Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/7e4d501d-1ec6-30fb-9360-2bd1cf325ee1.roa
File:                     7e4d501d-1ec6-30fb-9360-2bd1cf325ee1.roa (raw, json)
Hash identifier:          /sDUBa1NyIgsjJmii8EFilox/7lskDGzjmboTAD3Thk=
Subject key identifier:   29:8D:C5:B1:82:85:58:68:2B:08:6A:D0:B1:EC:4B:86:48:8A:79:4F
Certificate issuer:       /CN=529d57aa-cd56-41d8-b3ad-b413b968b610
Certificate serial:       010D0C9F43285849E2251E58C3E4DED5D0E74F68
Authority key identifier: 2A:26:48:3C:21:AD:AE:53:6A:32:BC:20:B3:A1:64:46:2C:5C:84:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/7e4d501d-1ec6-30fb-9360-2bd1cf325ee1.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        192.197.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:1e:58:c3:e4:de:d5:d0:e7:4f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529d57aa-cd56-41d8-b3ad-b413b968b610
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=d41cc217-ec35-47b0-99f1-c10c36475688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f6:c7:b0:c3:fd:6b:6d:57:4e:57:31:43:d7:
                    d6:cf:8a:00:22:5e:a0:2b:8f:60:83:66:1d:ab:cd:
                    64:98:10:bf:6a:ed:de:2e:f4:d6:06:69:35:4c:5f:
                    b0:71:9b:27:51:3d:33:c7:b2:35:fe:85:09:3c:65:
                    cb:4a:f3:3a:60:d4:72:29:b6:a9:79:4a:fa:49:12:
                    d5:52:fd:df:6b:e3:08:bc:c8:e1:ca:e5:44:37:95:
                    fe:45:74:74:a6:31:6d:29:af:70:aa:2b:7d:c8:96:
                    af:4b:98:1f:d7:19:af:7b:89:e7:24:ce:79:70:ff:
                    94:2b:84:5d:91:85:b0:f1:59:03:45:f9:a0:58:cd:
                    c6:dc:3e:23:a3:7a:c9:1b:f8:33:e1:60:c6:35:c9:
                    fa:b6:40:50:30:a4:88:b4:2e:db:c8:31:00:7f:3d:
                    dd:3c:1e:89:0e:af:a8:0a:dc:b7:ce:56:8c:27:0c:
                    5b:10:a3:f5:4a:9e:74:37:bd:58:06:e3:c6:5e:92:
                    28:93:75:70:fd:3a:10:c5:c9:4b:5d:37:d6:8a:7f:
                    25:de:05:1d:f1:01:98:1f:ef:39:b6:ab:b7:4f:ce:
                    f5:63:74:e0:b3:2a:b9:f2:ca:63:72:1b:c6:10:2a:
                    d9:57:e5:91:f7:f4:71:41:a2:3f:fe:9f:1d:b1:ed:
                    c6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8D:C5:B1:82:85:58:68:2B:08:6A:D0:B1:EC:4B:86:48:8A:79:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/7e4d501d-1ec6-30fb-9360-2bd1cf325ee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.crl

            X509v3 Authority Key Identifier:
                keyid:2A:26:48:3C:21:AD:AE:53:6A:32:BC:20:B3:A1:64:46:2C:5C:84:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:0b:5c:2a:2a:86:24:87:41:30:f0:7d:17:34:5a:8c:7f:17:
         73:fe:8b:c5:b1:a4:c4:62:e4:da:8c:b7:1d:d8:b8:03:3c:aa:
         4c:4b:62:6c:f4:33:07:73:95:e0:0d:34:ca:71:a9:88:38:bc:
         44:4c:7e:61:89:de:12:95:c4:86:8c:78:f4:7e:de:be:67:f3:
         03:e4:f8:04:45:93:85:62:a0:9c:fd:13:34:a1:76:b4:e6:ce:
         6a:b6:6d:ae:82:12:cc:6d:a0:e8:3e:b8:e9:02:53:51:18:f1:
         bb:60:03:7f:7a:45:53:1b:95:74:18:51:f6:dc:bb:01:1b:52:
         da:d4:08:a6:e5:89:ff:6d:62:47:10:6f:0d:d4:dd:6b:ae:c8:
         b5:38:a8:ad:9f:34:ce:6f:82:ba:78:ad:20:3c:17:b9:38:7e:
         7a:a8:3d:90:ea:a4:59:87:e1:59:58:80:48:33:89:33:74:f8:
         fa:68:b0:33:7e:17:a2:3e:c4:a4:39:75:fa:0b:78:d2:a5:4f:
         69:c6:ae:39:d0:16:d4:db:2a:00:29:f6:25:71:f0:fa:93:eb:
         ef:a4:8b:01:76:02:59:85:ca:0f:df:88:60:6d:af:7a:4b:de:
         60:31:a2:83:cc:a2:a7:10:3a:23:13:fd:eb:36:62:39:6c:d5:
         4e:d6:00:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:35:16 2025 by rpki-client