Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/754d4b17-5a1f-34cd-a50e-a3d0f3bcabc0.roa
File:                     754d4b17-5a1f-34cd-a50e-a3d0f3bcabc0.roa (raw, json)
Hash identifier:          7AApDH2PJR9UOdSGYd3uSvg7qC2P5UQshaamrlAPDbI=
Subject key identifier:   EE:10:A2:DE:A0:69:51:77:C5:04:17:0F:60:FA:0A:07:D2:3E:2C:FA
Certificate issuer:       /CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
Certificate serial:       010D0C9F43285848F22BE4BD4AD1CBF2FD88AD00
Authority key identifier: 78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/754d4b17-5a1f-34cd-a50e-a3d0f3bcabc0.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     8002
IP address blocks:        207.251.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2b:e4:bd:4a:d1:cb:f2:fd:88:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=2697fa77-63d7-46e7-814a-1d2eaef9e71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5a:f4:7f:fa:b1:6c:3f:1c:42:b1:4c:da:f5:
                    75:e7:25:3a:e9:0b:7a:48:06:72:ee:2b:78:56:c5:
                    31:91:e3:57:d1:f2:86:d7:16:6a:74:0b:9d:88:ed:
                    e4:16:33:b6:a8:8a:07:92:e1:f5:af:be:33:b4:1d:
                    35:18:6b:a5:5f:4b:18:30:a3:8a:57:1c:b8:80:07:
                    1f:51:fa:8b:95:d2:48:ab:10:72:d7:69:1e:6a:8e:
                    d3:7c:1e:b6:7c:93:0f:8e:d2:eb:31:9b:53:23:0c:
                    c7:19:76:8c:59:0e:c6:69:a5:27:7e:69:20:e1:b2:
                    43:b7:fc:2e:4b:e9:3b:84:ef:98:69:25:9d:ac:18:
                    20:65:43:77:2d:9e:97:93:d0:89:e1:78:2d:65:75:
                    8e:b4:40:c9:df:9c:59:a4:b3:89:d4:48:dd:2d:c1:
                    d1:c5:ab:43:f5:06:ae:9e:b2:15:ea:c0:b8:c8:83:
                    a6:f4:56:47:4a:24:f6:f7:29:f8:ca:fa:47:04:84:
                    17:fa:9e:06:13:dc:17:b8:25:b7:0a:17:07:f7:d5:
                    a9:00:5f:b6:0b:fa:2b:b1:43:7b:94:f3:fe:1e:0f:
                    9a:6a:fa:ee:8b:cc:37:3d:d7:d3:5a:d9:22:03:61:
                    71:68:bb:30:fb:5d:a1:ca:ab:aa:7e:3a:ba:49:3b:
                    b1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:10:A2:DE:A0:69:51:77:C5:04:17:0F:60:FA:0A:07:D2:3E:2C:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/754d4b17-5a1f-34cd-a50e-a3d0f3bcabc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl

            X509v3 Authority Key Identifier:
                keyid:78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.251.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:29:14:ce:4f:6d:d3:c3:a0:df:e3:9a:90:6f:9c:d5:7e:37:
         f4:0d:77:be:40:21:c2:72:ff:1c:57:b2:2e:5c:f7:15:30:52:
         e0:b5:51:f2:4a:a1:6d:96:fc:7e:70:49:3e:b6:df:f5:72:0c:
         90:35:3e:d3:72:51:f9:ab:78:58:db:e4:04:d2:e7:1b:2c:c4:
         9a:21:f9:24:3b:3b:67:ea:41:c6:29:0a:75:e9:72:9b:ca:c7:
         60:d4:b9:2a:e2:69:eb:56:74:c0:00:3f:2b:f1:79:18:de:40:
         78:df:13:68:96:ae:2a:b0:96:0a:80:c2:b7:82:78:70:8f:e6:
         2d:20:44:44:23:94:cc:66:95:bf:ab:1d:f7:1a:63:4a:f9:d3:
         2e:57:68:98:d5:3f:0d:ea:48:c3:a7:51:7c:89:d2:ca:10:97:
         85:f9:43:d5:68:ba:ca:b7:30:46:fc:8c:b9:8c:f6:89:dc:9d:
         34:b6:29:8d:2b:37:48:8e:85:2b:24:94:45:e6:b4:67:48:13:
         02:7f:60:c6:9e:29:ed:f7:82:a9:3a:97:cc:d7:03:26:cf:5e:
         f4:88:34:57:ea:2e:cd:4e:88:23:57:d0:54:9a:e3:dd:08:fe:
         c0:8d:0a:b1:54:8f:f1:47:80:bf:8d:54:9d:33:0f:b6:8b:c9:
         47:b8:c9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 04:59:30 2025 by rpki-client