Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/2c0a9f0c-38f6-3210-8986-04b9d5ab0fc3.roa
File:                     2c0a9f0c-38f6-3210-8986-04b9d5ab0fc3.roa (raw, json)
Hash identifier:          MCdz/Dre1UxdmEzrlP/wjkPrQIa6EkjcTN0FRyhnjM8=
Subject key identifier:   0A:02:C4:3C:6D:A9:56:C6:27:54:0F:DB:01:36:B7:BE:74:02:B3:04
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584A0C05718B0F7F49B3D3894C40
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/2c0a9f0c-38f6-3210-8986-04b9d5ab0fc3.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     1273
IP address blocks:        207.50.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:71:8b:0f:7f:49:b3:d3:89:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=3d326569-fad2-4cae-95cf-aca06ce19a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:30:a7:24:2f:f1:cf:d9:b1:24:72:c9:b8:17:
                    26:33:be:5b:a7:b1:0e:50:bf:55:9a:3d:92:45:c4:
                    0f:0f:04:16:a2:2a:bb:08:b3:b0:49:d9:63:55:a6:
                    d8:c5:39:f5:8f:f5:36:ec:eb:eb:02:97:6a:07:b1:
                    d2:b5:bd:13:39:c1:99:89:f3:df:75:14:64:55:09:
                    f1:a2:fd:88:bc:80:57:1f:20:9b:02:16:b0:1c:5c:
                    2c:87:78:1e:17:27:7e:a9:ad:ca:7b:2d:76:c4:32:
                    67:09:4a:0c:6c:70:d5:75:b1:4e:8d:ce:d6:68:85:
                    29:85:41:4d:10:89:c0:f2:a4:52:18:f1:77:cf:38:
                    1c:c5:50:fc:d3:97:90:0b:a3:96:20:51:80:c1:16:
                    03:9d:d0:05:12:af:75:5c:8f:0c:7d:7a:0d:88:97:
                    e7:ed:24:ea:7f:14:cf:86:52:7f:71:2f:11:3d:10:
                    77:e1:14:76:4e:cb:56:1f:15:ae:41:4c:69:dc:ac:
                    1b:69:07:7f:ed:2c:aa:64:c9:71:9f:4e:d1:05:c5:
                    7a:aa:2c:c5:88:e0:cf:b8:21:55:26:69:01:ed:74:
                    5d:6b:76:d7:4d:a2:79:bb:22:dd:45:46:f6:04:36:
                    50:c5:04:58:94:cb:74:f4:82:62:c3:73:02:86:9c:
                    84:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:02:C4:3C:6D:A9:56:C6:27:54:0F:DB:01:36:B7:BE:74:02:B3:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/2c0a9f0c-38f6-3210-8986-04b9d5ab0fc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.50.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:49:42:76:0e:2f:d6:59:0f:c1:fd:6b:3c:a5:a0:f4:cd:69:
         20:4d:d8:51:98:d1:c4:75:d2:09:1e:2a:c2:ec:98:8d:b7:31:
         52:67:4c:99:0b:ad:c6:e3:eb:70:e0:07:19:52:9a:67:4d:fa:
         9b:c2:61:16:34:38:c3:ef:80:a1:fe:e1:c8:a5:90:87:ce:77:
         1b:65:bf:e7:0b:bf:f7:aa:b6:a8:bb:16:d4:43:4c:db:93:dd:
         1f:5a:7a:9e:3e:67:54:1b:62:fb:77:53:f6:50:a2:9b:55:94:
         c4:d2:84:b1:b5:a0:4c:3d:c8:d8:05:d4:91:1e:52:f9:94:d9:
         df:4f:d1:3c:a6:f4:8d:11:c5:e9:fb:99:7a:16:0b:45:ca:7b:
         78:47:3f:d3:3a:55:ca:53:ad:86:6b:97:f2:4a:1f:3f:e7:ab:
         57:72:18:64:6f:48:7c:d5:a7:ce:d6:4c:9c:0b:c9:67:f6:9e:
         98:4d:df:12:63:60:4a:1f:c6:84:a4:ab:62:b7:d3:8d:af:ab:
         01:8d:fb:2b:6c:6d:d3:79:38:4d:c0:9e:28:9c:cb:8b:c8:17:
         b6:02:dd:81:18:90:21:aa:de:92:1b:f9:05:8b:ed:13:0a:cf:
         19:6b:5b:8c:ba:f8:23:06:2d:58:2d:d5:9b:62:75:81:e5:ab:
         2d:97:d1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:42:51 2025 by rpki-client