Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/f1a4c8c1-0e24-31bd-b412-d3325df112a6.roa
File:                     f1a4c8c1-0e24-31bd-b412-d3325df112a6.roa (raw, json)
Hash identifier:          Lm1aY0dQ3aQpYGkzTB0S5hNN8nGB0JmA5Bj4+j1AOB4=
Subject key identifier:   62:E9:BD:70:7F:46:7B:90:40:33:43:E2:87:14:19:BD:62:C7:BF:2C
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858492E13C249DE6E037490009E80
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/f1a4c8c1-0e24-31bd-b412-d3325df112a6.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     376
IP address blocks:        207.162.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:c2:49:de:6e:03:74:90:00:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=c349745a-0637-4da0-a8b7-a030163cb816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:10:33:63:42:e3:5e:45:7a:99:29:57:fe:
                    58:1c:28:ed:d4:5b:e3:a8:e6:84:0a:c1:52:b3:c2:
                    f3:73:fb:8e:71:8f:85:02:42:32:81:dd:b4:1a:e9:
                    88:96:32:e6:aa:18:f3:23:69:02:7e:36:1a:f2:71:
                    81:fe:42:e7:52:43:2d:ef:7f:76:d2:75:49:cf:96:
                    f7:e6:2e:db:11:30:99:41:4a:0c:22:de:55:69:b8:
                    f9:d9:79:67:0e:6d:33:de:a7:78:52:83:20:84:fb:
                    7c:42:48:54:a2:e1:74:8d:36:4b:30:b9:7a:06:4b:
                    45:c6:70:b7:a1:ba:70:ed:17:cc:52:03:13:78:03:
                    52:8d:f2:3d:f0:44:66:55:d0:4c:87:1d:dd:02:5e:
                    23:7d:71:46:6d:be:02:52:24:62:5a:6a:8f:11:72:
                    4d:43:62:e5:68:46:a0:12:52:5e:bb:a4:75:c2:0f:
                    5f:eb:61:f2:10:7f:ee:e6:46:39:b0:0b:9b:8f:43:
                    8b:27:a9:72:dd:ef:1a:97:64:eb:c0:39:d3:8b:4c:
                    68:a1:aa:0c:d4:6d:f1:46:7b:48:f3:42:90:4f:ed:
                    c8:be:c5:39:ed:a2:09:e5:66:9d:f0:08:85:9b:6a:
                    7b:77:2d:5a:a4:17:0b:5c:61:21:9e:63:c2:7b:19:
                    60:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E9:BD:70:7F:46:7B:90:40:33:43:E2:87:14:19:BD:62:C7:BF:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/f1a4c8c1-0e24-31bd-b412-d3325df112a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:0b:60:68:3f:6c:74:cc:d7:d2:47:cf:ea:34:cf:2a:ae:c1:
         ad:c2:e3:8f:9b:17:3a:0b:ef:f3:85:76:a1:39:12:8e:2a:e5:
         2d:ad:ea:a0:c3:86:e3:63:45:86:93:8f:25:b7:29:98:26:25:
         ca:3b:db:5d:c0:5e:42:a9:b9:4c:bb:cf:47:c7:87:ea:67:e0:
         4c:b9:67:6d:92:48:d2:20:ac:b9:47:ec:f0:cc:e4:7d:fb:ca:
         9d:7d:d5:90:f1:28:a4:42:3f:12:db:74:e4:45:1b:af:4b:45:
         67:db:0b:31:c4:64:62:0c:6a:a2:42:d5:2d:a2:1a:73:ce:7b:
         75:b6:0b:3d:6f:9f:82:d7:b1:2b:d9:0a:67:0f:12:25:c0:fa:
         a5:9c:2d:20:7f:34:7b:5b:9a:57:b3:44:96:bd:f5:1b:51:59:
         39:27:20:43:53:3f:ca:b3:f7:2e:ac:16:74:c2:d7:a2:d4:81:
         c0:36:2c:c3:b8:9c:4b:9d:56:33:44:af:70:35:6d:61:5e:60:
         82:af:15:79:49:72:8c:43:96:37:99:6e:cc:90:d8:c1:47:a5:
         2a:d1:ec:39:08:de:8c:c6:d8:e0:18:c2:58:6d:4c:f6:f4:8a:
         64:5c:04:dd:2f:55:0a:3a:ff:bd:5f:9f:a9:e6:50:48:40:70:
         9a:79:a9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:36:26 2025 by rpki-client