Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/207c5881-e7f3-366b-a899-246463e7043e.roa
File:                     207c5881-e7f3-366b-a899-246463e7043e.roa (raw, json)
Hash identifier:          ktL8hSHiK+dEOCCShBKtwwSUjaauvxGOEpHYSJRCr4I=
Subject key identifier:   1B:5F:50:BA:1F:74:7E:98:98:BC:8D:0E:1B:19:47:5E:A4:36:BF:2D
Certificate issuer:       /CN=e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2
Certificate serial:       010D0C9F4328584A5FC5E4D6250D78CA4130C0A0
Authority key identifier: 83:1A:B2:D7:19:72:57:1F:DB:58:AD:92:20:97:13:91:29:4A:3E:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/207c5881-e7f3-366b-a899-246463e7043e.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     22644
IP address blocks:        147.140.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:e4:d6:25:0d:78:ca:41:30:c0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=8e9d2770-43d8-45fe-a9d2-bdf0a23945e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ec:63:4f:b6:41:68:a7:3c:e2:27:e3:35:28:
                    d7:7d:92:d7:43:0e:3b:62:d1:6b:e4:14:d8:d6:c4:
                    b5:a1:35:43:91:4a:bd:ef:db:38:7e:25:c9:5b:37:
                    36:69:6d:0c:05:c7:83:38:0d:75:0b:41:af:3b:9d:
                    9f:67:c3:e4:ec:1f:e5:8b:a4:75:30:b3:63:e0:0d:
                    f4:0c:54:b9:4e:2a:29:df:94:15:28:ee:14:6c:d6:
                    47:77:eb:fc:39:86:5b:61:2b:ae:3f:8b:27:cb:f7:
                    89:f8:fd:62:d0:8f:30:47:e4:70:ac:de:59:b7:6f:
                    d3:5e:7a:37:c0:f0:30:e1:da:a4:7c:08:83:48:63:
                    6a:93:b8:b4:97:d7:15:73:21:d6:12:a8:31:3b:53:
                    75:3c:e5:27:a2:6c:34:65:5e:f0:b2:72:6a:d8:f6:
                    8e:b7:79:a2:1d:aa:af:4b:d2:07:9a:fa:b1:67:80:
                    24:88:24:48:72:48:d9:43:68:33:a5:c4:c7:23:a3:
                    99:58:c2:17:c7:e3:8b:f4:b3:1f:31:a2:1b:22:aa:
                    1e:d0:74:01:3c:de:34:76:e4:9e:f7:40:0e:2a:1d:
                    c0:71:14:8d:6f:b8:8d:e4:b1:a1:3d:c6:04:d3:e9:
                    cf:83:e0:fc:8e:e6:7d:27:46:4b:cb:cd:7e:88:05:
                    3e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5F:50:BA:1F:74:7E:98:98:BC:8D:0E:1B:19:47:5E:A4:36:BF:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/207c5881-e7f3-366b-a899-246463e7043e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.crl

            X509v3 Authority Key Identifier:
                keyid:83:1A:B2:D7:19:72:57:1F:DB:58:AD:92:20:97:13:91:29:4A:3E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.140.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ad:6c:02:4a:40:cc:b5:ec:f4:df:e6:2b:17:65:26:af:8b:
         3e:de:d6:78:a6:0b:12:d5:aa:68:01:a3:fa:aa:5e:08:61:e1:
         07:e0:69:20:09:34:8a:6c:b7:f0:93:c4:e0:45:96:3a:4b:0d:
         51:35:6d:fc:ed:ea:a2:6e:69:65:b8:f7:ef:fa:3f:29:87:c3:
         8b:aa:24:41:cb:39:7f:66:b9:fa:9b:6c:b3:57:c2:73:54:d7:
         ba:c0:12:f2:8e:9c:03:77:1b:51:18:18:3d:55:33:fc:df:f9:
         ea:04:dd:b5:e0:f8:dd:a4:2f:7e:85:d0:8d:ff:47:70:b5:67:
         7c:3b:c4:d4:ea:af:fa:7a:56:82:76:f5:15:1a:a8:ad:b9:f4:
         c3:64:14:d0:95:10:c1:f1:62:74:f5:bb:de:7b:f7:db:2e:f4:
         81:2f:05:1b:d2:23:9e:c8:32:bf:9d:c3:18:0c:f7:4e:f2:eb:
         db:bd:3d:5e:cb:3f:e4:c4:9b:ed:d0:0a:69:dd:f1:a7:9c:60:
         8d:64:85:ca:4b:0a:52:71:e6:ab:37:d8:47:85:34:6f:32:ee:
         39:ab:43:52:40:f5:6a:27:77:c2:7f:93:4c:3c:eb:ee:85:9f:
         7f:1c:4d:4c:2d:1f:e2:23:b9:91:88:16:bb:55:66:2c:cc:0a:
         6f:20:37:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:37:11 2025 by rpki-client