Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa
File:                     784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa (raw, json)
Hash identifier:          Ud/jlywHtZfeKKppS0uSDjQQtPJsjqYtGdpWTGgbefY=
Subject key identifier:   A2:4A:F1:76:8B:9F:CF:0D:AC:74:3C:76:BB:6C:19:58:65:BB:2E:45
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A612B1FDDE7AFE4F889835800
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     22652
IP address blocks:        207.253.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:1f:dd:e7:af:e4:f8:89:83:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=c255505e-3d17-48cd-8d0e-9655d609d4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f3:d2:ca:72:f9:c5:1e:e7:0b:69:0b:25:af:
                    7d:46:45:49:03:2f:ea:9d:ab:a3:17:b3:63:62:58:
                    ad:8a:ef:73:9e:25:13:52:30:c7:be:cf:c7:18:ad:
                    f2:91:e7:85:4c:31:38:5d:84:61:55:20:81:3a:9a:
                    49:d2:fe:3a:4d:a7:b2:79:dc:36:7f:de:60:06:c0:
                    3b:09:ca:d8:9d:df:29:17:0b:fb:bd:ae:23:ec:4b:
                    36:8c:cb:38:26:68:34:5d:56:e4:46:80:4c:57:da:
                    9a:99:55:3a:93:e8:9f:36:79:8c:59:6b:06:e9:bd:
                    69:1c:43:91:d1:f7:e8:ba:53:8f:9d:fb:8c:35:6d:
                    ab:8d:12:96:ee:b9:f5:ca:c3:2e:ff:22:b1:ec:18:
                    8a:0f:ce:bb:78:ea:6d:1f:59:1d:cd:38:ba:55:9a:
                    41:f0:3b:20:ec:1d:b6:06:93:ca:2e:72:27:9e:f2:
                    7e:bb:59:84:fa:5d:77:23:47:54:d5:25:8d:40:e0:
                    8f:95:aa:8b:af:17:89:6f:07:76:0b:fe:a5:09:e4:
                    98:50:5e:c9:59:d3:0e:f3:11:f7:37:e0:ca:04:12:
                    fc:b3:27:be:30:87:c4:4a:11:8b:b2:e9:3a:3e:20:
                    5f:13:66:29:6d:56:da:66:f2:2e:d4:5f:9a:23:7f:
                    ba:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4A:F1:76:8B:9F:CF:0D:AC:74:3C:76:BB:6C:19:58:65:BB:2E:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:75:c0:5e:86:00:2a:52:64:1a:17:37:ba:9b:62:bd:17:c8:
         6b:b4:26:bf:ab:bd:55:f3:5d:03:69:15:11:d6:9b:8b:73:e7:
         2c:5c:92:a1:fa:18:5b:47:f3:a9:17:6d:39:79:9f:b0:12:8c:
         f0:ad:6a:9d:87:50:9d:77:de:ed:02:d6:ac:73:dd:0d:9b:fd:
         fe:5d:2c:64:09:50:22:ca:d1:df:67:ee:6b:04:7b:f4:b8:f3:
         a6:7a:92:4f:39:a8:4c:6b:a5:9d:b0:1d:0f:e6:34:e9:9c:21:
         86:7f:c6:d2:59:bb:d7:0c:65:85:25:24:e0:de:d4:fe:a2:39:
         59:47:ce:5f:68:cc:7e:e2:2e:d3:93:0b:1e:a9:4d:c6:a1:d0:
         83:92:0a:bd:f5:93:77:62:55:29:ad:0b:d7:c3:15:77:59:d4:
         fd:b5:29:df:29:73:05:f0:54:94:f8:51:34:85:96:71:52:b2:
         f9:e6:78:31:b8:6b:56:ea:46:84:7b:79:b0:e0:9f:31:5b:3f:
         78:8c:af:1f:cf:80:d5:82:d1:2f:bb:b8:db:05:11:c3:69:56:
         15:a0:56:8f:5b:51:76:17:aa:ef:43:4e:29:19:3f:ff:f4:9d:
         c6:8a:b7:0a:93:64:22:5f:2a:0b:49:46:dc:ba:1f:18:36:27:
         74:4a:5c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:14:30 2025 by rpki-client