Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d007eb10-2559-3493-aafe-ceb04148c323.roa
File:                     d007eb10-2559-3493-aafe-ceb04148c323.roa (raw, json)
Hash identifier:          Ug+pbx49f3EJKXHIlye/ycpsoO61NxOMw+DNQxUOPgQ=
Subject key identifier:   CA:F0:AD:6F:88:4B:27:37:F8:34:0C:03:85:86:73:23:9E:C7:7C:65
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF4A11CF8BF39118376B80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d007eb10-2559-3493-aafe-ceb04148c323.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397238
IP address blocks:        199.7.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:4a:11:cf:8b:f3:91:18:37:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=8baed6d4-f3e9-43ac-937a-f579a62008d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0c:36:83:53:0d:44:4b:76:2b:0d:7d:f5:b3:
                    e6:52:fe:97:07:eb:25:36:8d:fd:8c:60:46:41:8f:
                    19:00:01:4f:2b:45:15:8d:f3:2d:75:44:c4:c3:be:
                    9d:1b:3b:05:61:78:45:aa:86:e5:46:3f:45:85:ae:
                    75:2f:17:39:72:0d:a0:95:78:c0:cf:30:4c:04:a9:
                    b5:f9:c2:b9:93:2e:48:2b:ab:c7:7b:5a:d5:5e:3a:
                    4e:0d:5a:1d:1d:32:d9:e2:0f:5d:d4:60:27:1d:34:
                    da:0d:7e:2c:a0:9b:33:cf:a9:51:e3:e5:e2:60:50:
                    43:0c:33:1c:ea:a6:6e:27:73:c7:00:32:1d:5f:ef:
                    83:d4:3d:03:68:11:31:81:27:2c:b1:9f:e5:d9:78:
                    4c:23:2a:e2:42:95:4a:a2:11:c0:4f:ae:7c:33:23:
                    86:c5:c6:08:f3:82:a9:a1:ec:f3:29:0d:d4:d3:bd:
                    e6:41:70:9f:ac:5d:ab:3f:0f:fe:ec:a6:03:88:37:
                    15:80:dd:65:75:84:65:77:59:cf:f8:5e:03:e5:ab:
                    7c:96:fc:77:17:d0:ef:f7:8d:10:e9:48:da:52:e8:
                    7a:54:33:fa:c9:b5:c5:a0:2d:5b:a1:8b:58:33:73:
                    f3:e2:b9:ab:e9:89:22:d6:7f:d9:8e:7e:c0:07:93:
                    9c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F0:AD:6F:88:4B:27:37:F8:34:0C:03:85:86:73:23:9E:C7:7C:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d007eb10-2559-3493-aafe-ceb04148c323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:bb:4e:3b:07:e4:d0:74:d0:65:00:f6:3c:c3:97:fa:01:2b:
         a8:7a:ac:34:e5:b5:eb:b9:98:fb:82:d7:59:18:b3:18:56:f6:
         94:5e:bb:7f:58:e6:03:a6:fb:5f:e8:d2:f3:95:35:68:40:1c:
         bf:5a:4e:56:fd:8f:79:8f:bf:c1:5d:b3:af:19:55:27:5d:2d:
         10:90:68:a8:d8:ec:63:46:1a:2f:ca:83:fc:a8:23:fb:4e:1d:
         e0:3f:f4:d8:06:62:20:f7:e8:5c:05:9c:fc:3d:76:7a:0d:07:
         76:57:d1:31:71:ec:80:ff:c2:3a:8a:72:25:0b:69:c3:2e:f8:
         6a:aa:82:50:2e:8f:20:4a:2f:34:5b:d4:11:b0:ec:c3:e7:6b:
         1b:29:21:3d:19:fd:be:fe:bb:e3:a3:0e:4a:60:67:ef:03:13:
         3e:4b:b6:cb:03:23:b8:b1:c9:76:ae:73:f7:e4:ff:19:69:28:
         31:b3:57:e8:ed:ea:34:54:50:c5:e4:d8:b2:2e:69:4d:c3:bb:
         83:33:41:d9:47:3d:ca:76:e7:ba:2e:79:70:da:9b:e0:75:5b:
         7a:46:78:28:39:0f:98:94:f5:47:2e:e5:6d:ce:31:47:f7:37:
         47:1c:e1:8f:e3:0d:3a:63:38:61:92:f5:9c:bd:a5:3c:7e:12:
         1d:f9:8d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:31:04 2025 by rpki-client