Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/d7911a6c-9ff1-33d8-a582-07d973c8cef4.roa
File:                     d7911a6c-9ff1-33d8-a582-07d973c8cef4.roa (raw, json)
Hash identifier:          EqZDWUjLn3qLubndF73W03rFFXG+y7lXITb8CkwDVlQ=
Subject key identifier:   5C:FB:9B:68:25:30:26:10:CD:F9:A6:A7:65:F2:B2:21:DA:01:D6:1E
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFCB5A8F97DBAE03E63A80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/d7911a6c-9ff1-33d8-a582-07d973c8cef4.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        207.245.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:cb:5a:8f:97:db:ae:03:e6:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=598bc808-ccc8-426d-b62b-d2b076dbc116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:05:7d:c3:61:99:2f:3f:2e:74:07:d3:ee:8e:
                    20:f0:d1:a1:8e:6a:4a:13:43:a8:57:90:0a:91:35:
                    59:90:43:21:8c:21:a9:98:47:49:0b:dd:5b:10:80:
                    83:f2:90:c2:b2:e7:65:a8:80:83:5c:3b:47:49:f4:
                    a5:1d:77:1f:18:e6:31:5a:d4:d8:e6:8a:ed:a5:09:
                    5d:05:25:34:3f:89:60:eb:2e:2a:cb:01:79:2c:a5:
                    e7:cf:e0:ac:19:02:0d:28:fb:65:be:75:ca:ab:58:
                    c6:8d:49:99:eb:c3:01:9e:27:29:74:0a:94:f5:f3:
                    40:48:16:85:1d:79:9e:1a:01:00:84:0e:ab:94:ab:
                    96:4f:25:76:60:db:2c:9c:fe:aa:82:84:f5:2a:4c:
                    ba:4d:cd:fb:f6:70:90:8b:ee:98:52:93:c7:d6:f3:
                    ab:46:bb:ee:a4:5e:af:66:f8:ec:c7:bf:19:e6:ad:
                    d0:be:61:d4:b5:d2:4b:bd:cf:f6:88:a3:2d:15:ea:
                    2b:59:ed:04:87:0f:eb:3c:5d:f6:f7:af:89:46:a4:
                    d3:23:4d:75:22:8f:ac:46:07:df:9c:f5:33:29:8c:
                    00:99:32:7c:ba:86:36:d4:ea:f7:9a:db:6d:be:93:
                    44:f3:03:3e:fe:fc:1a:86:f7:43:11:dc:d9:0d:c6:
                    d5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FB:9B:68:25:30:26:10:CD:F9:A6:A7:65:F2:B2:21:DA:01:D6:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/d7911a6c-9ff1-33d8-a582-07d973c8cef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.245.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:2f:a2:dc:bd:51:50:6f:32:ed:ac:d4:c9:2a:d9:3b:08:e1:
         5c:1d:8b:9c:d4:1a:e7:6b:23:e6:0c:15:e1:6f:05:da:b7:0c:
         a6:c4:6d:6c:e1:b1:54:d8:03:a4:99:50:9d:e9:79:23:9c:6b:
         80:b4:70:a3:9d:8e:af:31:ef:1b:3f:75:7f:fc:ba:ed:fb:cc:
         02:64:49:b5:e7:34:a9:e2:2d:91:c1:05:62:e3:3c:67:23:ec:
         c1:63:1a:7e:23:d1:59:a5:69:e0:9c:d4:92:50:92:05:33:56:
         12:19:15:04:ab:31:64:c7:28:76:61:0c:a4:a8:9d:90:d0:85:
         1e:41:4b:6a:ac:84:0a:25:ef:05:64:60:89:02:26:51:30:3e:
         cc:f1:bf:2d:90:11:ce:94:d4:3d:65:4f:92:c4:5f:d9:c6:44:
         36:16:41:81:68:ab:7e:a7:3c:92:75:f2:44:81:00:28:17:d4:
         fa:6f:8b:81:16:43:96:5c:26:e8:21:cb:50:d4:2b:9f:bf:af:
         89:c5:a8:f8:59:c8:45:4a:2e:24:fd:4b:20:6b:8f:55:ad:ec:
         6c:13:c5:75:5e:a9:8a:a7:8e:38:47:6b:28:19:78:8a:81:7b:
         85:c5:9c:fb:c6:0d:08:6b:f6:e0:dc:f2:02:5b:c1:08:41:bb:
         22:96:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:21:57 2025 by rpki-client