Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/7227ac69-7c93-32e3-936e-86f778db0930.roa
File:                     7227ac69-7c93-32e3-936e-86f778db0930.roa (raw, json)
Hash identifier:          y4RsYzmIe6iBloPZthfPcqg1yUgv4chs0BuLZe6v8I4=
Subject key identifier:   A6:A3:F8:9C:5B:C6:C7:AD:DF:9D:D3:9E:56:B4:5E:10:0F:1C:C4:1C
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584961B9A1B53EEE8E20F1C20E00
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/7227ac69-7c93-32e3-936e-86f778db0930.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     12083
IP address blocks:        207.98.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:a1:b5:3e:ee:8e:20:f1:c2:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=e66f0c80-4b3e-4d5a-ac40-47d1b31df64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:41:17:5d:c8:34:4f:fb:d0:34:59:42:f0:88:
                    ef:59:df:fc:2b:55:45:c5:38:da:5c:79:52:cd:8e:
                    28:c7:0f:59:a3:ed:fb:27:4b:9e:f1:27:85:ea:6e:
                    e2:cc:1c:54:5a:03:eb:a6:8c:f3:47:d5:8e:27:b3:
                    3c:ef:78:cc:92:a9:f7:48:e0:98:71:c9:cc:45:d5:
                    d7:03:64:56:65:1a:82:e9:02:06:fe:c7:a5:a4:43:
                    0b:78:6a:46:ee:19:65:74:94:d7:42:2d:b7:0d:f6:
                    05:09:32:d7:4a:b6:ce:b6:53:73:7d:c4:3d:b0:f4:
                    de:e2:4d:99:e6:45:e4:a7:0b:f3:56:6d:74:a6:81:
                    ec:4f:b7:43:77:dc:7e:aa:e5:b4:08:38:e7:77:3c:
                    2c:a0:be:5a:e9:55:9d:96:78:72:a2:14:be:44:01:
                    97:df:f4:e6:50:32:f9:0a:3b:e4:5e:ef:c7:8b:ef:
                    f9:32:2b:d3:25:0a:fe:5a:a3:26:29:1a:dd:20:2f:
                    c9:da:fb:da:5f:03:49:ee:ca:62:95:73:0f:72:59:
                    b9:2b:21:0f:d0:10:03:70:8a:09:e5:40:77:f0:56:
                    f0:6e:cf:ad:43:af:03:d4:10:bb:39:d9:43:6b:1d:
                    eb:7e:d2:1b:e5:39:e7:6e:c6:48:49:c9:d3:b5:ba:
                    e3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A3:F8:9C:5B:C6:C7:AD:DF:9D:D3:9E:56:B4:5E:10:0F:1C:C4:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/7227ac69-7c93-32e3-936e-86f778db0930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.98.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:6c:e4:87:81:51:c4:77:61:f6:7f:eb:01:40:14:45:6b:f2:
         86:60:21:93:50:c8:78:e1:ce:a4:38:e2:b4:bb:52:77:84:3f:
         ab:e3:3d:3c:33:e5:65:a4:4d:e8:af:e3:42:7d:8b:28:bf:cf:
         a0:76:e7:1d:17:c4:26:fb:b9:73:fb:49:ca:29:61:48:b7:25:
         53:6e:cb:97:9a:54:ba:1f:ea:ed:7c:bb:90:b0:08:85:0c:6c:
         67:be:82:fd:f1:cf:6e:d9:31:21:16:91:ac:18:f0:7a:c3:14:
         5e:0f:58:c3:8e:1a:a5:5e:86:1e:08:3c:c6:39:f3:f1:20:3e:
         ed:a4:43:93:7a:c1:a6:ff:8c:a4:ab:0f:88:4c:46:49:52:1d:
         f9:88:89:2e:8d:80:17:1d:fb:a2:96:e2:51:89:dc:7b:01:1a:
         f5:0a:10:d3:f3:c1:c0:e4:89:73:9a:2b:e4:b8:08:f8:48:83:
         47:94:ca:c9:4f:78:12:74:88:1b:39:3c:2d:cd:f5:a3:3f:65:
         a3:9f:45:be:0f:1d:d6:e9:76:6b:3e:3f:7f:40:ce:d1:b7:c4:
         f8:81:e2:d6:1f:5e:fb:e4:64:1e:b7:dc:f4:9f:ab:01:4a:44:
         31:04:9a:3c:cc:8e:ce:67:9b:cf:0d:ac:ae:b7:25:95:a3:0f:
         c6:32:fd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:47 2025 by rpki-client