Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/6cb8200e-007d-3896-8882-dbf73400a647.roa
File:                     6cb8200e-007d-3896-8882-dbf73400a647.roa (raw, json)
Hash identifier:          s5984JFZ8fI5e/XZiUOgtldasI0H3Eb6A25dcoWEXkk=
Subject key identifier:   A4:10:B1:2D:D5:89:62:75:AB:9B:6D:9C:BA:A5:F4:CD:8B:00:B9:B8
Certificate issuer:       /CN=307848a1-01e5-4124-ac5f-8d98a3abaa0d
Certificate serial:       010D0C9F43285849F17FB7F176CD652960B22EEA
Authority key identifier: 56:61:05:E5:78:59:E0:0E:D5:6A:AE:0A:9C:D5:93:9D:BA:35:C8:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/6cb8200e-007d-3896-8882-dbf73400a647.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        167.94.127.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b7:f1:76:cd:65:29:60:b2:2e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307848a1-01e5-4124-ac5f-8d98a3abaa0d
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=707aaeb2-b86f-411f-98c8-57b43e72c149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:05:94:73:a2:b5:50:e0:82:a2:d0:c8:5d:f6:
                    84:71:74:04:00:78:91:c6:06:82:5d:68:2b:e4:2f:
                    01:5f:ce:15:d8:2e:63:95:ad:b5:b0:8f:cc:fb:80:
                    89:e7:cf:d9:ea:c0:51:5e:ae:48:52:54:f7:b8:68:
                    70:50:28:52:27:a8:7b:e6:85:b9:6b:ba:29:3f:2b:
                    eb:f5:41:87:8c:73:0a:de:29:f2:dd:5a:38:93:6b:
                    33:0f:6a:bd:8d:12:7c:8f:f5:f4:c4:b0:a6:99:b8:
                    57:3f:c2:b5:21:84:4b:31:38:03:70:ed:73:b9:99:
                    d5:56:23:4f:46:a7:2a:3c:59:82:6b:30:09:33:9f:
                    64:5d:12:13:99:6b:1f:5d:65:33:4d:89:a4:c7:4b:
                    26:b8:e2:4c:10:69:8c:08:55:98:70:f8:6e:f9:81:
                    51:95:49:f5:ba:07:f5:13:bd:5e:66:48:ff:85:21:
                    1d:f9:96:8d:44:78:f5:6c:75:d1:b7:68:5b:dc:be:
                    44:60:ce:86:c8:66:fe:de:f8:54:03:73:d9:44:79:
                    16:d7:ad:1b:aa:08:1f:99:3c:62:62:21:4a:ac:c6:
                    1b:0e:02:ed:3d:bd:03:dc:cc:de:d1:14:ae:f4:ae:
                    7d:d3:91:d4:4c:8b:46:f4:22:3e:57:67:4a:85:e4:
                    c6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:10:B1:2D:D5:89:62:75:AB:9B:6D:9C:BA:A5:F4:CD:8B:00:B9:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/6cb8200e-007d-3896-8882-dbf73400a647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.crl

            X509v3 Authority Key Identifier:
                keyid:56:61:05:E5:78:59:E0:0E:D5:6A:AE:0A:9C:D5:93:9D:BA:35:C8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:6f:ca:93:a8:6b:37:f4:fd:e7:a9:08:03:2a:9c:3c:d7:78:
         cd:9a:31:95:e3:7b:6f:65:f2:36:40:82:08:03:96:d4:b9:82:
         92:8a:74:e1:53:d8:bb:01:77:67:57:3e:6a:06:12:5b:4f:21:
         4a:84:c6:45:64:9d:ef:4c:f2:76:0d:d2:9f:f5:ce:4c:0f:bc:
         63:42:ca:09:d5:7d:ed:4d:cf:92:91:b3:45:d7:24:6f:c2:af:
         0e:61:d6:f3:2e:16:a4:d2:b8:ce:8a:fb:41:a4:d2:27:04:d7:
         90:4c:c2:84:4b:70:90:24:a5:12:55:84:2b:7d:3f:eb:79:70:
         c6:4f:b5:39:76:4f:79:53:5a:57:e8:5e:8e:f5:87:20:f0:a0:
         68:a6:22:dc:9b:92:a9:5b:1e:85:a4:48:7a:4d:bd:55:5b:d3:
         bf:cf:4e:d8:af:5c:c6:2e:8a:8c:92:79:7c:ae:19:72:32:55:
         8e:59:f5:cf:2a:7e:f0:42:45:bb:c7:65:67:25:2f:b4:1c:aa:
         cc:15:25:56:74:63:c9:da:89:3a:7a:81:46:a5:fa:58:e2:21:
         e5:bb:c7:2c:16:aa:1d:ad:71:1d:11:70:3c:08:ca:62:3b:10:
         7c:b9:f6:5f:ee:58:fb:fb:da:73:d4:55:dd:12:ae:d0:32:ad:
         e6:3a:15:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:31:25 2025 by rpki-client