Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db8f199a-62c8-36d3-a41d-64390cd86118.roa
File:                     db8f199a-62c8-36d3-a41d-64390cd86118.roa (raw, json)
Hash identifier:          DTvJ0dnK5PH0bofL3/YyE9MMOyl2wA4lwitFEQE/URE=
Subject key identifier:   D6:8B:72:16:BA:C3:D7:CC:98:21:5D:C3:57:5F:E7:02:CD:26:B3:71
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A63F5BBB0A6EB817B885E0B20
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db8f199a-62c8-36d3-a41d-64390cd86118.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     11233
IP address blocks:        209.237.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:bb:b0:a6:eb:81:7b:88:5e:0b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=737ea222-f852-4f13-a8b0-1884f38cd653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:98:10:fa:33:20:2b:25:22:c3:6d:6c:05:b1:
                    33:49:2b:8f:40:08:ce:ed:66:be:0d:44:63:59:0e:
                    dd:39:70:97:3f:af:e4:88:0e:e4:af:a4:de:3f:34:
                    f7:ed:39:b4:72:29:67:2a:52:d5:aa:ac:41:9e:1e:
                    53:f7:0f:bc:d8:aa:63:bf:a4:52:2b:ae:3a:09:7d:
                    28:68:e7:d4:d3:e3:de:fc:0c:2b:23:24:e3:1a:d6:
                    72:70:72:5c:d7:a4:f6:5a:78:0e:f5:91:49:28:2b:
                    8c:f8:d4:5d:a9:bd:64:a8:1a:c1:e4:04:ce:24:cc:
                    2c:25:cb:77:28:0e:c4:de:40:27:4f:bf:38:12:05:
                    d2:ad:d9:4c:6e:ea:bc:93:11:99:c3:e0:54:a5:68:
                    a2:a9:15:d0:04:79:b8:c2:e1:01:88:c7:e6:80:6e:
                    3d:23:1a:39:66:bc:08:2d:a8:eb:38:95:6b:d3:6d:
                    89:b5:96:89:68:2d:1d:25:31:fd:c3:ee:05:c9:b0:
                    aa:cb:99:a0:25:21:a9:bd:6d:8b:d0:d2:fc:67:be:
                    bb:5b:9a:bc:b8:37:25:67:8f:5f:a4:c5:28:75:68:
                    94:cc:88:80:8b:a1:56:dc:cc:17:91:3f:da:5a:ec:
                    be:e7:51:ba:2b:74:02:a9:78:ba:29:19:dd:73:a2:
                    3c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8B:72:16:BA:C3:D7:CC:98:21:5D:C3:57:5F:E7:02:CD:26:B3:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db8f199a-62c8-36d3-a41d-64390cd86118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:fc:35:56:1b:29:72:cf:d8:ef:88:28:68:db:68:87:c4:c4:
         1d:9d:49:43:44:38:51:e5:a5:de:03:e0:0d:8b:9f:04:64:6b:
         69:10:dd:79:90:c0:25:6d:b2:5f:3c:9c:cc:c6:6a:c5:f6:93:
         06:f8:8d:53:8e:81:03:f7:50:55:34:8e:52:cf:2e:dc:45:86:
         1f:13:b4:23:2f:56:48:20:71:61:44:cb:e2:ab:6b:e1:d3:72:
         48:55:1e:7f:c7:b9:6d:d7:9e:1d:0d:d8:43:15:30:3b:ec:e9:
         a3:c2:b1:85:50:48:f0:1c:78:7a:10:23:82:ca:51:cb:6c:0b:
         79:94:db:c2:8d:12:24:ab:0c:0a:d3:89:84:a6:40:67:10:f8:
         ea:ec:bf:fb:87:fd:15:f3:d6:8e:07:cd:cc:33:e7:49:b3:ae:
         31:f1:3d:7f:49:a7:fe:32:28:e1:f8:ef:f7:42:98:24:7d:29:
         f4:f1:0a:88:cf:d7:d1:01:da:44:a7:a1:94:6a:b5:85:33:f2:
         83:9f:f7:c8:ce:8d:98:d2:15:97:5e:f1:70:ae:94:92:7f:a8:
         d2:7d:c0:bf:de:c2:c6:b8:99:6c:eb:e1:38:7c:d1:07:0d:66:
         be:f3:1e:10:f9:9f:37:4b:2a:95:64:59:1f:5d:c6:28:f4:3a:
         b8:9c:71:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 15:07:00 2025 by rpki-client