Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/267f94e2-bd7f-4ac0-94f8-ab1832f62bf4/321de71d-7985-36fa-9242-18243c3beafb.roa
File:                     321de71d-7985-36fa-9242-18243c3beafb.roa (raw, json)
Hash identifier:          Ts3sxfi1Lbchqwoc4NQX8cU3SICPouTHFOHH9ae7V4g=
Subject key identifier:   FC:AD:DF:4E:74:04:5A:6F:5B:D1:E8:3D:25:D9:7F:88:AF:FA:D5:3E
Certificate issuer:       /CN=267f94e2-bd7f-4ac0-94f8-ab1832f62bf4
Certificate serial:       010D0C9F43285849FE8E353DA27716E63F4E4390
Authority key identifier: 6C:F7:B2:CB:3C:8A:61:FE:CC:DF:F1:57:67:B7:6F:9B:82:25:A3:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/267f94e2-bd7f-4ac0-94f8-ab1832f62bf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/267f94e2-bd7f-4ac0-94f8-ab1832f62bf4/321de71d-7985-36fa-9242-18243c3beafb.roa
Signing time:             Tue 27 May 2025 17:15:41 +0000
ROA not before:           Tue 27 May 2025 17:15:41 +0000
ROA not after:            Mon 25 Aug 2025 17:15:41 +0000
asID:                     8075
IP address blocks:        115.42.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/267f94e2-bd7f-4ac0-94f8-ab1832f62bf4/267f94e2-bd7f-4ac0-94f8-ab1832f62bf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/267f94e2-bd7f-4ac0-94f8-ab1832f62bf4/267f94e2-bd7f-4ac0-94f8-ab1832f62bf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/267f94e2-bd7f-4ac0-94f8-ab1832f62bf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:8e:35:3d:a2:77:16:e6:3f:4e:43:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267f94e2-bd7f-4ac0-94f8-ab1832f62bf4
        Validity
            Not Before: May 27 17:15:41 2025 GMT
            Not After : Aug 25 17:15:41 2025 GMT
        Subject: CN=7c6b87f7-5072-4713-8238-c33cd666c6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:91:4a:8e:ca:a4:23:53:c5:fa:84:58:82:
                    ac:a1:68:47:17:f8:91:df:95:f6:57:66:62:5e:9d:
                    28:ae:34:ec:e1:3d:c4:57:29:81:0d:43:32:db:78:
                    47:27:b1:c8:ee:3f:21:a9:3a:48:f9:53:97:7b:d2:
                    5f:9e:35:2e:f8:7e:a3:04:4f:9d:f3:16:bf:b0:18:
                    8d:0d:f3:1d:e3:de:55:e7:21:b9:58:f7:48:51:8f:
                    d6:d1:bb:d5:46:b7:cd:69:70:be:8a:ca:57:c8:59:
                    da:4d:f9:39:d4:ea:e6:43:c8:65:3e:e5:b1:32:be:
                    34:51:ac:23:59:1d:71:0e:38:bb:c7:ad:34:d4:e1:
                    7f:19:b1:52:1f:64:82:c1:98:ff:98:ee:64:65:e6:
                    01:4d:a7:2e:83:52:f9:34:85:1a:6e:f2:ca:1a:cc:
                    40:20:f8:fb:80:f0:4a:7b:b6:3f:10:82:03:36:35:
                    ce:95:f3:c4:39:ec:d1:56:51:b0:c3:41:56:df:b0:
                    ff:96:e4:8f:fe:e7:79:b9:e8:c5:f4:27:24:a7:74:
                    0f:d5:d7:ab:06:4e:ce:2b:ec:54:cc:39:a2:24:80:
                    fe:9a:ea:b1:e3:36:99:08:10:b4:74:24:8e:59:81:
                    38:b3:65:d3:35:15:17:4a:ea:a3:3f:b1:42:0c:43:
                    15:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AD:DF:4E:74:04:5A:6F:5B:D1:E8:3D:25:D9:7F:88:AF:FA:D5:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/267f94e2-bd7f-4ac0-94f8-ab1832f62bf4/321de71d-7985-36fa-9242-18243c3beafb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/267f94e2-bd7f-4ac0-94f8-ab1832f62bf4/267f94e2-bd7f-4ac0-94f8-ab1832f62bf4.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F7:B2:CB:3C:8A:61:FE:CC:DF:F1:57:67:B7:6F:9B:82:25:A3:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/267f94e2-bd7f-4ac0-94f8-ab1832f62bf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.42.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:8c:9a:7f:64:bd:e9:52:40:49:24:d8:0c:d6:71:02:e2:25:
         d7:26:b3:1c:29:cd:12:16:14:51:fc:4e:a3:cd:f8:bf:a2:60:
         a3:da:75:45:bf:46:01:14:b0:f2:7f:28:53:05:65:20:52:e1:
         59:65:71:90:da:87:62:e8:92:a0:a4:d0:27:74:75:c9:d1:df:
         18:75:2c:ef:0f:a5:1a:40:ec:ce:03:d6:3e:84:32:d6:ca:53:
         69:fe:b3:a9:b0:af:28:d6:87:f6:59:a9:35:cb:d0:aa:a4:7d:
         74:7c:17:d9:d5:c6:c9:35:40:7f:ff:d9:2d:e1:61:e5:9d:4d:
         d8:bb:53:a8:3d:15:cf:c0:bc:f5:00:7c:7f:de:1b:88:66:0a:
         19:73:98:8c:47:fa:51:bd:35:6d:8e:71:ce:ef:af:2c:73:9e:
         09:a0:b1:59:78:ba:3a:b9:dd:ab:d1:17:ac:4f:24:db:3b:15:
         29:ba:34:4a:1d:ff:9c:20:55:52:ae:9a:fe:d7:f7:de:48:5e:
         4f:e0:59:75:75:2b:a3:ee:9c:30:fc:b4:d1:46:03:8d:78:24:
         b8:86:9a:7b:ff:83:df:ce:5e:4a:74:52:74:a8:3c:eb:c3:e8:
         8a:b9:e9:bb:58:7c:87:4f:48:a8:9d:1c:93:58:1c:32:af:ff:
         03:12:19:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:29:34 2025 by rpki-client