Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/378d08ce-e536-3e86-88bf-5445fbaa2160.roa
File:                     378d08ce-e536-3e86-88bf-5445fbaa2160.roa (raw, json)
Hash identifier:          HNwxZ6n0EtiqSNAvT2HL5fmKp+p/I1d080wjNMK2GZM=
Subject key identifier:   AF:AB:02:9F:41:88:C2:FC:85:21:DF:18:4F:F1:50:9A:3B:1E:C5:B4
Certificate issuer:       /CN=3f61b400-76de-4d47-93da-b04c33b5a504
Certificate serial:       010D0C9F4328584A23BFFF30454994447F4AAB30
Authority key identifier: 26:B9:26:5A:06:2F:12:37:EE:F0:69:D4:14:DB:9F:74:3A:6A:80:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/378d08ce-e536-3e86-88bf-5445fbaa2160.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        192.67.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/3f61b400-76de-4d47-93da-b04c33b5a504.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/3f61b400-76de-4d47-93da-b04c33b5a504.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:bf:ff:30:45:49:94:44:7f:4a:ab:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f61b400-76de-4d47-93da-b04c33b5a504
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=26c3ab37-c28e-4494-a1a7-ce6b1d7c2145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:49:a8:0b:e2:74:56:93:67:98:1a:67:0b:69:
                    c9:3c:bb:89:25:d2:dc:2b:63:dd:5b:81:59:b2:1c:
                    c1:ca:c7:d3:bf:51:fa:3a:15:2e:51:1d:cf:51:d9:
                    b4:0b:b8:c3:75:19:ff:05:de:9f:5d:6d:b2:3e:b7:
                    21:11:47:64:e0:5b:76:31:f4:47:17:29:3d:ad:55:
                    80:0d:d6:d0:65:92:6d:2d:ce:f2:f8:e6:e4:49:b6:
                    f1:eb:fe:5b:b0:6e:67:8c:4f:e5:95:2f:a8:d4:ee:
                    a5:88:49:3a:e0:0f:f7:1a:61:40:91:30:59:80:97:
                    e8:50:6f:cb:df:e6:ea:87:63:a6:93:c9:6a:4c:fe:
                    a4:35:6c:4c:65:1f:c3:94:cc:4c:38:df:31:4a:e9:
                    ee:c0:94:52:c5:13:4e:3a:7a:3e:f4:47:eb:fb:9d:
                    fe:fa:6f:40:32:83:3c:c8:e0:94:66:20:c0:44:ad:
                    e1:e6:b5:ac:22:c2:67:9d:33:57:a2:59:6b:46:e3:
                    69:f0:4f:58:bf:cc:4d:a7:f9:bd:cb:e6:17:53:be:
                    80:8b:1b:bd:3a:20:87:4f:5a:2e:e4:0e:61:0e:63:
                    36:15:e2:56:e2:bc:ab:7d:37:e3:9f:5e:e3:53:10:
                    d7:6f:1e:29:0c:41:9a:4d:61:b7:06:8d:32:6d:9b:
                    2d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AB:02:9F:41:88:C2:FC:85:21:DF:18:4F:F1:50:9A:3B:1E:C5:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/378d08ce-e536-3e86-88bf-5445fbaa2160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/3f61b400-76de-4d47-93da-b04c33b5a504.crl

            X509v3 Authority Key Identifier:
                keyid:26:B9:26:5A:06:2F:12:37:EE:F0:69:D4:14:DB:9F:74:3A:6A:80:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:23:62:89:3d:66:0e:3c:44:2c:09:1c:bc:d8:66:3b:7c:a8:
         44:8f:a3:b5:a7:fd:3b:e8:97:5a:e7:e2:e9:b2:62:92:06:28:
         28:3f:ba:13:f1:32:fb:af:b1:38:a4:a5:85:9b:8f:fa:b9:43:
         c6:d4:40:1e:76:17:47:d1:02:57:27:55:de:d5:12:07:d0:87:
         08:92:c7:e6:30:67:16:ab:ef:4d:64:91:1a:20:51:a4:d8:f8:
         ca:76:cf:ca:b0:88:c9:de:3e:bc:1c:1b:60:a8:74:ce:f0:d6:
         86:43:b5:a6:4e:2b:a8:d1:94:2b:ee:7d:cc:99:4f:79:72:61:
         c5:3a:32:49:3a:bb:e5:28:22:2d:be:47:66:c0:9d:dc:39:06:
         e9:e7:1b:c0:dc:bd:5c:92:69:be:2a:25:77:b5:15:36:8d:20:
         c2:34:3e:ab:f5:dd:ea:e9:57:62:89:d4:ff:47:ec:c1:fc:ef:
         cf:5d:5b:63:5a:8a:37:90:b9:5c:5d:a2:f6:ed:b6:65:6b:9d:
         d9:5f:1c:95:5d:ed:c0:41:be:4d:f2:1e:1f:d3:49:db:79:08:
         c0:d2:6b:3b:94:a5:50:c3:5c:95:24:5c:26:49:1c:30:76:56:
         7e:cc:9b:48:b0:b8:2f:f1:72:b9:4e:85:98:28:0f:ea:e8:6e:
         be:ef:6d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 03:48:31 2025 by rpki-client