Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b7fc545e-5124-3c69-93cb-4c47e852ef6d.roa
File:                     b7fc545e-5124-3c69-93cb-4c47e852ef6d.roa (raw, json)
Hash identifier:          m5iVx0REWNsb1GNQSK3JNJk+iVOrnsiTGDscEekfdqw=
Subject key identifier:   11:56:6E:66:62:73:AB:89:97:90:08:FD:E8:68:BC:DD:03:A6:C5:FE
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F43285849E2251A02007F060C76C12BC0
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b7fc545e-5124-3c69-93cb-4c47e852ef6d.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     11269
IP address blocks:        207.2.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:1a:02:00:7f:06:0c:76:c1:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=4792e02c-9e79-45eb-9973-d9f7a18ff50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:30:fc:1b:f2:7d:54:e1:de:74:7b:de:d6:
                    bc:45:f0:45:8a:7d:77:7d:2b:38:ac:d4:97:4e:5a:
                    f5:ee:6c:9c:cc:e2:8b:fd:a6:6e:4e:2e:95:8b:ac:
                    1e:12:52:a7:a3:16:0a:d8:31:d6:fe:ac:2d:4b:b8:
                    2f:9a:cd:2e:ac:6b:b9:af:a7:41:ad:9e:e9:cb:46:
                    4a:73:a7:52:9b:d6:03:ea:e4:81:dd:b1:81:7d:4a:
                    b7:33:02:c1:3f:12:f8:98:9b:d8:68:55:c1:72:39:
                    02:44:bd:61:39:fb:09:13:74:2c:e0:b8:db:39:22:
                    10:87:d5:1c:b0:e8:4c:79:e2:3d:d4:e9:84:e2:ae:
                    34:7b:55:d1:69:a8:7a:47:cc:24:7d:8b:70:af:6b:
                    8d:a8:4c:03:d5:92:da:55:55:72:a6:11:c2:07:96:
                    49:3d:a2:d3:17:e9:cb:b6:89:ea:f9:24:7c:ac:80:
                    be:a4:e4:7d:34:7e:f6:a8:99:e1:14:f5:96:8a:a3:
                    02:17:51:00:19:0c:fa:6c:f6:2b:87:29:02:24:69:
                    03:99:78:2a:00:c2:03:58:20:a3:c9:90:f1:fa:c4:
                    33:15:1a:b4:7f:80:98:d6:f3:6b:44:d9:75:4c:5c:
                    14:4a:2e:6a:a0:d6:67:76:44:d8:03:b8:cf:c4:a4:
                    51:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:56:6E:66:62:73:AB:89:97:90:08:FD:E8:68:BC:DD:03:A6:C5:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b7fc545e-5124-3c69-93cb-4c47e852ef6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:08:5f:09:42:7c:33:2c:fa:53:4d:1b:26:a9:0a:15:c3:ed:
         6a:17:e8:97:8a:a5:0c:89:5b:cf:4a:1e:66:ba:e4:e5:8c:3d:
         ba:f5:c3:2f:96:c1:c6:e7:49:80:38:d1:b7:bf:81:94:5f:4f:
         4c:c6:b9:aa:d1:92:3d:23:95:c5:dc:8c:75:10:80:d4:5f:26:
         af:ee:81:a4:c8:57:d2:fa:b8:ab:c8:e0:ba:48:7b:41:ef:90:
         eb:bf:5c:07:1f:ee:96:ed:bf:15:b8:75:1c:31:04:82:10:21:
         9a:c4:e2:07:4a:43:6e:b3:38:12:e5:b5:a1:bc:6e:54:4b:cf:
         61:4d:22:a2:77:12:d5:12:ec:c9:0a:b8:99:39:f0:ec:dd:3f:
         d0:2e:98:5b:10:3e:ce:1e:e9:4c:92:5d:51:07:7b:c2:33:f2:
         8a:5d:b7:0a:18:85:fa:5d:2f:b5:7b:15:6e:3e:1d:8a:90:a7:
         e9:f7:30:bb:7e:d2:b8:9c:48:26:92:95:52:06:fb:89:72:4b:
         30:4a:06:68:60:c0:4e:de:b4:ab:f4:a9:e8:19:14:4c:06:d9:
         3c:5e:bb:0f:43:46:f4:0c:a0:87:1d:66:03:d7:47:89:de:69:
         f0:14:33:93:6f:9d:c4:12:af:f9:fd:83:54:7a:0c:85:72:9b:
         f1:14:11:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:05:55 2025 by rpki-client