Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f5bbe177-db20-3981-a339-c4f34d572e28.roa
File:                     f5bbe177-db20-3981-a339-c4f34d572e28.roa (raw, json)
Hash identifier:          aK2FljSIsymiYSHCGiN7jrYURjix2GAMyj/RSYEUQ3I=
Subject key identifier:   BA:4D:BD:71:38:7B:A2:4E:BF:8D:1F:B7:AB:5A:4F:38:97:3B:ED:50
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584A374AC80E5FF313C303C59520
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f5bbe177-db20-3981-a339-c4f34d572e28.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     22781
IP address blocks:        207.204.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:c8:0e:5f:f3:13:c3:03:c5:95:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=d9aa8834-7780-439c-85e1-b460dbcb7965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:13:ac:ce:d2:ab:29:50:49:e3:91:2c:db:80:
                    4a:f1:1b:cd:85:98:0a:96:bb:58:26:21:79:54:15:
                    fa:88:6c:b9:34:41:ee:e3:18:52:63:e5:9e:56:1d:
                    af:84:9a:79:5b:e9:86:5c:5c:38:09:d6:fc:63:2c:
                    6f:f1:cb:ea:5f:e8:30:cb:ac:f1:40:f8:19:6e:fe:
                    a4:0d:98:98:bb:54:8c:46:4e:a1:d5:7d:0b:fb:88:
                    ae:18:5d:08:b5:f4:cc:18:82:28:13:29:1b:a0:07:
                    0f:bc:84:c4:a9:83:5e:b4:ce:01:ee:5f:ee:45:b0:
                    e0:e8:55:33:90:b4:5e:5e:e9:a3:0b:69:3a:17:64:
                    e9:52:34:93:ec:50:c4:dc:06:04:71:9a:77:e8:ee:
                    e6:d0:ee:08:f1:65:cf:3b:d7:69:3c:7f:ba:fd:41:
                    f7:6c:49:47:d8:81:b1:ce:09:5f:bb:37:f3:20:a8:
                    76:78:27:30:29:d7:d5:4a:c8:0d:1a:7f:b8:00:08:
                    38:26:d2:dc:42:be:12:8a:1d:4a:c6:8e:32:6f:d2:
                    51:17:a6:a3:4f:9a:b5:3a:f1:2a:18:7e:37:75:e2:
                    af:70:21:e7:14:fa:6a:68:57:09:75:da:99:60:f1:
                    cb:b7:ef:1d:4e:3a:7d:01:51:4d:cf:97:28:09:a5:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4D:BD:71:38:7B:A2:4E:BF:8D:1F:B7:AB:5A:4F:38:97:3B:ED:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f5bbe177-db20-3981-a339-c4f34d572e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.204.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:8e:01:7e:8c:bf:4b:b4:45:c1:b8:1b:34:39:ea:94:84:c4:
         54:c6:d9:7c:d2:6d:90:e2:ce:cd:4d:d7:77:fe:35:3a:8b:a0:
         f7:8e:b5:10:aa:5f:12:a6:a8:c5:b0:b8:02:73:14:52:e9:f2:
         31:e4:32:e3:43:b0:ca:cb:bc:9b:85:d5:4d:90:3c:24:dc:e3:
         82:48:f9:21:91:a2:2a:16:ec:a5:05:cf:87:14:ae:18:39:61:
         1b:28:e8:4a:c8:3a:4f:92:6c:c6:f9:0a:9c:8a:a0:6b:f8:d0:
         94:eb:b0:25:0f:96:5a:ed:dc:ef:58:37:f0:b7:3e:4c:7e:c0:
         16:aa:21:a9:c1:ee:7f:06:cd:87:a4:5d:b7:77:5d:29:e2:f1:
         c0:69:a0:77:95:b3:06:13:d2:17:96:20:d4:56:28:e9:2d:01:
         77:ba:47:e5:8f:6f:82:94:74:34:55:f2:14:47:aa:a6:da:db:
         1f:fb:16:6a:ce:a3:a8:88:cd:fe:86:52:12:42:a9:3f:ed:33:
         87:6c:ea:c8:66:d6:76:13:07:70:34:d3:c0:69:3d:57:7e:74:
         3b:7a:32:e9:34:c5:b5:7b:1c:c0:7a:1a:1d:24:dd:6e:13:cb:
         8f:db:9b:12:79:bf:14:67:c0:a2:08:03:4a:29:35:3f:c0:80:
         96:1e:b5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:32:17 2025 by rpki-client