Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/d6982dc5-d4c4-3c45-a5ab-75a76f53bb04.roa
File:                     d6982dc5-d4c4-3c45-a5ab-75a76f53bb04.roa (raw, json)
Hash identifier:          oP8hqSqONYTs8QpXPQpbtrVeQxKmVLFo91NUirvFioI=
Subject key identifier:   1B:17:FD:0B:70:27:DB:93:59:21:32:2A:7D:9C:3F:A1:94:49:60:EA
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584A0D6A8F815C545C77C7F0CD40
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/d6982dc5-d4c4-3c45-a5ab-75a76f53bb04.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     376
IP address blocks:        207.162.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:8f:81:5c:54:5c:77:c7:f0:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=511bf802-acfe-4f59-aa4d-aa8d7b9cc36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9c:bc:74:d9:3a:3e:df:49:d2:ab:0a:00:6e:
                    28:05:99:24:3c:0b:9f:bc:68:8b:9f:41:94:91:3e:
                    00:8b:8c:82:64:95:b7:80:fa:ff:2d:6b:65:1e:ce:
                    1c:56:ba:a7:40:42:b2:26:30:69:c9:fd:1c:a8:3e:
                    6d:55:47:25:48:aa:20:4a:a2:0a:79:df:69:6e:be:
                    c9:99:0a:a0:d5:39:88:8b:c9:e8:73:47:9f:09:5a:
                    31:46:87:9f:52:57:4a:a0:ec:50:36:93:e2:12:b9:
                    34:50:01:2e:d9:7b:d5:0f:3c:54:ca:39:9f:f7:b2:
                    f1:40:67:9a:fc:47:c9:be:28:13:a5:a2:c0:f9:c6:
                    84:5d:51:23:4b:67:c2:4f:ef:fe:d8:01:90:e0:e5:
                    20:3e:6d:d3:e3:a2:2e:9e:3d:a0:65:48:0f:98:1e:
                    d1:cd:df:04:5f:24:17:0c:55:d1:89:3a:13:43:e1:
                    d2:ca:80:06:10:3c:ef:03:24:6a:2b:f8:89:15:9d:
                    1f:1c:c8:ba:55:74:ee:dd:b2:0f:a7:3f:39:f0:0d:
                    60:db:44:30:b8:db:b6:0a:41:d0:0f:48:a6:4b:7b:
                    63:95:1d:26:9b:9d:aa:62:66:c6:b0:2f:64:82:5b:
                    cd:17:9a:12:f6:d5:9f:ba:4a:87:d5:65:97:66:d2:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:17:FD:0B:70:27:DB:93:59:21:32:2A:7D:9C:3F:A1:94:49:60:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/d6982dc5-d4c4-3c45-a5ab-75a76f53bb04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:4a:20:35:10:ea:99:f6:4c:7a:ab:9d:ea:79:ac:05:15:3b:
         e3:3a:03:61:0b:b4:9c:7a:73:17:0b:3b:86:bc:87:a7:52:10:
         0a:c4:02:8e:c4:23:0b:7e:00:fb:4b:0f:4f:5a:c4:5b:0c:d5:
         e4:4c:ed:35:c0:69:6a:23:2a:e6:d4:ba:de:c3:93:6c:9c:0a:
         f3:cc:76:61:49:9f:95:be:f8:31:8f:f3:21:54:66:29:9b:96:
         a0:e7:6a:0f:90:39:70:0d:3f:1b:88:97:ad:d1:97:21:83:46:
         ba:07:01:05:54:ab:13:e6:f0:c8:25:04:0b:93:94:5d:03:56:
         4f:e3:1a:5a:8f:70:31:6d:67:7f:62:df:ef:71:e7:39:68:70:
         3d:c4:ef:59:9d:f1:46:15:e8:5c:31:f6:ba:b3:1e:45:38:cc:
         1c:e7:3a:1a:21:cc:2c:85:e4:79:a8:7e:6a:47:15:5d:b7:bc:
         65:0a:54:a0:c9:0d:20:af:68:0e:38:1d:9a:81:f9:d7:6d:9d:
         0f:27:23:6e:67:ce:44:53:d6:f5:85:ff:56:d0:b6:6c:47:dd:
         97:c6:53:5a:23:80:7f:a2:96:76:82:da:fc:61:57:e2:30:7d:
         35:f6:ab:06:9d:f0:c4:cf:cf:a6:b5:90:b4:33:bc:b8:ee:e1:
         bc:7c:45:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:28:23 2025 by rpki-client