Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/76604941-8432-348b-a408-53b699591ce1.roa
File:                     76604941-8432-348b-a408-53b699591ce1.roa (raw, json)
Hash identifier:          Q/EqlJIixsG7kunTfpnyzh+qtX+klsOJcAFe2H0xIBw=
Subject key identifier:   8A:65:FA:B1:B6:B1:10:2A:0C:58:3A:D8:FF:1C:27:1F:96:75:49:6F
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F432858498CFF07C7EC3F92ECC6FAF420
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/76604941-8432-348b-a408-53b699591ce1.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     2827
IP address blocks:        207.54.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:07:c7:ec:3f:92:ec:c6:fa:f4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=3094e439-d1ce-4194-92f7-933a4c353885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d4:72:a5:68:3b:26:09:cf:ae:ed:2d:ad:76:
                    ac:c7:b3:7c:f5:14:4e:1e:d2:db:14:d6:e2:2a:a1:
                    40:55:c1:d2:9a:1d:a7:be:e7:e0:00:00:d7:a9:9b:
                    81:4b:d4:de:b6:db:04:bf:d0:de:a2:71:9b:ae:06:
                    c9:73:a1:87:1f:7b:fe:c4:05:a3:bb:90:00:84:65:
                    17:d8:d0:db:3c:9b:d4:6e:12:58:18:0c:54:d1:65:
                    af:69:30:52:ad:f0:63:47:51:7c:8a:db:c8:c1:02:
                    0b:bd:71:b3:48:30:47:e4:4c:14:9a:9b:12:c6:11:
                    18:57:49:47:f7:fb:b2:d3:05:fd:8d:69:75:8a:26:
                    46:9e:de:1d:de:c3:45:b3:8c:0f:e9:67:54:fb:9b:
                    2a:aa:87:16:01:4f:76:9c:1c:45:19:5f:f0:0d:c8:
                    d9:e5:c0:43:55:91:2e:75:64:9a:57:2f:fc:26:25:
                    5e:63:6b:56:e2:ce:ea:6a:3a:20:31:27:56:cf:cf:
                    ac:c5:f3:c0:c7:c6:1d:a6:e7:d6:7e:4d:1a:d3:50:
                    df:0a:9e:c7:9c:fa:c9:ef:9b:b2:87:34:57:3f:3a:
                    f0:3c:6f:a3:8f:1b:45:3e:68:51:07:2e:a4:3f:22:
                    aa:0a:3a:86:e7:bd:c9:4f:01:fc:74:22:a0:56:99:
                    75:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:65:FA:B1:B6:B1:10:2A:0C:58:3A:D8:FF:1C:27:1F:96:75:49:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/76604941-8432-348b-a408-53b699591ce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:98:26:c8:ab:6e:35:88:75:ce:62:a2:c1:2f:76:2c:35:b8:
         6c:c5:7f:de:e2:ba:27:8b:df:77:b9:7f:06:be:d0:f9:bb:11:
         cb:ba:30:ab:1e:03:c7:09:4b:e4:97:b3:1f:75:32:86:d0:e9:
         a1:21:01:1f:44:44:dd:93:ed:19:44:bc:f3:e8:d7:a7:e1:b7:
         a1:33:70:50:85:b3:35:5d:7a:8a:01:6b:2f:03:6f:58:71:cc:
         34:7d:d5:25:de:ee:96:84:db:eb:44:91:06:a2:38:51:82:df:
         ce:a9:e5:81:b3:34:bb:7f:3a:80:77:22:59:28:98:9d:8c:99:
         bc:aa:e1:62:d6:26:e5:57:d6:52:4e:1f:9c:83:22:c6:41:52:
         c7:2c:9b:5d:0c:4a:2c:57:2e:6b:2d:c3:e7:29:e4:18:ac:40:
         02:53:aa:06:3e:7b:23:1d:ab:7e:6d:c6:7c:38:11:49:d6:ec:
         f9:1c:dd:59:fb:6a:b0:b8:74:28:81:e9:93:f0:5d:e0:cd:83:
         62:ea:d9:1a:7e:ef:55:10:bd:c6:d2:f7:93:60:9a:92:e1:63:
         74:2d:96:b9:f8:4d:12:82:51:4c:20:56:94:28:84:fc:9f:5c:
         ef:9e:93:cb:7d:73:d9:47:f5:6a:cf:09:63:ff:8a:03:38:f7:
         d0:72:63:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:47:46 2025 by rpki-client