Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/11f0927b-5083-34cf-84f0-288a063daf08.roa
File:                     11f0927b-5083-34cf-84f0-288a063daf08.roa (raw, json)
Hash identifier:          Fl0A792Kj/wDWandHbkr1PaxoZb67ZEHr3hUDkkNje8=
Subject key identifier:   63:59:DB:EC:BC:D0:A8:44:A0:1A:91:18:99:46:C1:C3:66:4F:49:4B
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584A374AE4902CBC54ADAAE9F700
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/11f0927b-5083-34cf-84f0-288a063daf08.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     11232
IP address blocks:        209.169.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:e4:90:2c:bc:54:ad:aa:e9:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=7a7405f2-3a0a-44ab-af4b-c9fd8ad96c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:d4:6d:db:f4:13:4e:15:16:93:9b:27:bc:
                    f7:1b:39:da:39:c8:9e:97:88:91:3f:22:a6:46:80:
                    1e:cb:0c:32:41:ed:d5:e9:e0:d3:36:0d:ee:08:43:
                    e4:ca:de:44:19:21:3b:a2:ec:e7:ca:c0:00:fa:2c:
                    5b:8d:2a:fe:66:e5:fe:a9:4f:20:7f:95:a2:30:68:
                    62:f3:24:9c:ce:30:13:ca:9a:62:9a:48:a6:e4:e3:
                    89:dc:a7:8b:17:14:0f:bb:e4:25:c7:5b:0c:f7:12:
                    94:b9:d2:3c:43:38:69:08:bf:10:03:e7:f9:b0:d8:
                    65:92:c7:18:dc:94:65:11:84:8a:f5:84:ef:9c:db:
                    dc:39:9d:46:b1:25:bd:44:83:c7:b4:f8:4f:7b:59:
                    01:4f:e6:fe:76:8d:0d:85:5c:66:ad:dc:f2:c2:52:
                    5d:08:00:ee:25:d0:06:fd:52:9e:35:27:8a:a5:8c:
                    e0:e1:32:03:d2:4f:7d:2f:f9:7c:c6:cc:a2:34:68:
                    03:50:05:1b:e2:dc:f9:bb:70:84:cd:95:c2:b8:09:
                    06:b5:4a:13:61:6f:77:4b:e1:db:cd:ea:90:57:ba:
                    a6:38:3e:f0:97:f9:6b:39:35:4c:dd:ea:7a:1f:f4:
                    71:b3:4b:fc:25:a3:93:af:40:b7:4c:87:2d:7b:17:
                    48:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:59:DB:EC:BC:D0:A8:44:A0:1A:91:18:99:46:C1:C3:66:4F:49:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/11f0927b-5083-34cf-84f0-288a063daf08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ec:82:88:bf:4b:a4:a9:dd:77:c1:1c:22:f3:14:68:42:de:
         70:61:04:db:4b:27:b3:7c:bf:77:20:9c:a7:1f:b9:dc:f1:81:
         3f:22:21:4e:73:6f:a5:94:ad:c4:29:ec:ca:1b:51:ab:23:b1:
         c3:2c:cf:0f:dd:e2:e2:4f:e3:f6:32:5f:8a:e2:fe:23:f1:3d:
         03:8b:c9:dd:0a:d4:13:22:ed:57:99:27:f7:e7:25:33:67:ed:
         88:51:05:c0:75:16:4c:7e:7b:50:84:b5:9f:3e:8c:35:6c:2d:
         c1:65:a5:d1:dc:66:c2:e1:52:6b:98:c8:41:9e:77:0c:11:80:
         54:ba:14:99:a4:69:9c:7e:ad:00:eb:19:35:78:13:a4:34:96:
         be:52:c7:a1:37:7a:00:91:65:70:8d:8b:49:a2:62:bc:69:70:
         79:ef:b6:a7:da:ac:78:35:41:fc:b1:2f:9d:0d:64:f3:21:8d:
         6f:1f:c3:7d:ae:e1:af:9e:b7:5f:47:cc:6f:49:67:9d:1e:6b:
         9e:3d:0a:36:55:80:c1:39:1a:f7:ce:b4:c2:b5:2c:8d:cb:12:
         52:31:ab:c1:62:d6:ea:be:eb:d0:06:0d:44:d7:95:ee:0c:e8:
         c9:22:ca:e5:17:99:b2:2b:d8:29:ca:97:0b:5d:5d:7d:94:34:
         af:eb:b2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:07:19 2025 by rpki-client