Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/710ca580-1dad-387f-97c9-134d9d0a2ed7.roa
File:                     710ca580-1dad-387f-97c9-134d9d0a2ed7.roa (raw, json)
Hash identifier:          zQOGR16R8PjngF0TTSH3XLOwWCyMRqDK09Kc2bh+RpM=
Subject key identifier:   C4:17:E5:0C:5D:7D:C6:3F:60:11:39:68:56:92:C8:3B:BD:7D:55:CE
Certificate issuer:       /CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247
Certificate serial:       010D0C9F43285849D16506EDF24B3D3F80ACDF00
Authority key identifier: 42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/710ca580-1dad-387f-97c9-134d9d0a2ed7.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     17216
IP address blocks:        67.212.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:06:ed:f2:4b:3d:3f:80:ac:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=637fb3a1-7d36-4ba5-a06e-4b72babc1b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:0c:5b:04:97:db:b9:dc:9c:f1:7b:09:c3:
                    ea:af:d9:7a:a5:7e:d9:3c:35:ee:ae:97:b8:57:61:
                    c4:cc:b5:46:ef:16:82:00:df:db:c1:ac:5e:4f:eb:
                    fe:dd:96:fd:62:d1:e8:46:2c:62:13:05:eb:b7:dc:
                    17:d9:23:c1:9a:bd:39:f7:db:2f:c5:40:1c:ed:1c:
                    c1:7e:c4:49:36:cb:55:13:98:11:51:62:16:49:8e:
                    47:14:77:e0:70:5f:2b:59:74:99:1d:d1:ef:cb:c5:
                    77:86:02:ef:79:c9:1f:4a:8f:f7:61:f7:67:9e:59:
                    f6:94:f5:9a:c6:cb:fe:67:5a:0b:79:28:92:65:ca:
                    cf:79:62:ce:da:7c:37:05:3a:44:50:c4:e6:62:e9:
                    1f:f7:51:ac:ea:e5:73:0a:1a:f4:62:48:b7:e1:6b:
                    f9:b5:43:f4:a9:2e:94:98:13:7d:68:61:82:7c:76:
                    20:63:1f:9b:c1:af:51:85:2b:7c:48:a8:79:97:3d:
                    01:39:f1:2b:5c:e7:43:c8:97:ff:57:a9:99:1c:31:
                    86:33:e3:61:31:a8:0f:e9:a5:b5:ec:e2:d9:96:55:
                    df:b6:37:f7:df:8b:ce:aa:73:ee:09:c4:03:62:3e:
                    21:a1:72:82:ac:22:6a:14:a0:fa:4c:ec:48:f0:fd:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:17:E5:0C:5D:7D:C6:3F:60:11:39:68:56:92:C8:3B:BD:7D:55:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/710ca580-1dad-387f-97c9-134d9d0a2ed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl

            X509v3 Authority Key Identifier:
                keyid:42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:8b:ca:6d:68:a6:f9:8d:ce:d7:c4:52:59:80:0a:af:53:f9:
         88:a7:fc:46:47:4a:5d:f7:4c:3c:bc:fa:94:ad:b8:f6:51:9f:
         60:8a:00:2f:72:7d:3a:fb:5b:a1:7e:03:2a:74:16:ca:f1:72:
         2e:54:dc:b8:05:e2:13:4c:55:2e:cc:af:c6:83:17:a1:c2:17:
         54:18:b2:4c:2b:5a:15:36:a5:d6:e3:f3:e6:dd:5a:ad:4c:51:
         4e:a7:87:12:cc:3b:96:9d:4a:fe:33:1e:bf:b7:62:97:85:3e:
         2d:13:8b:43:da:a8:12:ea:a3:1b:dd:ba:bb:07:b3:f9:04:fd:
         39:52:b1:d3:f2:7a:a7:38:bc:48:bb:84:9c:6a:fb:3d:bf:dd:
         99:0f:c4:0b:f9:28:a6:77:2d:97:02:2b:19:dd:71:46:79:98:
         58:5b:58:9b:c8:0c:29:22:79:80:20:c8:f6:d7:6b:68:62:de:
         ae:dd:ea:18:f3:97:d5:ac:57:25:65:d0:86:79:2d:64:27:2a:
         ca:60:6b:01:16:e8:8d:30:3c:e1:e3:39:ef:f6:05:24:0e:c8:
         fb:45:1e:9c:0f:2d:2d:4b:c1:9b:64:98:f0:ff:ce:4a:cc:47:
         33:58:fe:21:5b:3c:c0:2c:72:f2:d8:c4:15:f0:50:b6:e9:c4:
         c9:26:a9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:12:13 2025 by rpki-client