c:a7:96:
                    ed:78:dd:a0:40:91:b2:63:7e:70:9f:80:af:de:7b:
                    e6:24:05:b9:6b:7a:52:14:93:14:10:bf:03:62:97:
                    d4:04:2b:f9:eb:bc:53:1c:5a:c2:08:81:12:da:9a:
                    27:06:48:d9:0c:57:b9:d0:cf:49:b4:81:b4:68:8a:
                    58:f6:e4:b7:73:21:a9:35:eb:fd:f0:81:e3:ac:ec:
                    a1:59:da:b1:3e:78:15:e1:2b:bf:1c:1b:a6:b2:a8:
                    84:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DD:03:AF:FA:49:8A:97:91:83:DE:CD:A1:63:83:AC:6C:97:1F:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/4f6946ef-3fa3-3171-a005-7f1a91efff46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/69182550-6727-45f4-8b5c-c13c70b39cf9.crl

            X509v3 Authority Key Identifier:
                keyid:7E:A7:A0:1F:72:2F:B7:AF:97:66:CB:DA:6A:FB:48:58:EE:3C:FA:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.207.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:28:66:39:17:af:78:31:c0:12:05:90:47:d3:97:bd:df:66:
         2e:d8:29:d1:16:2a:55:22:ea:1e:79:b6:b0:de:e0:af:d6:2a:
         5e:e1:59:ab:67:6e:a1:93:02:36:12:ef:2e:14:0f:7b:e1:55:
         38:77:bd:95:66:d8:7f:33:47:ea:51:91:29:30:00:a1:ce:d7:
         6d:46:be:fd:a7:14:93:cf:5a:24:e5:47:f8:69:20:38:a5:f0:
         cc:a1:ae:07:23:7c:1f:79:b5:2c:34:52:ba:a8:f6:a3:e2:7f:
         c1:09:26:9d:35:eb:22:79:a7:bc:b8:53:27:ad:35:3c:86:6d:
         54:6f:ba:d2:c3:6b:41:d8:e4:47:24:6d:b0:d6:7e:07:8b:3f:
         eb:9d:bb:08:24:f9:00:5c:dc:90:89:b5:4f:e2:b2:9c:99:d6:
         59:fb:b6:23:6c:a7:ac:f4:06:fd:6c:7a:89:82:c2:1e:67:cd:
         69:1f:f1:f7:5e:f5:56:73:ba:62:84:d4:7a:a5:a5:6f:d2:65:
         35:89:c2:c3:3c:1f:69:dd:bd:8e:06:c4:5f:dc:e6:78:a5:eb:
         35:83:a4:d2:e8:d8:3c:f6:37:b7:b8:1a:3d:b1:d8:18:9f:40:
         92:30:45:5b:97:5c:37:f0:40:7c:06:c6:41:e0:d1:76:33:07:
         d3:85:ce:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:22:49 2025 by rpki-client