Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc/5caff080-9e00-34fe-b84b-47f47ef7e321.roa
File:                     5caff080-9e00-34fe-b84b-47f47ef7e321.roa (raw, json)
Hash identifier:          3UwVGoVBwiJLB1vpkGhbxXlnHg0r9ULQgBGqBG2x5tY=
Subject key identifier:   A2:EC:DA:D8:0F:50:37:CA:D6:98:EA:E8:42:E3:36:57:4C:69:91:07
Certificate issuer:       /CN=d721f6df-da07-469d-be94-82504f071adc
Certificate serial:       010D0C9F4328584A96368C045A1CC343EFCBD7A7
Authority key identifier: 8E:B4:7F:97:79:EA:46:A8:29:E5:88:23:27:23:E0:D2:6A:7A:CC:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc/5caff080-9e00-34fe-b84b-47f47ef7e321.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     8075
IP address blocks:        207.174.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc/d721f6df-da07-469d-be94-82504f071adc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc/d721f6df-da07-469d-be94-82504f071adc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:8c:04:5a:1c:c3:43:ef:cb:d7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d721f6df-da07-469d-be94-82504f071adc
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=297e0142-4531-491f-a706-fb196d44a59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a2:e6:c6:70:5a:11:39:00:e6:6d:8a:da:1f:
                    55:07:79:45:c2:8a:c6:fd:c6:fb:cb:34:6b:40:8d:
                    22:8d:bb:a4:58:a2:05:10:05:31:55:2c:ee:c5:e3:
                    ed:c0:d2:ea:50:ca:a7:46:84:b3:6a:8a:2c:92:b4:
                    99:b3:85:7c:6e:e3:4a:af:3e:c5:4b:8c:67:bd:ff:
                    f3:90:6d:4f:5a:5c:a2:0d:8f:fc:0b:4e:2a:5c:e0:
                    0a:6c:7d:01:91:8e:c9:00:32:29:95:93:e4:a8:13:
                    89:fc:2f:d7:ef:fa:3e:27:88:23:8c:fd:27:e4:55:
                    50:3f:b0:28:99:f1:20:4a:7d:9b:ad:1f:9d:43:6d:
                    9c:7f:cb:7b:4f:03:18:df:e7:d4:ec:d6:1c:60:31:
                    9d:41:f7:87:cc:26:64:41:11:09:aa:2d:14:89:7d:
                    ce:44:78:cc:e8:ff:77:14:af:2e:13:2e:a3:a1:98:
                    d7:45:d4:26:26:49:43:bc:4e:0f:4a:a9:7e:4e:bf:
                    f4:f3:7f:55:2f:ca:2b:67:25:de:2b:4c:7e:fd:00:
                    d6:61:0f:28:de:03:3c:e0:c3:5f:f8:20:89:f0:a3:
                    fc:7b:48:f0:26:80:7b:99:a8:57:1f:06:2e:00:05:
                    b5:d3:75:c4:3a:bf:34:fb:6f:fe:f7:d0:9e:db:78:
                    dd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EC:DA:D8:0F:50:37:CA:D6:98:EA:E8:42:E3:36:57:4C:69:91:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc/5caff080-9e00-34fe-b84b-47f47ef7e321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc/d721f6df-da07-469d-be94-82504f071adc.crl

            X509v3 Authority Key Identifier:
                keyid:8E:B4:7F:97:79:EA:46:A8:29:E5:88:23:27:23:E0:D2:6A:7A:CC:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:61:a8:39:13:4c:4b:8d:59:56:7c:9e:a9:cf:26:71:6b:38:
         28:c8:4d:60:ae:dc:d2:f0:cf:8d:82:a5:85:aa:4f:dc:4d:d1:
         7f:24:c2:9e:33:25:bb:b6:5b:2a:17:00:09:e6:e5:c9:70:45:
         93:06:52:1b:dc:6a:a1:9b:c6:94:fd:36:43:ba:49:0c:75:66:
         4e:10:62:9b:e8:37:42:96:21:70:61:9d:95:ba:14:06:58:90:
         11:0d:e5:22:93:45:f4:dd:45:82:0f:7e:37:cc:50:44:93:4f:
         39:1f:c9:fd:83:4f:2e:d6:e5:35:01:72:d1:b9:55:f7:8d:97:
         2b:ad:fc:f8:c0:30:73:67:67:c7:e5:9c:33:3e:d7:c5:83:01:
         36:4c:f0:0a:52:79:78:16:a6:62:b0:bc:e8:ab:c9:6c:d2:c5:
         43:57:35:16:eb:48:a9:6f:52:b7:5b:bc:4b:04:8e:a5:42:fc:
         28:bd:b1:dd:f4:e2:4d:43:5d:62:1d:03:d1:25:52:35:b2:56:
         17:78:94:66:6f:bc:48:37:24:05:e0:2d:f9:4c:96:8e:2c:44:
         7d:fa:2c:43:e1:bd:3f:57:00:71:ef:b0:7d:c7:e9:c3:c1:3d:
         97:3c:76:76:b0:50:7f:0a:c7:20:e4:7d:d5:bd:94:81:1a:0c:
         bf:5a:7f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:41:06 2025 by rpki-client