Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa
File:                     cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa (raw, json)
Hash identifier:          Q9Wge1/SgMOkus0NoPcCzzjIVaE6JvRt9WHnCcb0lxo=
Subject key identifier:   AA:4C:2F:AD:7B:AD:EC:9C:3F:55:61:67:A4:BA:23:37:32:35:13:96
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584A6C55D3C61C86206185BC54C0
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     54315
IP address blocks:        207.54.135.0/24 maxlen: 24
                          207.54.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:d3:c6:1c:86:20:61:85:bc:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=35d45c51-74ce-4afd-afef-e5d13b219eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cb:a3:8e:18:4c:5c:bb:41:28:f9:8c:36:4a:
                    e6:27:64:7c:9c:05:44:40:74:b1:4f:cf:ea:8b:73:
                    21:17:01:84:c6:49:b7:50:0e:93:57:b7:c7:93:c1:
                    8f:6d:2a:45:8a:ab:8c:a0:00:d4:13:37:6c:b9:de:
                    6b:58:12:44:45:4e:e6:c2:35:ce:4f:88:0a:db:16:
                    64:9e:bf:86:a8:b7:be:29:89:ba:33:bb:50:e8:2a:
                    45:c9:61:02:66:63:bb:fe:a3:7c:2f:f4:e0:86:a4:
                    c1:c0:76:80:d0:b0:7a:85:48:4e:3b:c9:b6:6e:2a:
                    bb:6f:6b:c1:87:02:34:29:28:25:8f:08:bd:16:44:
                    3a:33:f0:61:3b:9f:48:3f:05:2e:80:72:5b:4b:f1:
                    50:23:37:d7:a2:bc:7b:15:57:29:8e:cb:f9:b7:2b:
                    93:e9:61:b2:c8:c7:de:e0:e3:9e:37:0a:55:53:4f:
                    5c:a7:70:29:ed:40:54:1e:8b:47:77:99:52:07:d4:
                    5a:ff:50:ca:de:cc:c6:e2:0d:91:7c:b2:0f:b3:b6:
                    05:ab:04:11:bc:ca:c5:db:db:d6:29:e8:e6:52:15:
                    d7:d9:f2:ab:dc:53:c1:2d:0c:7a:7e:e8:b9:b8:5b:
                    85:45:35:15:90:fa:a0:5b:e7:7f:98:66:af:65:90:
                    a8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4C:2F:AD:7B:AD:EC:9C:3F:55:61:67:A4:BA:23:37:32:35:13:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/cb39a4bc-93a6-3a08-a76b-ebfc5f6cf246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.135.0/24
                  207.54.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c7:b1:47:ec:d9:1b:e3:4b:71:df:9a:48:e5:76:d3:84:2b:
         49:54:4b:cc:6c:dc:e1:36:50:6a:11:3c:ee:5d:c4:c9:32:d6:
         3c:e5:4e:51:dd:c0:02:51:33:c0:93:a7:54:43:3c:12:9e:a5:
         d7:c5:2b:ca:38:38:5f:29:cc:9d:a3:de:2b:57:78:ec:87:7f:
         e8:13:03:8e:25:60:6a:15:f2:0a:02:51:00:30:eb:2e:88:85:
         bc:ee:79:7a:1b:ea:0d:0b:e4:d5:4f:07:75:4f:ee:78:20:8a:
         4b:8e:8a:77:77:2a:d0:ea:01:ba:c9:96:78:5b:6f:1a:60:da:
         c4:1f:3b:cb:0c:0a:60:9f:3c:06:88:19:39:0a:2f:84:e4:cd:
         13:ff:78:7f:b1:a3:44:17:80:27:93:c3:19:d2:27:d2:4b:78:
         f3:3f:71:34:c1:3a:19:66:72:59:97:e4:a2:9b:39:ec:9c:20:
         bf:10:6a:dc:2e:17:b3:21:3e:da:01:e6:ee:8e:19:89:fc:b1:
         b5:76:40:cb:30:f9:28:54:86:86:5c:e9:1c:1f:35:7b:99:56:
         ff:41:f0:7f:29:ab:29:a5:85:47:d9:c4:47:54:ff:61:d8:3e:
         d5:0c:a6:77:31:a4:23:48:d8:9f:c5:99:e4:1d:c0:04:c2:e2:
         d9:42:85:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 04:43:43 2025 by rpki-client