Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/79d8abae-3316-3d89-a2d0-f12238f8acbe.roa
File:                     79d8abae-3316-3d89-a2d0-f12238f8acbe.roa (raw, json)
Hash identifier:          tMzPPrliCcUOURZ6DdlFfgjU9w/v0ivKBNKDsq3DSEg=
Subject key identifier:   1F:F5:50:E5:E9:23:3B:49:68:C8:A7:6F:FB:94:C3:C9:89:B3:F7:1D
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F4328584A2ABADB9F2F67F45788111780
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/79d8abae-3316-3d89-a2d0-f12238f8acbe.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     25934
IP address blocks:        207.42.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:db:9f:2f:67:f4:57:88:11:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=635cc731-a527-4610-888b-b370231e970d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4e:9f:31:57:d0:78:2a:4c:a1:e4:d0:a0:fd:
                    bb:ae:ea:68:ac:2b:34:66:88:2e:0b:7c:2b:10:5b:
                    84:f4:eb:ea:d4:95:23:43:c0:db:0c:2b:c4:6f:39:
                    6a:d5:2a:12:23:58:45:e2:96:91:9c:c2:9d:28:18:
                    95:5e:38:7c:a4:5f:75:31:ec:b7:00:78:20:97:cf:
                    73:cb:cb:77:68:6b:d8:e2:d5:57:67:4f:74:4f:6f:
                    1c:45:0d:ed:b1:da:b9:9e:6c:c6:9a:8a:87:a6:db:
                    d1:90:12:af:fa:54:69:05:84:f6:7f:c8:db:27:09:
                    91:62:23:e8:f3:e4:9f:76:4c:69:08:3a:7c:d0:b9:
                    b9:44:66:a9:51:19:4a:5f:a7:c8:2d:26:ee:1d:c5:
                    60:95:30:a7:98:64:44:cb:39:33:6b:b9:21:95:d8:
                    e0:aa:a9:94:6a:00:70:02:70:d7:32:ae:08:84:b6:
                    3b:9c:d1:33:46:17:16:11:cf:98:7a:0c:36:5e:e4:
                    22:2f:1c:29:50:34:c4:f5:1f:9e:87:3f:a2:11:dd:
                    29:43:d1:29:1a:ab:83:fc:08:ed:6a:2d:16:59:82:
                    27:7d:98:ad:c6:d7:cd:ab:82:8a:69:67:7c:02:b5:
                    ac:78:ef:02:40:c4:b0:cc:c6:06:b5:4f:d4:05:7f:
                    b8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F5:50:E5:E9:23:3B:49:68:C8:A7:6F:FB:94:C3:C9:89:B3:F7:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/79d8abae-3316-3d89-a2d0-f12238f8acbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.42.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:03:05:1a:da:76:18:b4:de:81:41:d3:75:c5:81:5c:89:db:
         3b:a8:4c:06:d2:cf:a5:1f:9e:83:fb:fc:fd:ef:b2:ad:05:c5:
         9e:68:00:ef:c4:6f:04:60:e2:49:5c:7d:52:fe:24:53:56:49:
         ba:bd:9b:7f:21:bf:da:8a:fc:3d:09:6b:14:e9:4f:18:c9:74:
         99:fc:06:92:e0:44:f5:b7:d2:f3:f0:e8:2f:a4:c0:63:ff:28:
         17:b4:46:87:dc:5a:c2:0e:a6:80:d7:69:f6:13:de:66:37:58:
         5b:3f:40:58:3e:1e:9e:28:21:22:29:e6:f0:19:f2:f7:1d:b9:
         a3:e3:71:9e:c1:8a:71:64:0f:8d:d1:9f:fb:ca:91:ca:ce:ce:
         99:6d:8b:7c:34:f5:d2:2c:3c:0a:18:81:f7:a3:ff:ec:0d:ee:
         ca:ee:45:6d:46:64:28:bf:4f:9a:b4:65:de:93:d2:2e:8a:cd:
         03:f1:00:e8:6d:a9:83:17:ac:74:52:6d:02:d6:93:f2:63:56:
         04:95:26:d7:62:1a:da:82:1a:d7:a4:a4:66:0a:88:94:b8:65:
         09:ed:38:67:d9:6b:dc:82:69:67:d3:5e:d4:16:a2:b4:e9:b2:
         9a:4e:37:a8:55:6a:08:41:e3:0c:38:de:ec:01:cb:b1:22:73:
         7a:0e:cb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:35:35 2025 by rpki-client