Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/b6c422eb-8a88-33c7-b75f-566f8b2bc49f.roa
File:                     b6c422eb-8a88-33c7-b75f-566f8b2bc49f.roa (raw, json)
Hash identifier:          83z5XBXNcnTfYO3KS1OnVXKv4L6m39bqqB0KSE8Pyvc=
Subject key identifier:   10:79:60:73:0C:E3:0B:B6:0E:90:0B:30:B4:AD:BE:E5:AC:BD:23:64
Certificate issuer:       /CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb
Certificate serial:       010D0C9F4328584A23C0189F75E93C0C1B071700
Authority key identifier: 5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/b6c422eb-8a88-33c7-b75f-566f8b2bc49f.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     134176
IP address blocks:        207.228.200.0/24 maxlen: 24
                          207.228.201.0/24 maxlen: 24
                          207.228.202.0/24 maxlen: 24
                          207.228.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:18:9f:75:e9:3c:0c:1b:07:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=f0acfe60-d196-44cb-9787-bff0b8d08a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e1:b7:2e:df:c0:66:a6:00:ef:d3:d2:92:c0:
                    da:f1:48:3c:8c:0e:2d:af:d9:fe:d9:d5:a7:1a:8b:
                    3b:07:84:8a:3d:86:19:a6:85:6a:16:fe:6f:d8:53:
                    87:57:bb:14:49:08:9f:f0:89:ee:0a:21:00:02:24:
                    23:cf:13:18:1d:f5:2e:97:ad:ff:63:cf:d9:78:55:
                    6d:85:fc:3d:4e:b1:3d:64:57:f1:6c:f7:c9:55:44:
                    41:db:3b:b8:08:f6:19:4d:9d:6c:01:4f:11:2f:00:
                    aa:d1:27:79:72:e4:07:91:da:44:f0:60:eb:68:1a:
                    a3:21:15:83:0b:64:09:6f:ef:3c:13:ec:f4:77:9f:
                    b1:e3:01:eb:f4:44:0e:b9:f2:c8:cb:03:2b:40:7e:
                    c7:fc:56:8d:cc:59:a5:83:05:ad:03:1e:0d:0b:50:
                    92:aa:d4:1c:84:90:9f:f7:46:2d:d7:d0:d5:42:03:
                    84:ae:d6:1c:08:c9:a9:62:40:85:0a:8d:88:c0:3a:
                    14:50:63:66:2f:73:2d:df:c7:6e:f2:9b:53:ab:8e:
                    0d:fa:89:26:6b:99:07:d2:74:3a:4b:63:fe:74:ba:
                    c9:56:3b:bf:73:04:bf:a1:86:18:7c:c7:14:16:3c:
                    0f:bc:f4:2a:fa:39:61:9c:b4:12:c4:fc:a8:26:34:
                    98:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:79:60:73:0C:E3:0B:B6:0E:90:0B:30:B4:AD:BE:E5:AC:BD:23:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/b6c422eb-8a88-33c7-b75f-566f8b2bc49f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.crl

            X509v3 Authority Key Identifier:
                keyid:5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d0:16:5d:18:b0:ff:a8:a4:96:9c:0e:9d:2e:fa:d1:3d:e2:
         97:35:c0:42:6d:24:97:8b:8e:4f:8d:05:08:14:39:ff:e4:42:
         d2:47:ea:c7:1f:31:a1:b8:21:92:ea:d2:a7:e9:65:fc:d7:6d:
         c4:5f:ce:b8:7c:75:63:c5:e3:bb:36:44:ad:2f:f3:ce:f5:01:
         d8:15:94:43:7d:f6:0b:21:ca:72:cc:d9:ee:47:66:9c:7c:95:
         06:06:68:3a:82:a0:fa:7a:f9:b4:ec:14:14:7c:15:fe:0c:7a:
         50:f1:e3:20:01:6e:30:c9:d8:4e:fb:1b:8f:83:ec:31:a1:78:
         92:96:1d:74:1b:b4:66:f4:92:84:4a:43:68:3f:06:43:17:84:
         49:21:e0:a1:e9:63:d0:3b:f6:d1:f5:87:c7:a0:20:bc:93:58:
         86:6d:6c:e3:b1:d8:24:64:69:35:f2:67:00:c6:ec:1d:5c:3d:
         6c:a8:d1:a0:96:67:af:76:96:b1:ca:b5:38:d7:6d:f5:ed:64:
         fd:95:c2:d5:f9:9c:7d:70:81:12:fa:f3:3b:a9:b8:fa:7c:d2:
         ed:c9:02:77:ec:f8:68:19:a1:0d:83:36:0c:de:6c:c4:fe:7e:
         02:f6:d4:07:eb:49:bf:8d:fd:79:97:cf:a1:fc:df:ab:48:dd:
         b6:88:51:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:39:53 2025 by rpki-client