Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/18e5e7ff-0798-3773-91dc-d89f41ce616a.roa
File:                     18e5e7ff-0798-3773-91dc-d89f41ce616a.roa (raw, json)
Hash identifier:          Hu+OP76snjANfbDW9/VK5WlZAynrR/RAxD1UempXbMI=
Subject key identifier:   3D:32:5C:A2:78:95:9B:39:19:DF:15:0C:D9:44:88:58:3F:14:AB:96
Certificate issuer:       /CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
Certificate serial:       010D0C9F4328584A71EB31B21F0C7A76A54C0630
Authority key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/18e5e7ff-0798-3773-91dc-d89f41ce616a.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     27419
IP address blocks:        207.111.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:31:b2:1f:0c:7a:76:a5:4c:06:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=00b3abef-8311-4316-b83f-412d084e0a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:c9:d5:e4:2a:d8:3b:85:54:b7:6e:ce:81:
                    73:03:cb:a1:3e:47:d4:76:3d:cb:b0:be:06:b8:76:
                    cc:c2:d7:67:53:37:77:18:19:c6:93:c0:95:c6:51:
                    a0:fc:c5:f3:0a:97:a7:bb:29:60:d6:fb:8f:99:e8:
                    40:d6:e5:89:59:66:70:1e:5f:5f:de:34:22:ed:4b:
                    b6:a7:91:a5:67:11:48:3a:62:02:ce:6a:37:8c:dd:
                    ce:af:22:41:d5:6d:18:bb:11:fb:6d:31:0d:c4:d3:
                    9e:f7:59:32:3d:a7:cc:ec:cf:2a:a5:65:27:95:67:
                    eb:a9:9d:5b:1b:4e:42:76:17:42:b7:34:88:b3:01:
                    d4:af:5f:84:8e:c1:85:08:67:eb:98:99:88:1e:fc:
                    17:f9:44:ba:fb:a1:e0:77:51:f1:7d:00:b4:d0:04:
                    20:6a:be:d0:1b:45:8d:d5:e5:b5:0f:f9:12:ef:7e:
                    1c:77:fe:ea:79:fe:87:65:91:5d:e4:4b:12:10:08:
                    c2:15:97:52:97:12:7d:d8:74:50:ef:46:56:36:80:
                    d6:48:c3:67:63:28:0f:cf:a5:16:53:9f:dc:fb:c2:
                    1f:70:2c:a3:fc:94:dc:76:55:73:57:99:68:5a:30:
                    67:e8:30:c9:09:10:fc:08:fc:ea:6a:dc:64:01:c6:
                    1e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:32:5C:A2:78:95:9B:39:19:DF:15:0C:D9:44:88:58:3F:14:AB:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/18e5e7ff-0798-3773-91dc-d89f41ce616a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl

            X509v3 Authority Key Identifier:
                keyid:E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.111.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2d:41:fc:90:92:4c:ae:89:5a:ff:ee:38:eb:8d:68:7d:d3:
         20:68:5b:5d:39:91:c2:27:1d:5a:64:8d:40:a9:c5:32:ae:98:
         20:92:b3:fc:e4:d3:98:88:59:e3:65:96:ce:e3:7c:11:0d:64:
         58:9b:78:a6:8a:70:a0:b9:39:5e:a6:f1:96:92:5f:26:45:53:
         99:b8:56:32:b4:51:6d:34:5c:a2:7b:00:0c:41:b5:1f:b3:b8:
         7f:3a:11:9e:a8:71:62:69:2f:ef:b8:73:16:6a:24:74:f3:07:
         ce:d5:e8:91:79:c1:54:71:c3:2f:7d:4b:92:3d:99:23:ac:43:
         9f:ef:de:d0:d6:23:ac:6b:66:cb:db:ae:b7:b5:d8:64:80:6b:
         09:00:2a:cc:ff:da:34:7c:58:19:57:71:fb:2e:f6:b3:82:3b:
         45:90:5b:dc:23:6e:8d:9e:5b:b2:97:64:20:7f:96:66:f2:f4:
         20:8f:9e:d1:e6:04:16:10:c5:66:20:08:93:34:49:b1:61:14:
         a2:92:c6:75:d4:ba:cf:32:41:fe:ba:51:05:2c:cc:af:8f:bb:
         77:4e:15:6e:93:1a:4b:bd:e8:3e:bc:35:31:61:d8:35:d0:7e:
         2f:44:fe:e9:0f:17:53:e2:f7:31:74:e3:5f:23:69:2f:ae:2c:
         00:0b:d6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 09:21:06 2025 by rpki-client