Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef4fa445-b9e7-350c-9b3d-4a1442d2a629.roa
File:                     ef4fa445-b9e7-350c-9b3d-4a1442d2a629.roa (raw, json)
Hash identifier:          LIRZqJAhCfz+1feItgV/RAkW16a79oYLo4gXReMMuTM=
Subject key identifier:   17:0E:A7:8F:40:6F:23:E3:9D:4B:00:DF:1F:4C:3C:D8:B5:26:F4:AC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0CA97C0AB197078E57080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef4fa445-b9e7-350c-9b3d-4a1442d2a629.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397232
IP address blocks:        199.7.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:ca:97:c0:ab:19:70:78:e5:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=bab219e8-b39e-4453-9ef4-c76f4df6e250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3c:cf:89:40:c5:62:e6:8c:3c:2c:50:6c:78:
                    cd:c0:2b:eb:34:18:64:f9:b0:08:2f:d0:d4:1b:dd:
                    14:e2:4c:af:61:c3:13:60:d7:24:41:12:74:cd:63:
                    96:ca:ec:4c:53:15:09:27:f8:36:5b:ad:c4:cf:ea:
                    63:39:98:33:04:6d:ef:8a:3f:d3:8b:b4:90:b6:d2:
                    8c:93:f3:fd:23:ef:20:68:90:64:1e:b8:dd:60:bf:
                    a1:7b:82:bf:ca:00:8b:3e:d8:10:6e:1e:18:51:84:
                    24:38:5a:e5:11:de:53:ac:e7:4b:d8:af:68:b1:a6:
                    6c:02:c8:fc:b4:19:7d:ac:b8:75:a7:bd:0d:44:a1:
                    6c:51:b2:6a:ed:8c:79:f3:e8:72:c0:99:44:19:ae:
                    12:5b:bd:df:d3:98:2a:a6:cd:4b:39:79:05:fb:a9:
                    c2:a7:56:b9:7f:19:2f:37:1d:3b:c6:b9:83:48:a5:
                    00:90:96:05:be:8f:2d:16:b7:ee:39:37:35:9e:df:
                    a6:a2:de:74:76:f2:0a:29:5e:95:51:d7:e3:86:75:
                    84:07:22:45:2d:b7:fd:47:72:e9:54:7c:fd:70:27:
                    69:44:9e:35:63:89:85:4a:46:f2:f4:9c:75:e1:24:
                    ec:66:e0:3a:3f:59:0b:33:05:c9:8f:3e:d5:30:f2:
                    09:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0E:A7:8F:40:6F:23:E3:9D:4B:00:DF:1F:4C:3C:D8:B5:26:F4:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef4fa445-b9e7-350c-9b3d-4a1442d2a629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:5f:b7:88:30:0e:05:7d:be:29:2a:0e:9d:df:bb:fe:d4:a6:
         ca:1e:99:29:cf:1d:e0:e6:62:ee:85:86:a0:96:7e:07:37:ef:
         61:d9:8b:e4:ca:b6:1c:0f:3d:89:46:8d:38:bb:01:29:26:22:
         f2:86:19:cc:8a:7b:8a:d2:b0:c8:36:96:98:7e:20:bd:13:0b:
         81:67:89:13:ea:83:ef:8c:59:76:a2:fb:62:88:ea:66:6a:5b:
         2f:ce:d0:34:6a:38:5c:e2:85:80:32:64:f5:57:58:67:8b:64:
         b9:c7:a8:35:21:7d:ba:18:12:e9:9e:7c:03:00:4f:e7:42:8b:
         c8:0c:0e:b0:99:c4:01:d6:d8:81:3b:ee:f6:62:c2:09:fe:24:
         80:8a:e0:c7:14:f2:6f:32:03:31:b5:00:38:a4:a4:f2:df:14:
         30:3b:0a:c3:f4:08:55:af:5a:ca:04:cc:3a:f5:e2:50:44:81:
         ac:6d:31:35:07:7c:88:2d:c9:a0:45:de:1f:51:c6:1d:a3:12:
         de:78:71:e6:bb:44:f0:fa:26:3c:68:2e:2f:dd:49:c0:1c:3b:
         ff:2d:f0:be:d3:96:0c:ef:9c:86:23:e0:77:40:19:76:f3:6a:
         9b:b4:b3:72:19:67:42:e8:a6:a3:2b:3c:cc:f1:01:0e:f6:b6:
         a3:7e:ff:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:45:07 2025 by rpki-client