Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1e7e00a-bef7-3405-9935-23a707f0b71b.roa
File:                     d1e7e00a-bef7-3405-9935-23a707f0b71b.roa (raw, json)
Hash identifier:          RYV0sMW78VZkk0f7JEBR98cxkt6GzLpNnzYW7021HhU=
Subject key identifier:   07:0B:F9:D1:86:C9:6F:EC:45:D9:F7:E1:04:60:46:6F:A6:3D:CA:96
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584A26D7B330E19D5ED848C1D580
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1e7e00a-bef7-3405-9935-23a707f0b71b.roa
Signing time:             Wed 11 Jun 2025 03:36:05 +0000
ROA not before:           Wed 11 Jun 2025 03:36:05 +0000
ROA not after:            Tue 09 Sep 2025 03:36:05 +0000
asID:                     397373
IP address blocks:        207.230.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:d7:b3:30:e1:9d:5e:d8:48:c1:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Jun 11 03:36:05 2025 GMT
            Not After : Sep  9 03:36:05 2025 GMT
        Subject: CN=aca87753-2175-4cdc-a970-1afd354a680e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5f:31:0f:af:aa:39:f0:a2:40:ac:0b:4d:a0:
                    37:54:97:a7:b8:f6:68:62:b9:6a:21:32:4f:90:4f:
                    25:86:1b:b8:72:61:5e:13:99:61:08:4d:5b:af:7c:
                    7e:f4:07:06:e2:5a:41:fe:5a:64:c2:22:a0:3d:4b:
                    e8:db:fc:f6:53:8c:f7:c0:6c:19:ae:fc:a6:52:c8:
                    73:04:e5:3d:06:8e:7e:70:ac:da:3f:38:91:aa:a8:
                    aa:a2:9d:e0:62:66:7f:30:e7:a4:5f:62:8e:02:93:
                    3b:74:65:c6:77:d2:dd:58:9b:6e:2a:d1:35:95:fb:
                    55:42:ff:58:93:85:f3:2c:ca:47:0b:c6:67:dc:2d:
                    90:81:5c:14:fe:f3:2c:3e:39:08:d7:d8:d7:1c:16:
                    4a:ce:48:b5:52:d2:a4:0e:4e:a2:2a:44:58:da:35:
                    f0:47:9a:86:4d:91:5f:5b:62:43:a0:94:d2:83:cd:
                    73:19:75:17:89:db:57:a9:08:55:5c:c4:18:01:44:
                    55:ff:83:fd:64:52:05:92:2a:b1:22:f7:36:a6:e5:
                    4b:34:71:c4:ff:aa:05:9c:ce:ee:55:01:cb:98:c8:
                    95:da:f1:4b:ce:11:35:71:ba:ea:46:9a:f8:8f:46:
                    69:3c:c2:eb:4f:65:5f:85:25:3c:9c:f3:63:f6:7e:
                    46:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0B:F9:D1:86:C9:6F:EC:45:D9:F7:E1:04:60:46:6F:A6:3D:CA:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1e7e00a-bef7-3405-9935-23a707f0b71b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:92:10:23:b0:27:f0:55:d7:8f:7d:fe:09:50:4b:dd:d0:71:
         ce:20:00:fe:87:f7:62:d0:32:d1:4e:58:f1:6c:f0:fb:d6:90:
         fb:9e:08:f0:9c:d2:8a:57:9f:1a:64:a6:f0:15:47:0b:13:71:
         e4:f3:77:66:9f:06:10:2f:78:f3:98:2a:e7:a1:05:65:f5:ae:
         c4:5f:1d:2f:81:ab:19:ce:2b:57:5c:db:08:d8:4e:5b:ac:8b:
         0f:73:7a:da:8e:85:eb:8d:6a:9f:e4:1b:27:5e:78:55:17:f8:
         eb:1f:dc:11:39:5e:f1:d7:77:e2:39:3b:3c:40:6a:c8:c9:e6:
         50:0a:84:f6:ac:95:72:17:82:19:7b:81:6d:7e:1a:a4:0d:57:
         e7:8b:2a:10:c4:02:3e:ec:0e:29:26:2f:20:44:98:35:36:6a:
         e7:87:0e:1c:36:c0:56:b4:3a:43:6a:3b:df:ac:32:56:2a:f9:
         99:63:f6:de:aa:42:82:fa:ca:2c:46:27:77:f9:bf:18:04:63:
         b1:15:d1:93:a7:4b:25:a3:12:e4:80:b6:96:c6:64:4d:1d:6d:
         3f:42:33:9e:e4:eb:6c:ab:02:f2:7c:13:a3:44:e2:e9:71:2a:
         e7:b2:1f:fe:96:26:a3:8a:32:78:b8:1a:a2:ba:f4:56:42:bd:
         dd:d5:32:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:05:22 2025 by rpki-client