Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/eb4ab27c-8d5b-3847-8f5b-6389f93ed72d.roa
File:                     eb4ab27c-8d5b-3847-8f5b-6389f93ed72d.roa (raw, json)
Hash identifier:          LOP1lu3wnFr25JY+mqNc+WUIVjwv/LEKdxc+irwRejA=
Subject key identifier:   37:10:B0:7F:F7:ED:82:33:48:15:5D:14:57:2D:EC:B9:26:05:B8:08
Certificate issuer:       /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial:       010D0C9F4328584AE9F67FCD66AB816A47918440
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/eb4ab27c-8d5b-3847-8f5b-6389f93ed72d.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     29802
IP address blocks:        207.2.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:7f:cd:66:ab:81:6a:47:91:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=af20300d-38d2-46c3-b783-6ad8a13ee77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5a:44:6d:97:86:a0:fc:48:c2:04:41:ce:ef:
                    8a:63:19:fd:8e:b5:00:8e:49:4c:2b:6b:9a:d3:d4:
                    df:06:9a:33:da:97:64:c9:d7:d0:8c:c0:c7:27:af:
                    4d:7c:26:94:4e:60:2d:eb:7f:08:49:fa:56:77:3f:
                    e8:64:1b:52:0d:01:10:a2:6b:02:ac:b1:6e:b3:98:
                    88:e2:51:ac:e2:b5:66:85:07:b1:22:51:b5:b5:ad:
                    b5:ad:80:df:8f:8e:c8:3f:77:26:c8:2f:a3:9c:d0:
                    ad:5d:eb:5f:27:e7:cb:64:68:f8:c0:79:fd:68:8f:
                    b9:5a:08:18:db:2d:f5:cf:c5:97:15:c7:42:83:75:
                    b6:8a:21:4f:9e:36:c8:42:26:8b:76:f7:6c:4e:06:
                    ae:ed:6f:56:fb:07:f7:74:bd:86:48:23:95:1a:f1:
                    4d:35:ca:0c:6a:47:f8:c1:d0:8b:50:42:37:f7:27:
                    9d:47:f2:b6:42:52:02:b4:20:6d:08:91:5e:06:52:
                    5c:0f:d4:ff:fd:23:71:0b:48:2f:3d:cd:17:e1:05:
                    09:ca:d7:81:21:08:0c:52:6b:2b:e2:1b:14:c3:28:
                    63:0b:82:ef:80:a8:e6:d1:37:a1:31:2c:a9:14:fc:
                    a0:c0:c9:4a:42:02:51:63:91:81:b6:ed:d0:bb:aa:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:10:B0:7F:F7:ED:82:33:48:15:5D:14:57:2D:EC:B9:26:05:B8:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/eb4ab27c-8d5b-3847-8f5b-6389f93ed72d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl

            X509v3 Authority Key Identifier:
                keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:0d:a9:10:b3:11:fe:37:a9:94:fc:cf:bf:30:ce:87:23:0e:
         12:db:7b:fa:4b:8f:6f:74:27:f7:17:97:f3:68:71:db:90:3d:
         c8:5e:19:01:9e:c2:c2:a0:a3:68:b2:b9:40:89:79:67:52:b4:
         48:b1:c6:ea:21:af:31:b7:23:fe:16:74:1e:ff:6b:f9:d7:96:
         8b:51:74:f1:0c:2f:2a:41:f0:cd:4d:9e:b8:7a:2f:c6:a1:a0:
         68:ba:55:0f:70:51:9b:9c:a4:cf:29:a8:e5:a9:0b:ee:39:5a:
         d6:b0:ac:c4:40:b1:9b:f3:ab:df:15:55:c3:9f:aa:a4:52:e5:
         75:a1:eb:66:57:58:70:4b:da:15:31:bb:06:26:7a:d2:32:46:
         0e:16:dd:c2:4a:b8:a4:1b:bd:ad:6b:7c:b8:d8:b6:82:dc:a5:
         ee:f7:95:f8:28:e6:af:2e:bf:1f:bf:b8:1e:15:52:b3:0d:6e:
         3d:85:e3:dd:5f:94:9b:40:38:f4:d4:32:5c:ed:aa:71:8c:03:
         ad:9f:29:59:9f:f1:f1:88:04:9a:7d:23:a9:f3:e8:49:e0:19:
         06:20:ca:d4:d5:f8:30:8a:9f:63:c5:4f:36:54:21:fe:2c:87:
         8e:81:58:0a:b0:32:d1:46:87:51:08:f1:5a:58:97:41:41:4e:
         65:a3:57:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:26 2025 by rpki-client