Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/7ea757a6-3e0f-3408-9ea2-aa7a7d9207e3.roa
File:                     7ea757a6-3e0f-3408-9ea2-aa7a7d9207e3.roa (raw, json)
Hash identifier:          r1AwmhtBMGjZqJHl7PidXl6fZK9YRZ6Zyd6CH5jy0vU=
Subject key identifier:   CA:F4:E2:12:3A:45:42:A6:60:CC:5A:5B:F7:CE:3E:A3:9F:97:6F:0A
Certificate issuer:       /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Certificate serial:       010D0C9F43285849C4D4B5301281D68E8B399A00
Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/7ea757a6-3e0f-3408-9ea2-aa7a7d9207e3.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     396140
IP address blocks:        67.226.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:b5:30:12:81:d6:8e:8b:39:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=4746c883-2524-4cc2-9702-6574862c04b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:ff:63:52:14:81:28:d5:3e:d7:a2:0e:d7:
                    71:e9:fb:c4:32:9f:9d:9c:b0:8d:6e:d4:18:b0:81:
                    5a:55:69:e6:6b:59:1f:cc:38:6f:c3:8c:db:20:e3:
                    5e:bb:34:b8:90:24:ad:0c:5f:cf:55:40:9e:dd:0e:
                    ad:21:be:61:75:15:0d:b1:a9:eb:c5:1e:13:c7:2c:
                    3f:2b:94:1d:19:ef:22:a1:0b:2a:ac:9c:80:ff:24:
                    c3:1d:63:46:63:9d:93:88:a3:bc:f5:4e:63:80:0c:
                    18:61:59:19:f2:e7:1a:e1:8f:15:11:f4:1c:7e:68:
                    70:ce:62:9b:6b:64:6d:23:2d:8e:10:96:72:05:d6:
                    08:c8:1b:1b:53:d7:b0:8e:67:7b:97:2c:83:4f:a5:
                    ea:f5:8b:02:a9:f5:73:9d:ba:71:39:51:b3:f3:7d:
                    1f:c6:66:67:9e:b3:06:d8:9a:17:4f:ab:00:16:5f:
                    a4:b3:aa:34:b3:da:08:d5:f8:e7:43:6e:a0:de:d2:
                    28:ac:3a:5a:93:39:e7:f0:7e:00:ea:25:d0:69:c3:
                    46:28:0c:48:80:71:68:f3:d3:37:cf:41:5f:4c:c7:
                    9a:96:16:32:38:c7:fd:ce:1c:8e:6f:2f:93:46:5b:
                    10:ed:d5:9d:75:52:19:4b:83:f6:da:c9:5d:77:41:
                    9c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F4:E2:12:3A:45:42:A6:60:CC:5A:5B:F7:CE:3E:A3:9F:97:6F:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/7ea757a6-3e0f-3408-9ea2-aa7a7d9207e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl

            X509v3 Authority Key Identifier:
                keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.226.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:1e:5a:d4:d9:07:c4:62:79:f8:83:b1:c8:e8:aa:67:18:db:
         b5:cc:c3:9d:06:1f:0f:ac:ba:f9:0b:6d:c1:13:cd:21:a4:13:
         39:d8:84:df:24:88:a8:bd:39:47:da:f3:d0:ba:46:c2:7f:5f:
         76:1a:13:02:2e:65:54:7c:7f:8f:24:68:81:d5:6d:12:4e:91:
         ba:36:ef:06:69:be:61:c6:23:5c:e9:1b:a2:9b:32:14:5d:e0:
         3a:e2:aa:6f:67:56:de:fa:a2:0a:03:3b:e5:b5:50:6d:78:70:
         b7:09:40:b4:0f:4d:ac:a2:9a:0c:10:77:89:68:49:dc:a9:49:
         bf:e1:b9:dd:d0:1c:a5:13:c2:21:db:66:e6:34:83:ba:89:a7:
         48:35:1e:14:48:6c:d3:13:ee:c5:f3:19:72:fc:0a:f4:ad:57:
         52:9f:fa:bb:3f:71:1b:d9:fb:ec:95:d6:59:94:09:9c:fc:b7:
         e3:2d:ea:ae:01:c9:87:53:8d:e9:72:84:a4:a9:39:1f:4a:a4:
         1a:07:ba:b1:84:03:f3:97:92:ea:86:6e:e9:0e:17:71:49:b2:
         3e:1e:24:1b:bf:6d:d9:e6:da:8b:c6:25:ab:fd:bc:c8:08:a9:
         72:b9:25:40:53:ae:1c:2d:6b:4f:8b:49:33:75:fd:4d:6d:b7:
         55:67:d3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:48:33 2025 by rpki-client