Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/a7022117-2261-325b-91f1-75f2cb990a8a.roa
File:                     a7022117-2261-325b-91f1-75f2cb990a8a.roa (raw, json)
Hash identifier:          Ml8XFMl7FoQejv63Qh4SlqRjyIVSNLjOmId5vslf/kQ=
Subject key identifier:   87:17:13:29:6C:94:8E:5B:96:18:51:4A:FA:23:D7:3E:D5:8A:FB:2D
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F4328584ABE4495CC1E334F3052080180
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/a7022117-2261-325b-91f1-75f2cb990a8a.roa
Signing time:             Mon 04 Aug 2025 09:22:32 +0000
ROA not before:           Mon 04 Aug 2025 09:22:32 +0000
ROA not after:            Sun 02 Nov 2025 10:22:32 +0000
asID:                     51847
IP address blocks:        207.174.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:be:44:95:cc:1e:33:4f:30:52:08:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Aug  4 09:22:32 2025 GMT
            Not After : Nov  2 10:22:32 2025 GMT
        Subject: CN=8cbb690c-5590-44b3-ba2d-99a628065ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:71:57:73:26:80:2d:7c:bd:81:bb:6e:98:fc:
                    bf:58:57:ba:51:91:88:6b:d3:b4:5f:1d:a6:65:ff:
                    a2:0f:4e:10:01:0f:1c:ab:dd:07:f3:e5:bb:5a:6d:
                    64:b4:c5:e7:84:9f:a3:b4:de:36:07:66:aa:99:b2:
                    ba:ae:a2:c2:d6:ef:9b:34:d7:5e:92:d5:69:c1:99:
                    59:e1:1a:1d:68:25:2d:60:30:ce:8e:61:87:ee:1a:
                    63:2a:cf:24:41:89:e1:19:d3:d1:3f:ad:a9:60:0b:
                    f1:fd:e2:db:19:f9:6e:85:a6:d7:ed:c0:f2:e6:51:
                    d6:75:58:00:5a:cc:a7:1b:9a:df:02:35:2b:78:d0:
                    7b:0b:d3:e3:88:55:4b:4c:06:2d:85:7a:0f:25:fa:
                    fb:1a:0c:2b:22:fb:6d:35:c8:f4:2d:a6:c2:7d:e5:
                    46:a4:ed:cc:f3:1a:fa:b4:c3:af:c4:ab:10:f4:ab:
                    40:d1:aa:c5:00:65:ba:a8:83:76:8d:f8:f0:8a:a5:
                    dc:e0:b3:90:6a:b3:07:01:0a:f9:2b:2b:2c:cf:9a:
                    a7:a5:95:56:b0:7d:7f:dc:be:28:b7:e2:ec:69:e6:
                    c7:8a:79:f1:e6:ed:1f:5f:82:23:39:94:a4:bc:41:
                    6b:8c:57:1e:0a:86:73:d5:74:20:2a:ca:0e:10:9e:
                    2a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:17:13:29:6C:94:8E:5B:96:18:51:4A:FA:23:D7:3E:D5:8A:FB:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/a7022117-2261-325b-91f1-75f2cb990a8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:8a:39:ab:63:f3:37:f8:44:3b:23:37:bc:ce:a6:e8:85:70:
         fc:03:6b:9c:0b:12:d1:67:d1:60:d2:51:4a:04:e8:14:af:f0:
         d3:ea:8e:21:84:3e:5d:5d:ac:8c:d0:5f:dd:75:1d:3e:51:88:
         bf:2c:e3:ba:5d:a0:ec:4d:da:21:b0:ca:99:8d:3b:aa:65:08:
         25:16:10:09:1a:06:f3:06:e0:62:78:0e:06:9a:8d:d3:1d:1f:
         74:c1:d0:ea:63:66:c6:dc:d8:a0:46:0c:7c:f4:7d:19:96:0e:
         1e:76:a0:05:16:65:4e:ae:71:85:9d:1a:b5:ce:0f:24:7f:6f:
         36:62:cc:4e:2d:44:df:b8:d9:32:05:5a:cd:80:1f:a7:6a:35:
         11:2a:e8:51:9a:66:68:e3:2e:5d:cd:c9:fb:e4:60:12:29:b5:
         e0:97:aa:92:bc:4e:ec:68:e0:8a:0c:4b:db:5a:ff:e2:51:45:
         d8:11:05:7d:07:64:57:7a:ca:43:90:c7:41:e0:6f:63:03:d7:
         71:ba:ef:29:5f:33:e2:08:cf:66:68:10:1d:f8:1b:0b:f8:c7:
         06:58:b8:d9:8d:49:65:99:c3:69:3c:98:a1:e8:58:0d:75:40:
         81:22:c6:a0:14:a5:04:61:33:58:2a:70:e7:85:bd:eb:65:a1:
         da:6f:ab:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:49:35 2025 by rpki-client