Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/2222c7de-616c-3828-a3fc-0177bd449548.roa
File:                     2222c7de-616c-3828-a3fc-0177bd449548.roa (raw, json)
Hash identifier:          Kk/1VoOtfX0ANmAkGVY4aZJsgPeZ2Mi0pCPpzYhl1+0=
Subject key identifier:   F3:C4:DB:DC:FA:93:AB:6B:0A:36:CC:D9:78:A0:45:91:59:97:20:A6
Certificate issuer:       /CN=77a1f652-62bb-4b22-ac07-0b2b88868297
Certificate serial:       010D0C9F4328584A89A62050E12AAAEC2AEA7820
Authority key identifier: B0:40:EA:26:82:DB:B6:69:CA:9C:85:09:9B:7A:1F:47:6D:C6:58:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/2222c7de-616c-3828-a3fc-0177bd449548.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     47969
IP address blocks:        207.167.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/77a1f652-62bb-4b22-ac07-0b2b88868297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/77a1f652-62bb-4b22-ac07-0b2b88868297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:20:50:e1:2a:aa:ec:2a:ea:78:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a1f652-62bb-4b22-ac07-0b2b88868297
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=7abc5493-6d6c-4392-af38-7fe53fdf05ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:41:35:c3:38:c9:8a:cb:f1:45:0c:19:cf:4b:
                    61:36:b6:ed:44:4f:2d:38:00:38:b7:bf:f7:f7:1f:
                    91:d0:ed:91:6e:84:24:d3:83:54:30:03:82:ed:10:
                    16:2f:a0:ce:a3:b2:65:bc:49:9a:82:9d:7a:84:16:
                    0e:b9:9d:56:6d:2e:f7:52:b3:ec:5a:16:7b:19:1b:
                    97:fc:4c:39:5a:d0:c5:e5:62:bf:c1:b2:93:f2:39:
                    36:a9:29:c1:eb:84:85:ab:ac:ac:e4:3b:e3:2d:e1:
                    a9:d2:08:dd:b8:d5:f8:c7:8c:3e:aa:6c:10:3a:51:
                    1a:58:75:dd:0e:d1:20:e6:f2:9a:20:60:be:67:8d:
                    49:f0:d8:7d:af:24:b5:28:45:7d:86:9a:db:45:20:
                    e2:44:ad:b0:aa:df:7d:2f:a3:de:bc:d8:d8:13:62:
                    f5:5c:c9:97:12:0e:8b:0e:32:70:ad:c5:c7:53:e6:
                    05:30:fe:20:26:19:32:59:de:56:13:8f:1f:a3:c7:
                    d0:92:52:4a:67:71:d5:7e:61:cc:70:23:b1:95:b5:
                    d7:ac:61:f3:c7:47:e9:16:47:83:3f:7b:77:a7:0f:
                    e4:50:23:07:ac:22:58:ce:eb:ea:4a:c0:ca:86:99:
                    28:bd:3f:19:8f:da:7f:9d:df:6d:0b:10:36:1e:c7:
                    0a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C4:DB:DC:FA:93:AB:6B:0A:36:CC:D9:78:A0:45:91:59:97:20:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/2222c7de-616c-3828-a3fc-0177bd449548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/77a1f652-62bb-4b22-ac07-0b2b88868297.crl

            X509v3 Authority Key Identifier:
                keyid:B0:40:EA:26:82:DB:B6:69:CA:9C:85:09:9B:7A:1F:47:6D:C6:58:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f6:aa:58:bf:27:33:ce:08:92:a9:49:49:f3:7a:ff:c9:68:
         f3:3c:d8:33:ec:ba:c4:7b:27:e3:7c:dd:b2:a6:05:f0:58:98:
         d2:28:6a:76:9c:38:ae:74:a9:fb:dc:9d:1a:37:1b:75:f0:76:
         00:bb:f4:77:94:81:9d:4c:f8:b0:78:a6:00:d8:0e:90:31:63:
         cf:37:f9:f1:01:49:a1:44:fe:e4:42:30:4e:c9:66:2b:17:df:
         1e:ea:51:0a:49:1b:a0:01:2c:d3:46:65:aa:26:27:b9:83:a3:
         ee:72:27:b8:28:59:ad:87:22:32:f0:f3:54:89:df:dd:f2:48:
         71:ea:20:34:b5:8d:4c:57:55:f4:a2:8d:79:9d:e9:7b:93:15:
         03:5d:42:b6:d6:1f:e1:83:76:eb:fc:73:89:a6:0e:3d:20:e9:
         8d:a8:cd:c6:6b:e3:6b:e8:98:b2:39:3b:cd:44:09:7f:2a:90:
         a5:eb:83:69:42:59:88:f2:3f:9f:30:bd:27:a1:57:ea:58:50:
         04:d7:98:ef:df:84:a4:a6:7f:22:a2:7f:30:b5:45:3e:60:e5:
         2d:b9:61:99:80:82:89:f3:34:96:b8:bb:b1:80:5f:e2:cc:89:
         cb:1e:47:ba:de:26:ee:3d:79:b0:3c:e5:1e:03:d9:72:ee:a0:
         b2:18:5e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:06:25 2025 by rpki-client