Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/7bd753a9-8122-344a-854a-588e00eba75d.roa
File:                     7bd753a9-8122-344a-854a-588e00eba75d.roa (raw, json)
Hash identifier:          a8zhbkeF4P11NJcelDc0ONfegWcHiHZofmhVzTAPnok=
Subject key identifier:   5C:BE:2F:AB:15:41:A4:82:9E:4D:E3:32:FE:50:2F:F1:83:AE:03:76
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F432858493243F63A95DAD96ED5CEE340
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/7bd753a9-8122-344a-854a-588e00eba75d.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     6079
IP address blocks:        207.180.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:f6:3a:95:da:d9:6e:d5:ce:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=743fac66-637b-4e94-b17a-d3f62e8339c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:43:c6:64:9d:04:ec:f3:41:4b:aa:91:1e:11:
                    bd:6f:5b:40:0d:54:83:dc:6a:7e:b0:10:94:13:5d:
                    f8:28:9f:42:48:c4:b8:bd:95:1c:84:4e:ec:59:7f:
                    50:3c:aa:2c:42:93:f8:72:81:f6:10:65:72:e4:ac:
                    c5:5b:d0:e5:2c:b2:70:b9:00:eb:8e:45:14:22:38:
                    18:a9:9a:54:a3:44:0c:b6:e7:dd:4a:a8:ea:64:ce:
                    3e:bb:c2:a1:78:19:91:bc:98:96:b0:34:85:d8:3f:
                    bc:77:99:8d:d1:3a:8d:64:94:27:b6:73:b1:ea:03:
                    12:b8:2d:4a:3a:97:cc:61:9d:3a:fb:86:c4:fb:7e:
                    20:74:f0:80:4d:2c:f0:91:29:b8:45:ca:33:3d:00:
                    09:32:49:6a:0c:b0:5a:3b:42:a7:89:44:23:c0:9b:
                    21:ca:66:a1:2f:55:94:98:4a:11:0a:d0:96:05:13:
                    df:a8:94:bb:12:29:bd:bc:9d:c9:1f:d9:5e:78:c0:
                    21:ea:b5:ff:c2:98:68:76:14:10:77:5a:70:ae:c7:
                    ca:1e:3e:95:c0:ef:f5:56:14:0a:a0:b2:82:40:0b:
                    7f:51:ad:9c:25:79:55:a4:61:67:f8:4d:34:bf:75:
                    af:77:13:0f:91:2f:2b:75:cc:1f:7b:20:bb:aa:e0:
                    52:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BE:2F:AB:15:41:A4:82:9E:4D:E3:32:FE:50:2F:F1:83:AE:03:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/7bd753a9-8122-344a-854a-588e00eba75d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:c1:ef:62:d5:67:12:03:41:ca:0e:bf:bc:9d:ff:1c:f5:06:
         dc:19:31:74:ae:33:45:16:cf:0d:70:1f:85:45:63:0d:d6:c4:
         ef:55:88:26:6c:2e:22:49:ee:6d:ab:06:ec:00:b9:d9:0e:48:
         94:c9:68:b0:88:1f:3c:60:51:34:d4:c9:71:8b:70:67:39:f3:
         f5:49:aa:62:dc:ed:0a:f0:84:ad:8d:78:ac:6f:f3:ce:6d:d0:
         07:98:e0:eb:fa:30:48:a8:c2:6f:a8:34:14:0c:51:73:da:e9:
         ef:2e:40:6a:c6:be:c5:24:8d:4c:7c:57:17:3d:ac:9f:38:0c:
         e5:f6:05:85:80:32:25:7c:7e:44:b6:03:f1:9d:79:1f:89:1f:
         30:45:cd:4e:f7:f7:b5:83:0d:3d:70:0c:72:7c:de:8b:34:ed:
         c3:c8:f9:57:c0:43:f3:62:71:35:1a:e7:e0:03:fb:86:db:1d:
         63:4d:09:6f:41:19:51:fe:e9:ad:9e:50:ce:c9:60:2f:41:f5:
         4e:d7:15:fe:4b:22:27:e1:61:35:5e:59:c7:86:73:a8:7e:59:
         7f:f9:e4:07:08:64:06:24:9b:7d:bc:e1:84:dd:0e:b3:ff:cd:
         da:77:b2:56:2c:44:e2:4b:66:b3:45:aa:bd:a3:c1:e3:18:4c:
         9b:59:ed:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:26:18 2025 by rpki-client