Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/47ba2ace-e3b5-3e80-86c5-213072236a80.roa
File:                     47ba2ace-e3b5-3e80-86c5-213072236a80.roa (raw, json)
Hash identifier:          4CMI3CBVK73gz/KuDxnb1DB5/TAfqxy0o3VWEYFU5gU=
Subject key identifier:   4E:EC:2E:6D:76:E1:13:C0:D8:01:30:49:DE:72:B5:45:28:42:B7:D2
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F43285849BC74A8D0730D2A9814612400
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/47ba2ace-e3b5-3e80-86c5-213072236a80.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     174
IP address blocks:        207.152.0.0/18 maxlen: 18
                          207.234.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:a8:d0:73:0d:2a:98:14:61:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=80de5c29-5eb6-4d72-a35b-c5c16b18209e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2c:4d:37:a4:aa:82:70:57:13:49:2a:4d:d7:
                    b0:dc:e7:ec:7f:5f:f2:41:0a:14:a8:90:a1:b0:a6:
                    80:d1:94:12:10:17:c1:f1:83:df:04:7f:86:9b:86:
                    b1:a2:fa:8a:71:4f:53:9b:59:e7:47:70:3d:1f:69:
                    c5:a8:18:44:9e:83:9a:bc:85:b8:ec:b4:41:7c:f0:
                    6d:35:e9:2b:61:e1:6e:f2:f7:74:e5:d6:1d:9f:c1:
                    1e:38:a6:32:71:d4:2a:ae:97:82:17:e2:b7:ca:7c:
                    ef:c6:5e:95:2b:f0:55:ab:53:4d:62:dd:17:44:8b:
                    e4:0d:8a:6f:e2:b1:0e:7b:ad:c4:41:f2:ef:56:b9:
                    96:30:4f:f1:d1:41:5f:9e:c9:23:e2:d0:21:63:40:
                    a3:93:9c:c3:ab:0c:c3:5c:d9:5c:9f:ab:a6:aa:bf:
                    6b:59:d6:03:d9:17:fa:a1:2b:26:06:e9:52:c6:cd:
                    5b:5d:45:18:a7:14:d9:49:8d:70:e2:d4:9d:01:e5:
                    35:8d:f5:9d:7f:26:47:85:2f:9b:cc:86:7c:35:84:
                    43:06:1c:29:68:fe:a3:11:57:b4:27:ad:1e:e4:22:
                    65:43:32:67:8d:33:27:f4:99:44:24:4e:e0:53:90:
                    c8:d3:b2:ba:60:a3:85:27:3f:49:93:13:fa:87:54:
                    8d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EC:2E:6D:76:E1:13:C0:D8:01:30:49:DE:72:B5:45:28:42:B7:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/47ba2ace-e3b5-3e80-86c5-213072236a80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.152.0.0/18
                  207.234.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:1e:90:21:ab:31:3f:38:fc:a0:30:c0:d8:81:eb:ad:fe:34:
         09:e7:13:cb:53:c5:d2:e5:e4:f4:92:53:46:52:77:29:40:27:
         2b:6d:0c:a1:2f:a5:e6:5d:0d:93:29:24:1a:1d:a1:1e:e0:33:
         e5:08:2e:81:c4:d5:f8:42:2c:21:81:fe:11:78:d3:f6:03:98:
         cc:e2:ca:c6:2b:73:32:ad:49:5d:fd:b4:74:cb:e1:66:c0:e8:
         5c:a4:43:ac:59:ec:1d:19:73:c5:1d:61:ac:a1:91:48:73:e5:
         b9:41:3b:51:37:4c:ad:25:23:f2:52:37:4a:8e:c8:06:17:8b:
         bb:7d:38:c7:f1:ca:13:88:cb:ac:b6:a2:07:ac:90:62:45:7a:
         10:d6:d6:f9:db:1a:f3:92:7b:72:1c:16:34:c0:3b:fd:9c:b7:
         35:84:04:6c:77:a1:e9:b3:82:80:98:a8:63:fd:41:66:f3:e2:
         ad:62:ad:bc:90:32:99:ef:8c:ab:9a:75:7f:05:48:7a:b1:c0:
         f9:d3:ed:3e:e0:17:f5:7c:91:77:5e:0e:ed:cd:fa:46:2e:ae:
         69:29:cb:45:01:d1:94:c6:7e:9b:0d:bc:10:2c:d6:5e:eb:d9:
         a4:10:b7:f9:5d:4f:71:0b:13:d4:ab:52:3b:45:9c:eb:0e:dd:
         97:d3:d5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:02:15 2025 by rpki-client