Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/7275d87c-dbb4-3c0d-a9ef-1902b4f799bf.roa
File:                     7275d87c-dbb4-3c0d-a9ef-1902b4f799bf.roa (raw, json)
Hash identifier:          kcrjAhTygB5CPb4ZnA2sAM/lBqwH5SeSE9YGp/Xdbhc=
Subject key identifier:   2B:01:D6:7A:66:85:CE:23:D3:5E:50:3F:71:1B:CE:26:C2:AF:68:63
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584A119AB76026C61C7C917B3080
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/7275d87c-dbb4-3c0d-a9ef-1902b4f799bf.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     6079
IP address blocks:        209.122.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:b7:60:26:c6:1c:7c:91:7b:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=4f1bc95f-4724-44a5-8205-c689d01220f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c6:7b:00:2b:71:03:b7:83:f3:a1:6e:47:53:
                    58:64:8c:5c:33:c8:e1:17:a9:48:b5:dd:2e:8a:21:
                    ab:4e:2f:57:08:8b:a3:ea:a2:0a:61:24:c6:87:a1:
                    ef:f1:b9:4d:3d:cf:ea:95:03:50:17:61:39:e6:2c:
                    5e:f2:47:d0:56:28:c3:f0:19:18:98:95:01:b4:41:
                    bc:f1:0b:8c:d2:94:14:c2:c4:11:af:14:a6:b7:31:
                    38:50:07:19:f9:17:ce:24:f2:b7:8f:65:e6:18:0c:
                    6f:cc:41:aa:9c:c4:db:47:8e:d6:23:08:4b:f2:ff:
                    3f:15:e2:61:ce:2c:c6:ad:78:64:25:9e:3d:fa:b6:
                    7a:3b:d3:df:b4:09:9f:d4:27:ac:81:0b:21:16:02:
                    ac:b6:59:cc:34:7b:f0:ac:af:48:64:46:a1:cc:d2:
                    27:8b:62:28:ab:13:68:a3:e2:b3:3f:0d:a2:5f:a8:
                    77:42:e8:8b:74:2e:f1:e7:1b:4f:4a:e0:90:c5:0f:
                    62:4c:c4:95:27:83:06:e7:60:59:b6:11:71:d2:40:
                    f8:8a:59:56:9c:bf:46:2f:ea:e5:7e:af:d2:d7:70:
                    32:6d:88:1a:ff:2c:5c:67:95:a9:57:35:21:41:cb:
                    83:bd:72:23:ea:3b:4c:45:78:34:8f:d6:ea:5a:4a:
                    91:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:01:D6:7A:66:85:CE:23:D3:5E:50:3F:71:1B:CE:26:C2:AF:68:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/7275d87c-dbb4-3c0d-a9ef-1902b4f799bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.122.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:63:36:18:4a:06:09:25:66:42:66:bc:55:66:5a:42:14:38:
         3c:3c:13:69:a1:40:3e:ab:f7:36:51:01:c2:d6:a8:a9:d3:f0:
         e9:93:01:74:21:d4:ec:97:61:c4:3c:77:11:35:d2:d4:53:34:
         0f:83:8c:0b:10:3a:1a:67:da:ae:0b:73:da:e1:3f:26:de:e7:
         9b:14:bc:e9:5e:df:08:26:e2:2e:14:25:2a:4f:e6:68:93:13:
         43:0e:9d:c0:63:31:32:c8:00:ee:e6:02:99:da:5b:96:6a:51:
         eb:d9:f9:d5:c6:43:73:a0:77:37:2f:17:cf:7d:d2:16:fb:2a:
         48:c0:24:6f:80:76:8f:8b:c3:82:26:12:b4:2c:31:a7:26:a4:
         ff:9f:46:c0:6d:0d:46:53:7e:f3:5a:cf:2d:1e:09:e6:e8:fe:
         34:c8:6c:08:b1:43:c3:5c:3c:21:75:9c:60:b9:62:a4:49:ea:
         c1:eb:b0:74:ed:82:ab:1c:c8:7a:bc:58:fc:ee:d5:9c:a8:f6:
         be:83:f7:bd:9e:dc:6b:50:15:fa:3f:3d:dc:32:54:05:a0:cc:
         d9:2d:dd:76:ee:d5:db:ac:4f:d5:e1:68:cd:e2:14:26:0a:83:
         79:53:8f:a0:2b:be:48:82:6b:2e:f5:59:91:0f:58:fc:e3:3a:
         82:39:80:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:11:53 2025 by rpki-client