Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7b327db6-666b-3c42-a6c5-e0a43a0f66ed.roa
File:                     7b327db6-666b-3c42-a6c5-e0a43a0f66ed.roa (raw, json)
Hash identifier:          yyB1iIZ3ma+ndHQtc3/kOGJ8kB4cqdmzGheqq3EvBmw=
Subject key identifier:   B6:A4:03:DC:FF:CA:AD:54:9D:D0:40:09:29:D3:C3:26:B7:C8:64:BC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FEF77E73146FC47153A90
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7b327db6-666b-3c42-a6c5-e0a43a0f66ed.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397226
IP address blocks:        209.173.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:ef:77:e7:31:46:fc:47:15:3a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=63db8e43-8517-41b9-aa69-dbf1452e457c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:11:ec:08:c0:4d:e1:15:cb:bf:ed:d7:08:d4:
                    09:c7:eb:77:ba:f8:ca:7f:72:d7:6b:fe:cf:12:21:
                    e7:bf:20:39:f7:25:59:9c:25:55:7c:ba:e9:5a:92:
                    a3:92:54:45:a7:6c:e4:11:20:88:ee:e7:94:c0:09:
                    bc:be:27:90:66:92:63:6f:84:b4:01:05:2a:33:51:
                    42:bc:c1:e2:b5:eb:33:24:17:1d:54:6b:5d:a5:dc:
                    d6:89:5b:9c:22:1c:ea:d7:ac:e9:c0:eb:cd:b4:f1:
                    5b:a7:2d:b4:a9:00:0e:e7:ae:04:00:43:58:b1:32:
                    e5:87:76:c9:b1:5c:71:dc:3e:5b:b6:a7:17:72:4f:
                    4e:98:f2:f2:87:35:c3:d3:07:da:e0:da:d0:31:13:
                    d4:ff:94:2e:c5:d2:73:27:54:b0:13:ef:8e:c0:11:
                    eb:02:82:e4:dd:53:69:bf:66:bd:98:b7:04:b4:59:
                    cd:d2:a5:71:2a:e6:fc:2a:ce:b2:65:13:5c:c5:48:
                    0a:35:09:89:f6:95:2f:df:39:34:45:7e:eb:ae:46:
                    9e:98:20:62:c5:66:a7:9d:d9:55:66:f1:13:bc:96:
                    f6:dc:35:9a:23:86:ed:62:a2:65:cd:b8:31:2b:21:
                    97:e4:44:5e:fc:c7:84:5c:cb:f3:8e:ec:38:77:5b:
                    a6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A4:03:DC:FF:CA:AD:54:9D:D0:40:09:29:D3:C3:26:B7:C8:64:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7b327db6-666b-3c42-a6c5-e0a43a0f66ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:53:90:5e:2e:39:ed:dd:68:a7:2d:9e:97:25:d6:90:ac:b0:
         3d:c8:5c:b1:cd:00:40:0f:24:38:da:07:4a:57:dd:f9:31:82:
         2d:fb:d2:75:3e:b7:48:41:6c:8d:2e:47:33:6f:02:d2:87:6d:
         9e:0a:c9:75:35:eb:2a:9f:2b:ad:43:e3:1a:6a:a0:36:c2:39:
         c1:51:41:41:b5:fa:92:55:d6:6b:5d:c7:95:f8:9e:18:36:8a:
         bf:49:28:71:ca:67:72:44:c9:e5:75:71:d3:0a:de:05:15:2a:
         12:b7:90:03:65:72:78:f9:4e:16:28:95:f0:11:e8:a6:ed:fc:
         c8:d8:4c:52:5d:5c:04:a8:45:ef:56:40:53:38:b9:14:a1:18:
         98:19:f5:c8:ec:7d:41:b0:58:07:66:7e:dd:cc:03:49:36:fe:
         ea:29:b6:2a:02:f0:c6:fe:67:aa:20:dd:7a:ae:8a:b1:47:a4:
         03:68:9b:d7:a4:8d:c5:04:df:93:a1:c4:d5:0f:2a:44:b3:95:
         19:68:fc:fb:b5:04:55:fe:94:57:87:73:b5:9a:83:38:27:1b:
         77:10:15:8b:52:b5:1d:85:52:58:33:08:fa:17:ac:a6:f3:e1:
         16:b0:79:bd:af:d3:54:1d:9e:5b:e6:10:79:05:89:bd:f0:13:
         ba:3e:a4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:09:12 2025 by rpki-client