Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/726ecb30-b49f-354d-b4f5-25d7f97e1884.roa
File:                     726ecb30-b49f-354d-b4f5-25d7f97e1884.roa (raw, json)
Hash identifier:          L9/31fwrEVb3P+O0hVP8BgIjyiTJQ5S7fokgqdzgR5k=
Subject key identifier:   78:FA:C2:4A:74:A3:16:D8:E1:E6:6D:DB:22:D2:01:CE:4F:85:7E:84
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584A03A545E044032C995D833800
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/726ecb30-b49f-354d-b4f5-25d7f97e1884.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     14061
IP address blocks:        207.154.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:45:e0:44:03:2c:99:5d:83:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=9b9e2ba4-2180-47ef-9d27-591137539836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d8:2c:a4:82:65:a8:2a:c3:04:97:f4:1b:3a:
                    7a:57:ef:0a:12:49:36:a5:0a:22:21:4e:9f:d8:37:
                    e8:b6:eb:b8:97:1a:4b:70:d5:45:9d:d6:d8:1b:4a:
                    de:45:51:85:9e:e3:66:8a:e3:05:f7:16:df:d7:f3:
                    25:2f:64:0b:f4:66:54:86:3c:01:90:79:06:58:c3:
                    8a:37:1c:c3:69:6a:3f:04:d8:9c:00:90:be:43:e1:
                    e0:3b:42:17:76:1c:0f:b1:c1:6a:e0:11:8d:ad:4f:
                    79:0a:8a:61:c2:ad:58:f2:15:50:ba:0c:18:88:0c:
                    97:95:9b:c9:78:9b:f1:39:f3:84:7f:9a:63:95:30:
                    6d:98:10:d1:94:ec:0a:73:6c:2a:51:fa:a8:42:ce:
                    81:fc:57:24:33:e9:af:3b:1a:97:40:a1:db:01:4b:
                    68:6b:1a:62:34:ee:30:cf:25:b1:fc:6f:df:65:ed:
                    ce:9e:1d:f0:e4:ff:af:1b:3e:8c:86:44:cf:c9:fd:
                    cb:ed:43:16:a8:d0:ad:d0:2d:71:96:95:ef:c6:a3:
                    b5:6b:2d:c2:7f:c0:3a:29:59:14:f5:6b:40:6e:4f:
                    cd:52:4b:89:bb:49:90:48:d4:f6:59:88:c3:8b:28:
                    be:37:48:a7:41:e6:45:0c:67:c7:35:99:f9:83:35:
                    b1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FA:C2:4A:74:A3:16:D8:E1:E6:6D:DB:22:D2:01:CE:4F:85:7E:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/726ecb30-b49f-354d-b4f5-25d7f97e1884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.154.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:93:84:93:25:7f:7b:28:00:02:29:7b:68:f4:21:1b:f8:78:
         2e:6f:af:73:82:4d:69:b1:ba:73:a8:0d:6c:42:f0:7a:35:19:
         e9:32:f8:3c:f2:25:c3:91:31:f0:b0:a5:95:c2:28:a9:b3:ca:
         40:6a:0c:ad:04:c3:45:4c:03:5c:2c:93:53:3f:05:76:e7:1a:
         f6:17:bf:25:29:09:a1:33:d4:a1:36:11:a6:8c:af:0f:75:c2:
         b3:14:7f:e8:57:cc:0e:03:52:d6:33:82:1a:8b:46:88:4f:9c:
         25:4c:bc:84:6d:f2:cb:46:b4:07:0d:a1:66:99:67:fa:5b:d4:
         9f:d9:7b:7a:09:4e:75:16:f4:9a:9f:9c:04:9a:94:41:5d:36:
         36:ef:9a:c6:d8:5d:ff:3e:85:a6:d1:f7:f9:ea:33:30:73:ef:
         43:eb:1b:6f:08:d9:64:f6:51:c5:4f:b9:62:3c:6a:af:1c:c1:
         87:d6:b5:e0:bd:35:39:78:b9:ec:07:73:3f:8b:b0:f7:39:bf:
         d8:21:ca:c3:e1:50:33:5a:d5:85:7f:43:88:91:3f:63:c3:26:
         25:a1:35:b9:48:f2:69:ed:6d:5c:80:ec:11:54:e2:b2:c5:b7:
         9d:24:52:0e:54:4c:d2:d4:80:85:24:9d:54:2b:12:f6:92:07:
         4b:f8:ef:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:42:08 2025 by rpki-client