Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84dfef13-acc8-32a2-b63e-97387a8dda92.roa
File:                     84dfef13-acc8-32a2-b63e-97387a8dda92.roa (raw, json)
Hash identifier:          8QRLjGXmnUkSv+38h2FlGj9d9K0NfOTQoGyrZEidqXQ=
Subject key identifier:   56:C5:63:21:74:8C:3F:B9:CB:8B:A1:EC:8E:E1:70:42:9D:CD:82:4B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858499DBF246A864A3B6275A89D80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84dfef13-acc8-32a2-b63e-97387a8dda92.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     852
IP address blocks:        207.219.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:24:6a:86:4a:3b:62:75:a8:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=6def517d-1baa-4346-a8b1-deda7a9a95cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f8:cd:46:bc:f8:5c:68:2a:82:34:9d:e2:4f:
                    7e:61:58:2a:27:7b:5e:ac:0f:e7:fc:b5:8b:69:8d:
                    50:5e:7d:79:c0:85:98:1c:34:1f:7f:99:b6:83:81:
                    90:2c:79:11:ad:c9:e4:87:ae:4e:92:47:b3:33:6a:
                    c4:7e:e2:9e:07:e5:65:e0:94:fb:15:69:92:b3:a9:
                    29:6f:10:61:d1:24:14:7c:fb:fb:7c:02:2a:8f:0a:
                    9c:73:0a:71:b5:c9:b3:1c:0e:ea:e0:e3:29:e5:94:
                    d8:55:e1:b8:8b:7f:f8:40:6c:32:86:be:20:77:5e:
                    3b:cd:61:6f:7f:e9:43:f6:1d:b6:29:a1:2e:20:cf:
                    cb:aa:e2:06:e9:91:64:83:c7:5e:6f:f5:fc:6a:79:
                    23:80:13:31:5b:aa:47:66:91:b6:bc:b2:51:67:1c:
                    7e:8a:a6:be:d2:e9:39:fb:ea:7b:dd:a9:fa:91:6f:
                    53:30:e5:e1:e3:08:87:14:2a:53:3a:cc:38:2b:17:
                    ad:3b:49:eb:bb:07:9f:82:f5:73:77:71:b9:f4:dc:
                    a7:40:fc:75:35:49:e4:00:6a:f4:23:93:78:59:b5:
                    47:1d:10:b6:77:29:9a:52:60:48:1e:e6:e0:37:d4:
                    87:b7:e7:59:20:87:00:15:eb:cc:43:6a:28:22:44:
                    76:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C5:63:21:74:8C:3F:B9:CB:8B:A1:EC:8E:E1:70:42:9D:CD:82:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84dfef13-acc8-32a2-b63e-97387a8dda92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.219.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:01:6a:55:4e:23:3a:32:2c:cc:46:cf:70:4d:d3:65:b5:96:
         71:29:03:3f:81:58:c9:82:14:7b:2c:b1:8c:d3:bf:45:f8:63:
         25:14:6c:df:3a:a3:27:60:d5:5f:a3:d4:ab:99:36:df:f1:b3:
         8b:5d:27:d3:7f:a5:43:9e:19:97:51:94:2e:b1:3f:7d:1e:e3:
         b2:ec:05:22:ed:59:af:82:2d:a3:2d:62:37:cf:fc:dd:ae:ee:
         77:ce:bf:5d:c8:c0:fa:b3:4a:a9:ad:db:15:b6:b3:f2:64:71:
         2a:e0:61:0b:72:b0:4e:ca:4a:99:59:a7:ac:83:3e:4c:c7:0b:
         33:c1:9e:9f:91:c5:0f:de:a1:ab:0a:be:8d:a2:ab:18:07:5a:
         12:2f:39:eb:03:9d:c7:6b:a0:36:cc:d9:a2:ce:cd:86:7e:4e:
         0f:69:ed:fb:c8:45:c4:10:67:cb:92:31:1e:d5:e2:36:ff:97:
         15:5b:4b:c0:96:11:d9:15:4c:3e:0b:81:23:cc:40:8f:6e:ff:
         3b:aa:56:aa:08:df:b1:67:5a:7d:8f:16:08:ae:0c:02:55:15:
         83:a3:22:3e:97:65:fe:78:a1:8d:19:46:57:bb:29:be:81:07:
         e7:bf:aa:c5:84:96:37:9a:d6:3d:d0:9b:65:f6:75:14:03:bd:
         d6:92:2c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:49:10 2025 by rpki-client