Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/4d84e689-12d4-3bdb-b52b-6c8923f3fe52.roa
File:                     4d84e689-12d4-3bdb-b52b-6c8923f3fe52.roa (raw, json)
Hash identifier:          4ssCxz+asGNPCN3aOW3TzCwMri31c7IKni0O/ZwaXkY=
Subject key identifier:   A2:4B:BF:7E:A6:2A:DF:60:32:3E:DA:4A:23:B2:63:79:55:4B:C2:5D
Certificate issuer:       /CN=1226980a-2c43-43da-83fd-198696a9b02e
Certificate serial:       010D0C9F4328584A0C05627A078B7CCE8FC62D00
Authority key identifier: E8:73:DD:6F:FA:D7:67:3A:F2:9A:83:1C:E0:12:63:99:41:57:9E:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/4d84e689-12d4-3bdb-b52b-6c8923f3fe52.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        207.110.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:62:7a:07:8b:7c:ce:8f:c6:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1226980a-2c43-43da-83fd-198696a9b02e
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=0c896749-a41e-4d8b-8dc0-c3f5becddb38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:32:aa:eb:5e:e0:a2:8f:27:61:a2:21:44:ed:
                    8f:f4:ec:a4:31:01:4c:f0:a3:0b:22:86:cd:a9:3d:
                    c1:ab:a4:8a:59:d3:72:dc:41:57:fb:13:35:fa:3e:
                    03:a4:4a:8d:08:fc:21:bc:cc:14:15:9c:75:2f:f1:
                    7b:c1:9c:27:80:b0:de:3f:e7:c6:fc:1b:51:7a:49:
                    e2:c6:ce:fe:c2:f4:b0:7f:b1:ff:9e:cc:e1:ff:03:
                    bd:d2:5e:05:a3:a4:b7:99:3f:ce:2b:e8:b0:6f:7f:
                    d4:cf:3b:a7:a4:b5:5f:a7:19:21:73:a6:ef:31:37:
                    ff:74:7f:1a:b2:6e:46:5a:b6:aa:9a:a3:3b:b1:cf:
                    12:89:bd:9b:3e:db:12:f1:64:d5:1d:58:54:fe:2e:
                    7f:2f:bc:cd:2c:2f:a5:e2:65:6e:b2:ce:cf:da:58:
                    25:0b:f3:25:c2:56:e0:0d:00:0c:ef:c5:e9:d6:38:
                    b9:7a:cd:4f:6e:d1:df:48:4b:da:d3:a2:86:db:d7:
                    d6:4f:87:f1:ec:0c:4d:de:64:b3:f6:76:83:b5:af:
                    52:e0:f5:83:37:54:99:75:82:e3:67:40:ee:01:64:
                    ae:bc:b3:33:ad:02:33:e2:46:96:1e:c0:3c:3a:55:
                    03:f8:44:81:d1:60:b5:cd:88:ee:60:7b:d3:cc:84:
                    b5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4B:BF:7E:A6:2A:DF:60:32:3E:DA:4A:23:B2:63:79:55:4B:C2:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/4d84e689-12d4-3bdb-b52b-6c8923f3fe52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.crl

            X509v3 Authority Key Identifier:
                keyid:E8:73:DD:6F:FA:D7:67:3A:F2:9A:83:1C:E0:12:63:99:41:57:9E:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.110.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a2:47:dc:ee:db:e3:59:fc:7e:a8:f0:38:ad:22:16:12:ea:
         1d:01:60:97:81:a1:03:c2:3f:25:3c:fb:e6:7e:94:38:37:6d:
         31:09:10:1e:f7:4f:23:f3:5f:ba:0a:68:1f:ea:cc:ba:82:04:
         c5:13:38:45:bc:21:4c:76:8a:b3:b2:6a:0a:aa:d3:05:46:a5:
         5e:65:42:75:26:2f:a2:ca:26:f3:47:3f:ad:51:b0:ef:35:b0:
         d6:35:5d:bf:2d:d3:1d:73:d6:50:78:12:a6:a0:74:eb:9d:fe:
         ab:52:c8:e3:b9:dc:f7:63:90:3f:22:54:e3:f5:77:3f:f3:de:
         56:f9:ab:7e:19:5d:9e:dc:5d:90:f6:7f:16:38:fb:2a:8d:b5:
         42:3b:af:4a:16:02:6b:d4:2e:76:03:ac:d2:5f:03:77:3e:7a:
         ec:29:c8:61:ce:90:26:37:66:b7:4b:97:b9:c7:7d:10:92:3c:
         83:aa:73:05:86:be:9d:33:e6:02:62:f7:60:2a:c5:b1:0b:08:
         45:02:6d:06:1c:ef:07:2f:16:a4:85:d5:f8:1b:85:7a:c2:28:
         07:30:8b:1a:e4:11:84:12:4c:58:b0:c1:cd:79:2a:7b:da:ff:
         3f:af:de:c5:26:14:e5:61:24:2e:00:3b:e6:45:c3:3d:22:ca:
         32:24:79:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:35:06 2025 by rpki-client