Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/deb34e7c-1330-34c1-b9c3-a470fa4f8d4e.roa
File:                     deb34e7c-1330-34c1-b9c3-a470fa4f8d4e.roa (raw, json)
Hash identifier:          rn4aIuwLxhhBLRvsJyH6hGQYps6+sofZ9ly2sjTSAdY=
Subject key identifier:   E7:F3:34:D4:02:99:DF:F3:60:1D:0F:D7:4B:FB:67:90:96:DE:DD:3B
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584A00DAC8FBEF71A809CFEDCE80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/deb34e7c-1330-34c1-b9c3-a470fa4f8d4e.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6461
IP address blocks:        207.245.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c8:fb:ef:71:a8:09:cf:ed:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=eaf9247e-d5f0-4d58-a52e-20f8e1e651a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6f:ea:c6:00:ab:dc:c7:7a:5b:b9:84:1e:53:
                    18:de:c5:14:bf:e3:ce:9a:75:18:1f:b7:31:d1:c4:
                    56:c3:8d:93:d2:fa:1f:c9:f3:6c:8c:20:62:a2:40:
                    d2:fd:cd:9e:28:fb:30:fd:90:cd:a0:50:c4:37:2e:
                    06:e3:e8:a7:08:93:43:a0:53:45:c1:d6:07:57:b1:
                    b9:36:b7:b9:ba:c3:b2:87:57:80:61:1c:64:c2:7d:
                    52:b3:60:fa:07:ce:ff:33:50:fe:8d:db:96:56:a0:
                    a7:30:47:ed:bf:58:cf:df:35:88:b0:f1:1b:b8:8f:
                    16:0b:61:72:48:0e:33:85:3a:e0:d7:c2:15:d3:1d:
                    9e:f1:e0:16:0d:ab:01:5e:f1:88:47:f2:c5:84:9b:
                    60:09:ec:87:4e:36:8e:e0:28:ee:f4:d2:57:1c:d7:
                    db:6b:7f:f1:7e:73:3b:ff:b1:a9:cd:d8:87:aa:0f:
                    59:0f:14:2e:6e:83:47:2e:70:19:1c:44:9c:31:56:
                    90:4f:b0:dc:0e:ca:5f:bc:33:a8:52:d3:54:3e:f2:
                    d5:b1:ee:ed:ce:8d:10:67:51:62:31:bb:19:b9:9d:
                    6f:a3:96:8f:51:e9:7e:50:3a:d2:47:20:17:cb:8d:
                    97:bb:06:39:1a:f9:18:0d:a8:cd:fa:5e:c5:72:92:
                    97:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F3:34:D4:02:99:DF:F3:60:1D:0F:D7:4B:FB:67:90:96:DE:DD:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/deb34e7c-1330-34c1-b9c3-a470fa4f8d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.245.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:63:cf:4d:f5:5d:3f:3d:24:b4:bd:be:de:93:b8:1c:8e:50:
         0f:0d:25:72:1c:3d:f1:2a:47:d1:b4:55:62:87:c5:d6:a7:16:
         e6:46:bc:69:62:47:2c:8a:9e:09:84:58:e7:c8:45:0a:16:e9:
         f2:46:f6:d1:74:58:b5:52:ff:01:2a:6f:2d:7a:9b:57:48:84:
         88:3f:98:86:e3:9a:e8:2d:f1:b0:ef:ef:bb:9e:90:ac:34:3d:
         c0:0a:ab:a9:43:85:4b:74:df:ec:39:bd:1c:16:76:42:80:51:
         a5:c1:4a:01:5c:f8:79:cf:ce:d3:25:0c:fc:21:97:fe:07:9d:
         8e:ad:f3:9b:8d:4a:b5:42:54:9e:50:58:80:8f:89:9f:2f:eb:
         68:b1:c9:79:88:c8:e2:62:4c:9b:2e:19:6b:44:ea:bd:24:24:
         82:ab:e5:33:71:e2:ac:8b:56:88:d2:eb:43:8f:dd:50:2e:92:
         a1:e6:d7:c2:60:5b:72:8a:76:52:2c:21:d5:b8:78:f2:1e:5e:
         f2:04:18:26:af:c8:ec:1a:f6:8c:ec:76:6d:95:ac:c5:65:4c:
         dc:e9:82:4b:7a:77:a9:2a:e5:cd:74:be:53:cd:0b:a8:44:cc:
         20:fc:d5:13:71:c5:db:5e:99:7a:ea:02:18:14:73:74:ba:de:
         e9:8a:59:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:12:24 2025 by rpki-client