Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe997b40-62f0-4d30-901f-847e499e6078/50553299-09ff-3264-9d59-e4cf7a9d9a3a.roa
File:                     50553299-09ff-3264-9d59-e4cf7a9d9a3a.roa (raw, json)
Hash identifier:          phxS+b2tX4Vj/IvyCQrE+irhWB2R70oGT7zHmNNG1+g=
Subject key identifier:   2D:9A:42:88:50:BA:C4:24:72:46:C0:4A:3A:5E:0A:A6:11:40:57:22
Certificate issuer:       /CN=fe997b40-62f0-4d30-901f-847e499e6078
Certificate serial:       010D0C9F4328584A7D15F91162F8BBEA1D7BE900
Authority key identifier: E0:10:5F:CB:EF:68:49:C1:3C:31:CA:07:EC:1E:98:72:5A:08:24:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe997b40-62f0-4d30-901f-847e499e6078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe997b40-62f0-4d30-901f-847e499e6078/50553299-09ff-3264-9d59-e4cf7a9d9a3a.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        207.174.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe997b40-62f0-4d30-901f-847e499e6078/fe997b40-62f0-4d30-901f-847e499e6078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe997b40-62f0-4d30-901f-847e499e6078/fe997b40-62f0-4d30-901f-847e499e6078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe997b40-62f0-4d30-901f-847e499e6078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:f9:11:62:f8:bb:ea:1d:7b:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe997b40-62f0-4d30-901f-847e499e6078
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=89f70458-1619-48ec-8d97-053faa76bfe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:0d:42:48:84:20:78:d3:6a:0e:c3:09:66:
                    a9:50:bc:25:4e:34:96:91:6e:3c:ba:5a:05:d4:4b:
                    d1:93:54:28:ce:ea:60:cf:33:76:08:9d:5a:bd:4d:
                    80:89:ce:28:14:6f:d1:ee:f2:67:f4:67:7f:dd:53:
                    1a:20:34:ab:61:21:07:5f:2b:27:ac:20:5f:db:59:
                    9e:2f:d5:b7:86:56:0d:fb:db:d4:02:33:58:b0:08:
                    b3:13:a3:29:bf:c7:62:72:f2:a7:24:d9:2e:6a:81:
                    59:96:df:3a:82:0b:d2:3c:60:8b:83:06:ab:0c:c1:
                    41:16:da:b9:3e:5b:32:6e:af:12:40:0e:ae:d8:d2:
                    4d:47:6b:c5:bb:cb:e6:cc:ef:0b:41:a9:86:aa:c6:
                    26:67:eb:06:a3:74:50:e8:a9:54:49:ca:23:79:69:
                    bf:c8:90:f3:7a:13:31:8f:b1:2c:52:c3:74:c4:e8:
                    7b:42:2d:ba:6c:d3:3c:88:3f:2f:f4:88:08:eb:ea:
                    74:10:97:be:5c:4d:29:65:12:01:c4:11:dc:47:b8:
                    66:d6:55:e2:a7:b7:02:77:83:ea:ca:6a:46:f5:c7:
                    96:f3:4a:86:50:a3:4d:e9:9b:be:a0:1a:2e:8e:b2:
                    55:fb:4e:94:f3:50:f8:e1:37:21:56:35:7b:36:64:
                    f3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9A:42:88:50:BA:C4:24:72:46:C0:4A:3A:5E:0A:A6:11:40:57:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe997b40-62f0-4d30-901f-847e499e6078/50553299-09ff-3264-9d59-e4cf7a9d9a3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe997b40-62f0-4d30-901f-847e499e6078/fe997b40-62f0-4d30-901f-847e499e6078.crl

            X509v3 Authority Key Identifier:
                keyid:E0:10:5F:CB:EF:68:49:C1:3C:31:CA:07:EC:1E:98:72:5A:08:24:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe997b40-62f0-4d30-901f-847e499e6078.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:5f:4f:e5:ba:00:e6:72:86:cb:b4:45:f1:19:af:76:9f:2a:
         61:5e:87:c6:6d:27:12:a5:8c:cc:63:70:09:f6:66:4c:08:07:
         30:52:fe:e0:2c:16:79:b0:cd:6a:3a:19:51:3f:62:40:99:0a:
         aa:5b:20:e8:95:e6:41:1f:a7:89:e6:f3:35:f1:10:bd:dd:a1:
         2e:48:52:4f:58:b6:a5:83:9b:48:41:ee:99:75:8c:6f:f2:71:
         03:ab:af:5e:bb:0d:4c:e3:e7:af:6d:e7:9d:00:48:24:78:ca:
         bf:b0:69:bb:07:75:dd:3e:6a:48:b9:58:9b:70:25:46:83:0a:
         62:5f:b7:d2:56:ad:64:0b:d7:43:ff:3f:4e:dd:18:1a:e7:7c:
         94:b4:bb:a1:fd:e5:d7:63:d9:bf:71:1c:44:79:b3:42:7e:b8:
         97:82:e2:dc:47:77:32:8d:83:19:60:fd:b1:36:6b:c7:c7:45:
         97:9c:77:bf:35:d8:81:7e:bd:d1:b6:87:c8:31:2b:b5:21:25:
         e2:0e:07:46:56:b5:ec:6b:e4:19:f3:53:c3:27:fd:a3:60:71:
         61:a1:17:e6:e7:d3:6b:5d:c6:29:87:3e:56:c8:9e:e8:84:da:
         9a:2f:0b:fa:0e:c4:9b:6a:4a:d8:b6:67:67:c8:0d:a8:84:6a:
         1c:c1:60:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:13:25 2025 by rpki-client