Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d6d8cee2-6301-3063-826d-b91ab0fc7577.roa
File:                     d6d8cee2-6301-3063-826d-b91ab0fc7577.roa (raw, json)
Hash identifier:          1iadAbl1hCVk4L12zSiDm/E8wnKbJJ7KOXTGiGc1f0E=
Subject key identifier:   D5:D6:C4:F5:6E:48:97:AC:A4:EF:42:47:E5:29:B4:C7:CD:9F:55:4A
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F4328584A7350A00E6FE2100A198F4100
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d6d8cee2-6301-3063-826d-b91ab0fc7577.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     13332
IP address blocks:        172.84.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:a0:0e:6f:e2:10:0a:19:8f:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=0a87f90b-4914-40d0-9842-313584b3ed19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cb:9f:42:89:c8:52:b9:c3:5b:fd:d3:ee:11:
                    cf:64:88:f0:cd:80:bb:97:e0:87:55:53:f2:e1:a5:
                    e4:24:6c:bf:80:5f:12:3c:57:ac:57:8e:5a:d1:30:
                    20:61:eb:27:bd:50:41:36:c1:45:9f:39:de:b2:7b:
                    c7:c3:19:69:b4:44:64:ed:1d:3f:a7:47:f1:88:cd:
                    9f:de:69:c0:22:b4:86:40:d8:ca:3c:50:05:6d:39:
                    5a:59:56:81:8f:f8:9a:84:39:d2:64:ef:9f:bb:eb:
                    a2:5f:67:dc:b3:79:21:08:2d:db:90:fb:1c:e9:65:
                    5e:14:67:4d:85:9f:e7:fa:80:b9:c6:1e:37:90:35:
                    2d:7a:d9:a7:ff:15:43:1e:30:72:b0:03:e3:2a:ca:
                    e3:95:b9:3c:42:e2:4e:d3:cb:aa:eb:95:c9:ac:ca:
                    91:f2:46:3d:3d:4f:e9:33:b1:47:ce:8c:85:7d:0b:
                    52:cc:32:c2:41:e9:b2:17:b9:f0:31:bc:9f:ed:39:
                    6c:42:55:58:11:eb:9b:dc:bb:4b:2f:5a:8b:f6:8b:
                    58:b1:bd:fe:5f:35:8f:8d:f1:6d:93:97:29:41:8c:
                    9e:29:69:f5:02:7b:7d:8d:03:ab:c1:ac:b7:ed:b5:
                    5d:d4:d6:f8:65:c7:45:9e:14:d1:0d:cf:41:91:1d:
                    73:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D6:C4:F5:6E:48:97:AC:A4:EF:42:47:E5:29:B4:C7:CD:9F:55:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d6d8cee2-6301-3063-826d-b91ab0fc7577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:45:17:e3:2b:f1:7f:43:21:cf:e7:a0:7d:8f:55:2a:ab:9e:
         cb:be:a9:c2:ec:c6:97:f2:ab:8a:1f:c8:32:2a:a2:8f:00:a7:
         39:7a:f8:0b:b1:ea:ae:c8:18:47:dc:23:6d:46:c2:21:15:6f:
         db:ff:e7:ca:fb:e8:7f:db:99:71:05:67:23:5a:f3:f3:4d:89:
         83:d6:09:30:7c:37:f8:9e:cd:d3:ce:76:57:ab:f1:b6:ba:76:
         f5:5f:6a:78:0e:be:8a:34:cf:f3:97:e4:14:c9:c6:7d:45:8d:
         f9:55:75:29:20:0a:74:2d:0c:45:91:2f:69:14:2d:d4:24:2b:
         9e:2e:ef:8c:91:4b:bd:ed:14:7e:08:aa:3d:a2:a0:dc:0f:33:
         34:38:64:f2:f2:cc:65:29:f9:59:b5:d7:0d:9b:8a:fe:e4:a2:
         39:51:4c:d6:06:34:8f:82:97:76:4e:7e:14:97:8b:68:f8:65:
         89:73:9b:bb:c3:58:01:48:c7:92:9b:be:40:04:ed:74:49:af:
         b9:63:6a:bb:42:f6:7a:24:8b:a3:f9:49:d1:cb:a7:10:df:37:
         03:da:6f:3a:05:15:a1:a6:7d:00:f2:d4:32:7a:f5:eb:1b:ca:
         b8:a5:8e:0a:ca:9f:3b:44:1d:ed:9e:e4:3e:db:81:ae:32:cd:
         b2:c5:6c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:35:40 2025 by rpki-client