Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78051ed4-fc44-463a-bcb4-2ff2c20b6193/a9353c5e-651b-3c52-b241-5ac4899e88ee.roa
File:                     a9353c5e-651b-3c52-b241-5ac4899e88ee.roa (raw, json)
Hash identifier:          KUtSML4xwMaFh3J5nGbc7A5JSYo7LcwOhBxkApX4n38=
Subject key identifier:   DC:B8:53:6D:FF:57:88:9E:7A:6C:6D:9D:91:7A:2A:F0:BD:1D:12:23
Certificate issuer:       /CN=78051ed4-fc44-463a-bcb4-2ff2c20b6193
Certificate serial:       010D0C9F4328584A2C20184DBE36C25F20217980
Authority key identifier: 23:5A:39:AE:14:7C:3B:47:DA:27:59:80:6B:0A:CE:5B:D3:C7:A1:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78051ed4-fc44-463a-bcb4-2ff2c20b6193.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78051ed4-fc44-463a-bcb4-2ff2c20b6193/a9353c5e-651b-3c52-b241-5ac4899e88ee.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     398035
IP address blocks:        207.228.196.0/24 maxlen: 24
                          207.228.197.0/24 maxlen: 24
                          207.228.198.0/24 maxlen: 24
                          207.228.199.0/24 maxlen: 24
                          216.73.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78051ed4-fc44-463a-bcb4-2ff2c20b6193/78051ed4-fc44-463a-bcb4-2ff2c20b6193.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78051ed4-fc44-463a-bcb4-2ff2c20b6193/78051ed4-fc44-463a-bcb4-2ff2c20b6193.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78051ed4-fc44-463a-bcb4-2ff2c20b6193.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:18:4d:be:36:c2:5f:20:21:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78051ed4-fc44-463a-bcb4-2ff2c20b6193
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=b79460a4-38dc-4f2d-94e9-7ce6b51fa083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ad:d6:03:a0:cc:c9:ca:0c:1d:35:20:e8:4d:
                    7f:b4:e1:9b:fc:df:a3:40:06:0a:75:b6:fa:f7:f2:
                    03:7f:fc:b5:aa:ec:fc:c4:bd:39:74:98:4d:6c:bf:
                    ac:4a:7b:cb:61:30:c9:16:f8:c1:a5:e1:7b:95:0f:
                    14:fe:9d:78:d8:ab:b7:6b:e3:66:10:cc:f6:df:62:
                    27:ca:0e:f3:ab:f5:c3:c6:4b:e8:23:31:b2:fe:2e:
                    0a:6f:ac:31:c5:f9:86:d1:d7:88:c5:2a:f3:71:c3:
                    52:36:d8:15:44:ac:f0:14:e6:f9:10:29:f7:31:07:
                    18:50:a7:c3:7f:18:5f:6e:10:4d:cb:01:b8:b7:a1:
                    ba:41:2f:a3:07:31:a9:18:21:cf:6f:02:74:d9:9f:
                    19:fa:9f:36:e4:84:c2:de:bb:d9:8a:a9:00:e2:ce:
                    0b:e6:d0:5a:02:41:d4:a9:52:a2:dc:d7:b7:c2:5c:
                    86:ca:c2:42:87:ce:ce:77:3d:19:0e:6a:43:c5:b3:
                    f0:9c:a4:21:c8:88:2e:a1:5e:64:80:cd:c7:44:d4:
                    0c:dd:a1:12:c1:07:08:c6:59:ac:ba:f5:db:5b:25:
                    be:5c:a1:a0:9e:93:35:98:f5:0f:aa:8f:d7:00:d8:
                    da:2d:46:c8:ca:e5:b9:6f:59:c9:e4:cc:3c:df:82:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B8:53:6D:FF:57:88:9E:7A:6C:6D:9D:91:7A:2A:F0:BD:1D:12:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78051ed4-fc44-463a-bcb4-2ff2c20b6193/a9353c5e-651b-3c52-b241-5ac4899e88ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78051ed4-fc44-463a-bcb4-2ff2c20b6193/78051ed4-fc44-463a-bcb4-2ff2c20b6193.crl

            X509v3 Authority Key Identifier:
                keyid:23:5A:39:AE:14:7C:3B:47:DA:27:59:80:6B:0A:CE:5B:D3:C7:A1:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78051ed4-fc44-463a-bcb4-2ff2c20b6193.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.196.0/22
                  216.73.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:bc:c3:86:16:f7:f3:4d:f1:7e:3e:b1:49:dc:e1:2b:c1:6b:
         9a:cb:89:3d:fe:df:42:67:3f:a2:6e:32:3e:fa:f4:19:31:8e:
         34:37:1e:e4:27:06:97:10:5e:e1:57:f3:dd:59:cc:1c:ea:dd:
         33:b0:63:94:a5:31:d0:f3:dc:84:83:92:7e:95:47:6f:ed:d4:
         21:a7:96:3c:31:7d:03:b4:c7:d8:fc:e8:4c:1b:ee:d5:9e:dc:
         2b:72:44:22:77:c3:f0:4b:81:a2:1d:e4:b0:68:cd:12:bf:92:
         ec:43:c3:b3:82:83:f1:37:c7:bf:6c:1c:31:97:70:9c:67:4b:
         af:09:5e:60:a0:af:94:8a:69:7e:5f:59:04:b6:72:3d:2f:c5:
         c1:a3:14:4b:74:82:68:7b:c2:74:8b:3a:11:d6:96:37:90:fc:
         36:65:96:8e:3b:46:80:6d:50:70:57:4d:88:0b:50:a9:be:4f:
         27:38:8a:92:33:b1:b7:39:54:6e:3c:95:5f:6a:fe:f9:b0:84:
         f6:11:9b:b3:10:ea:d2:8f:7e:8c:ec:b5:ad:d1:80:aa:19:2b:
         2e:3c:dd:55:cc:88:fb:12:2d:34:8b:87:e9:3e:48:97:ab:e7:
         4e:e1:06:44:07:bb:5b:61:c5:d7:af:7b:a8:5a:13:a2:ca:db:
         c4:8d:1f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:07 2025 by rpki-client