Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/cc6341c6-35dd-3f63-bbc2-34872a10d339.roa
File:                     cc6341c6-35dd-3f63-bbc2-34872a10d339.roa (raw, json)
Hash identifier:          dDEZmf4p/8fppVQrcmkUavkZp/gvXr4KDhD5Ihh9X7w=
Subject key identifier:   41:F4:DA:E9:A0:0E:BC:ED:CB:24:A5:9E:BD:D9:B1:DF:D9:57:B8:26
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584A119AC57C28E2C5CFC12A5500
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/cc6341c6-35dd-3f63-bbc2-34872a10d339.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     6079
IP address blocks:        207.229.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:c5:7c:28:e2:c5:cf:c1:2a:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=1de7ffb7-7c42-4dcf-a874-4984dd0f2e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:e8:c2:1b:70:a3:be:7f:5c:78:9d:6f:0c:
                    15:18:1c:36:03:9a:c1:e4:c0:b7:96:83:44:b6:4c:
                    b3:79:ad:78:36:19:55:9a:75:7f:2f:22:91:ec:d7:
                    40:30:9d:d4:28:8a:b1:5b:28:33:61:70:15:c9:41:
                    3a:ed:16:81:bb:37:69:b4:03:96:ff:b0:6d:8d:9a:
                    f7:76:22:1d:3b:d6:b9:b3:7e:9a:18:60:42:58:1f:
                    a9:45:34:7f:61:ee:9b:b0:f4:17:11:73:40:83:0d:
                    90:ba:76:33:6e:6b:fe:1c:08:cd:94:8d:8b:f5:86:
                    9c:1a:74:a8:2a:b2:42:99:fb:6a:69:03:a6:9b:49:
                    ac:b3:04:a7:1a:35:90:16:63:99:cd:de:6d:b5:8b:
                    69:99:f7:b1:b9:10:42:9c:a0:23:69:00:00:2e:f6:
                    4b:8f:13:8f:a4:3b:3a:8b:f6:ad:76:23:73:3b:f1:
                    ce:e9:d2:72:85:64:2e:b4:39:e6:6f:07:9f:d0:c6:
                    a7:6c:57:db:77:3d:96:b6:40:55:79:3a:13:5d:2f:
                    3a:86:9a:1c:7b:d8:49:cc:3c:4c:36:3f:ef:d3:43:
                    2a:2c:c6:ef:ab:29:a5:e7:78:ed:31:e2:19:3e:90:
                    63:44:57:81:b6:39:85:1e:63:6d:99:3a:be:00:70:
                    64:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F4:DA:E9:A0:0E:BC:ED:CB:24:A5:9E:BD:D9:B1:DF:D9:57:B8:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/cc6341c6-35dd-3f63-bbc2-34872a10d339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.229.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:34:2f:5d:d7:ec:e4:84:0d:24:bf:3d:34:28:65:1d:f8:3f:
         a5:c3:ac:32:1d:41:8c:b2:42:64:fc:13:21:7e:57:03:e6:fa:
         16:a4:bc:3e:6f:41:c5:c6:41:bf:12:97:b2:44:bf:c6:63:85:
         e6:77:6a:b8:bc:0a:6c:c5:b5:b8:bd:68:3a:03:21:01:a6:46:
         a4:c9:99:d4:94:17:70:14:29:38:a9:dc:4d:cd:6e:79:23:44:
         95:bb:98:fc:80:96:6f:17:f3:c2:a8:03:5e:f1:46:f8:23:17:
         b9:4c:16:03:fe:56:ce:11:fc:25:51:f3:55:9b:02:f4:55:8c:
         61:d4:0d:fd:4c:dc:18:fd:aa:4b:86:12:49:19:a7:e1:ef:15:
         13:53:cd:49:90:45:9d:e7:44:75:e0:a6:5a:72:f0:9b:99:46:
         0d:82:6c:eb:37:a6:42:1f:b6:6c:3c:82:20:c0:74:26:74:53:
         a6:43:ea:4a:8e:37:d7:56:52:8d:96:70:3a:90:9b:85:c5:9b:
         67:18:9b:c7:ff:00:b2:dc:78:0e:cf:20:13:ba:d0:38:d9:75:
         b3:f2:b9:f8:c6:e0:70:71:cb:3d:77:66:21:a3:f2:fe:df:2a:
         c8:7b:9b:f3:48:d4:ea:f6:47:19:e3:1c:2f:c2:c4:6c:91:6b:
         cc:6a:6d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:13:38 2025 by rpki-client