Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b3a12205-e19a-3d20-9ef3-6043d29fcef0.roa
File:                     b3a12205-e19a-3d20-9ef3-6043d29fcef0.roa (raw, json)
Hash identifier:          7xejEsRW9iTF7tZYsBHBlk9KEVCzRupybhh8IwBWAZc=
Subject key identifier:   CE:C3:BD:2A:DC:C5:23:B4:DC:9B:AA:91:FE:D1:D4:3F:17:83:5E:87
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584A23C004C06124BA6ED8C026C0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b3a12205-e19a-3d20-9ef3-6043d29fcef0.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     9009
IP address blocks:        207.230.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:04:c0:61:24:ba:6e:d8:c0:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=ec04f742-fae1-4451-9469-8facd68b5a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:70:c6:71:c0:0c:1b:d9:a2:b9:d1:7b:34:a1:
                    d5:06:d5:c6:a3:a0:3e:83:4d:25:f7:d0:10:21:c2:
                    0b:6a:11:19:af:73:6f:e1:b9:7a:dd:3e:65:aa:f7:
                    9b:6f:95:67:93:57:57:70:b0:94:51:b1:8e:fb:0c:
                    21:a3:db:e9:ec:6f:5b:fc:5a:ca:f6:5b:55:ea:d1:
                    bd:52:fd:b1:5f:d8:b1:39:6e:52:4c:3d:21:de:0f:
                    7a:e2:cc:bb:52:2c:c0:af:fa:25:a1:60:a1:c5:46:
                    5a:29:48:ae:15:53:63:3a:50:45:20:f7:5d:78:c8:
                    f9:92:ec:cf:5c:59:d2:de:67:90:78:c3:fa:23:d5:
                    7b:bb:57:5b:0e:9c:1b:14:8e:6e:ad:2f:43:39:e8:
                    18:12:f6:04:4a:6e:3d:a7:8e:ce:b5:24:b5:2a:3d:
                    63:73:2a:8c:6c:75:7e:d7:ad:08:21:ba:1c:22:c6:
                    46:27:2a:4e:ea:e4:0b:a6:d5:8b:75:70:2d:04:9e:
                    20:bf:62:72:b8:1e:e1:35:91:73:36:7a:9a:39:a1:
                    a6:5c:e3:5a:6d:43:14:df:98:2d:10:81:01:35:70:
                    78:c1:1f:81:61:b2:72:d0:7f:00:8a:4d:ea:61:ce:
                    ad:02:5f:c1:e1:7d:56:84:f1:05:3e:40:5d:78:4d:
                    91:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C3:BD:2A:DC:C5:23:B4:DC:9B:AA:91:FE:D1:D4:3F:17:83:5E:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b3a12205-e19a-3d20-9ef3-6043d29fcef0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:88:e5:5c:70:13:56:d9:f0:11:d8:99:69:16:ad:f0:57:0e:
         fb:e1:cc:7d:47:53:e6:73:de:b3:54:eb:6a:76:cc:1b:52:b7:
         ae:e9:bb:15:73:3d:71:56:b0:aa:80:84:23:48:4f:19:3f:7f:
         f9:dd:2f:5c:22:eb:b0:e7:c7:88:08:e0:67:98:a4:96:b4:a1:
         cf:f6:b8:65:34:29:4f:09:2a:82:f8:fd:ff:08:3a:ec:88:23:
         e2:63:ad:43:b8:24:33:bb:19:b8:2c:c6:d3:37:95:db:41:20:
         15:ef:de:f0:9e:31:16:0a:53:e7:ea:75:1f:4c:6c:f8:06:53:
         d3:75:88:50:23:d5:e3:a9:33:85:52:c8:49:6e:53:f3:09:d1:
         8a:7a:55:db:5c:62:b4:98:5f:b1:e1:98:f3:07:0d:5b:9b:0e:
         f7:a6:d6:ac:c5:b4:86:be:ca:f5:b9:a5:4c:24:a0:a1:ce:04:
         8a:9b:25:a8:e9:c5:80:92:aa:68:95:22:8a:98:aa:5d:61:13:
         a8:eb:98:78:ca:51:65:63:63:ec:c5:24:0f:70:33:d4:63:35:
         99:e4:e9:1f:13:de:87:1c:81:d8:81:36:80:5c:38:99:db:6d:
         19:44:18:5b:2d:b9:5a:72:d6:e7:32:ca:88:5d:b8:13:60:60:
         91:28:b8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:44:50 2025 by rpki-client