Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7c8dea26-fd51-3016-9371-cf841d680f6b.roa
File:                     7c8dea26-fd51-3016-9371-cf841d680f6b.roa (raw, json)
Hash identifier:          MABp3LkW13CA6uebvYrvPWeOZMQj51r8ulndB9kjWWo=
Subject key identifier:   E6:6A:A1:1E:1C:24:61:E5:06:7B:93:38:21:8F:77:CF:3C:59:3A:5C
Certificate issuer:       /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
Certificate serial:       010D0C9F4328584A5A3076886CD482E9124FC558
Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7c8dea26-fd51-3016-9371-cf841d680f6b.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     6079
IP address blocks:        167.253.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:76:88:6c:d4:82:e9:12:4f:c5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=f6c21033-12a6-41e1-a5e1-fa778b895fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:75:66:ef:96:39:78:8b:ac:75:69:fc:70:a6:
                    0e:ef:b1:77:01:f9:d6:e1:4f:55:90:8e:d8:47:c5:
                    5c:04:bc:6a:17:b7:a1:2f:db:74:e9:47:eb:1d:8c:
                    72:55:84:50:2c:18:62:fe:b8:3a:53:73:d1:d9:b5:
                    7d:16:01:7b:c3:cc:39:27:c6:9f:0e:9a:c3:b4:8a:
                    3f:6e:9f:b2:a7:d8:4d:00:f2:e6:13:23:48:da:f8:
                    98:23:dd:24:c1:3a:25:96:86:d5:07:42:56:18:1f:
                    f7:c3:e6:3b:f3:32:69:94:e7:20:8c:22:77:ab:aa:
                    d6:a2:96:03:1f:80:dd:65:40:63:c4:80:95:af:00:
                    38:4f:dc:61:ac:6b:a7:bd:63:d3:21:36:f8:1a:e4:
                    0b:9a:92:43:4c:d3:9c:32:24:e2:5f:53:dc:f0:66:
                    eb:51:c9:a1:8f:83:f0:d8:10:aa:41:1a:fa:a7:5a:
                    40:ef:52:45:30:2f:cc:a3:a6:aa:12:35:8d:df:81:
                    3d:50:d1:45:76:a3:4d:40:da:91:92:1c:9a:d5:32:
                    ca:88:f2:a7:b3:8a:ee:b3:5c:e5:37:4f:ea:4b:65:
                    69:00:3c:2b:1e:87:ae:dd:65:44:c0:4b:79:20:36:
                    39:af:b6:d2:a3:90:3c:fc:bd:2d:a3:e7:ba:b5:9f:
                    33:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6A:A1:1E:1C:24:61:E5:06:7B:93:38:21:8F:77:CF:3C:59:3A:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7c8dea26-fd51-3016-9371-cf841d680f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:11:ff:7f:84:cf:74:0e:a9:f9:bc:d1:90:93:dc:9e:4b:f8:
         98:64:61:45:28:f4:fc:bc:74:f1:2d:ca:31:1f:5a:b3:f4:72:
         18:89:46:b7:f8:f2:bc:3d:41:40:41:f7:fc:cb:95:9e:06:c0:
         63:7d:04:1d:6a:11:4e:8f:70:3f:ed:1a:bc:bd:5e:9d:bd:69:
         d3:65:d6:83:ea:23:a9:77:8b:9b:cf:5f:f0:0a:6f:e8:13:c4:
         d5:5c:c8:bc:5e:e4:1e:68:97:f4:e5:c1:56:e0:3b:b3:42:e1:
         92:10:5e:ab:55:ea:44:b5:1b:7e:d6:fe:c7:9a:e9:d8:29:22:
         52:26:e6:4f:e1:f2:f5:8a:86:33:3a:6c:fa:44:54:c8:66:65:
         89:24:7c:dc:89:67:37:bc:c9:93:0b:03:40:7c:6b:b7:00:7b:
         ae:55:a4:49:8f:06:c4:8c:32:c8:4c:60:56:39:08:c8:05:75:
         87:51:11:d9:23:9e:1a:8a:42:ad:d3:4a:e2:91:40:f2:c7:7b:
         d3:59:51:3d:8f:b3:1c:b6:f0:ef:66:e4:e5:6b:60:1e:aa:91:
         46:0b:6e:a1:e8:8a:32:eb:51:eb:56:c1:c7:db:4e:45:0d:3a:
         28:92:56:08:bd:00:9b:2d:0b:b0:a8:da:d1:b6:2b:26:62:69:
         b0:03:bc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:36:00 2025 by rpki-client