Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2/712d1a2b-b5b8-3735-ab0d-e057322b7e05.roa
File:                     712d1a2b-b5b8-3735-ab0d-e057322b7e05.roa (raw, json)
Hash identifier:          v54d6BPp9GC8dGqzJvU9ialkSo4o1JU6t3zEaaIAJAo=
Subject key identifier:   09:EB:DC:54:EC:FD:0E:A5:7C:F8:26:FC:14:51:06:1D:D0:B1:F2:8D
Certificate issuer:       /CN=e88e678b-ac52-45d1-af21-8805bf2307d2
Certificate serial:       010D0C9F4328584A23C012041769BF34E232FE90
Authority key identifier: F4:B6:0B:45:B2:E6:55:85:08:51:6D:B8:29:24:92:E7:8B:F2:A2:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2/712d1a2b-b5b8-3735-ab0d-e057322b7e05.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     395188
IP address blocks:        67.199.250.0/24 maxlen: 24
                          67.199.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2/e88e678b-ac52-45d1-af21-8805bf2307d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2/e88e678b-ac52-45d1-af21-8805bf2307d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:12:04:17:69:bf:34:e2:32:fe:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88e678b-ac52-45d1-af21-8805bf2307d2
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=3896be8f-41d6-485c-bd3b-86070d1a9f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:45:07:ad:2d:eb:e6:ff:b3:2b:bf:92:b8:
                    06:d1:19:a5:63:de:fc:d7:47:6f:c4:d8:de:e7:5d:
                    aa:b6:08:1f:14:35:42:06:41:03:71:e7:73:29:6a:
                    c4:3b:bf:df:f5:68:ce:c8:06:b7:fd:43:ad:f0:0f:
                    f1:14:80:5a:09:4d:e1:52:20:33:d4:dd:9a:f1:90:
                    a9:4f:4b:a3:23:fd:7e:85:fb:eb:0d:e8:98:a8:93:
                    e9:b0:b3:42:cc:58:48:27:fe:61:4b:28:98:35:0e:
                    a8:7a:ab:6f:0c:84:39:12:05:55:ee:52:04:c8:07:
                    80:4f:03:01:4e:96:cc:4d:fb:30:f8:1e:39:1e:75:
                    a4:b5:d6:cd:15:90:67:92:0a:02:ea:b6:86:a5:91:
                    fc:74:82:ec:b2:95:a0:4f:4b:df:9c:ab:2b:3a:df:
                    cd:d6:7a:46:05:79:01:43:26:25:bf:19:64:71:dd:
                    c7:83:d1:a5:d7:67:f9:97:42:85:c0:a8:48:6a:25:
                    d8:0c:2e:1c:d7:66:83:e6:32:59:7d:b3:11:44:24:
                    a0:cc:55:52:cf:9a:07:7b:93:80:ff:ca:5a:6b:b2:
                    0e:b9:27:9a:75:77:7b:80:75:d9:bd:ee:af:e1:43:
                    37:da:99:17:b8:dc:4b:34:94:5b:36:66:5e:01:17:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EB:DC:54:EC:FD:0E:A5:7C:F8:26:FC:14:51:06:1D:D0:B1:F2:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2/712d1a2b-b5b8-3735-ab0d-e057322b7e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2/e88e678b-ac52-45d1-af21-8805bf2307d2.crl

            X509v3 Authority Key Identifier:
                keyid:F4:B6:0B:45:B2:E6:55:85:08:51:6D:B8:29:24:92:E7:8B:F2:A2:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.199.250.0/24
                  67.199.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:01:28:37:27:e7:dd:12:81:4e:51:2a:a9:a2:a7:12:f5:b2:
         b4:06:aa:2d:15:25:6b:1f:4e:58:46:5d:eb:68:2a:0f:e2:14:
         a5:df:80:b3:66:63:41:21:b3:9b:dd:0a:8a:c7:83:2f:88:3f:
         0d:1a:e2:8e:14:c9:0b:46:19:f9:0f:5f:ae:81:c5:93:9f:d2:
         0f:ff:e3:0f:d5:22:45:69:7b:71:f4:87:98:cc:c8:5f:ab:5c:
         d8:60:86:da:57:04:b6:11:51:00:3a:7c:b2:12:12:37:e5:b2:
         2d:10:fe:a8:75:9b:42:ba:30:c4:3a:b5:1d:2d:7e:a4:52:fd:
         8a:60:de:5f:96:97:d8:cb:71:4e:4b:ea:15:8b:45:46:01:49:
         e7:42:f7:1a:73:62:f7:20:2a:0a:58:aa:3b:2b:f6:8b:c5:87:
         84:b8:d9:fa:d1:c1:ee:d8:77:0d:07:66:e3:0d:aa:f7:d8:59:
         ca:e3:bd:a9:a5:00:bd:21:c9:6b:0a:e8:88:c6:d3:ac:f1:0d:
         c7:90:8c:b4:0a:44:0a:fd:b8:1e:17:9f:4a:25:80:cd:f0:5b:
         ec:b1:a9:4b:ed:12:5a:a1:aa:5e:ba:2d:d3:28:2f:02:c1:37:
         45:98:2b:e8:4a:4a:85:5e:8f:71:dd:f1:6f:2d:62:8c:0f:e1:
         59:9d:6e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:01 2025 by rpki-client