Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/186dc8d7-38aa-34a3-9586-da0d8739aa1d.roa
File:                     186dc8d7-38aa-34a3-9586-da0d8739aa1d.roa (raw, json)
Hash identifier:          veBbq9oQfhFbMFTbQ15rjrMPzRf0W00blur/p2QZLY8=
Subject key identifier:   FA:69:D9:86:FB:25:0B:AF:0E:69:BA:B1:13:9C:28:43:80:91:4A:AE
Certificate issuer:       /CN=88390227-7474-42cc-ab77-86c936657096
Certificate serial:       010D0C9F43285848EF61517F9E0ED23A52377FA8
Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/186dc8d7-38aa-34a3-9586-da0d8739aa1d.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        207.230.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:51:7f:9e:0e:d2:3a:52:37:7f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88390227-7474-42cc-ab77-86c936657096
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=6b23b747-5010-44a4-93a0-bf48dce5c62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:19:a4:28:7d:51:95:0a:8d:4f:e6:ca:ed:ed:
                    7c:b2:cb:62:6c:f5:60:8d:4f:cf:d0:0f:a3:ae:81:
                    05:0a:b5:13:4b:34:62:d1:36:b3:05:45:12:40:26:
                    2c:14:6a:ab:34:82:33:e7:00:45:a2:fb:a8:59:ce:
                    32:05:54:ce:5c:3b:40:77:16:47:f9:56:d4:84:11:
                    da:60:09:81:2e:35:a5:df:a2:a9:ce:64:cd:ec:50:
                    46:88:2f:db:f5:06:08:34:fc:1b:ca:09:97:2a:ec:
                    e7:3a:b2:45:41:81:32:df:29:f2:28:41:aa:d2:7e:
                    e3:0d:0c:56:9c:4d:38:d5:c8:0d:64:88:7f:5f:26:
                    1b:9e:bf:1b:62:56:c9:7b:1a:6b:a5:4d:26:78:27:
                    67:01:9c:fb:6a:69:70:ca:6d:2d:7b:da:7c:7b:b1:
                    3c:40:18:ab:17:b3:81:77:f5:32:33:cc:91:9d:a2:
                    79:22:b2:09:e5:49:02:f4:c4:bc:1d:90:56:e0:63:
                    31:c7:3f:c6:53:1a:bf:34:c2:79:f8:82:7a:bc:7a:
                    3b:62:70:a6:79:ce:d7:43:4b:de:29:07:dd:6f:c2:
                    48:34:aa:0b:c1:45:a1:a9:01:27:a6:f0:33:f5:89:
                    26:0c:2d:a1:49:33:fd:80:93:3e:a2:89:74:91:13:
                    0f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:69:D9:86:FB:25:0B:AF:0E:69:BA:B1:13:9C:28:43:80:91:4A:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/186dc8d7-38aa-34a3-9586-da0d8739aa1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:64:01:7d:d2:f6:4a:38:9c:4d:b7:23:44:89:92:5c:39:10:
         d8:f3:00:a1:2d:40:43:0f:af:e4:ca:4b:f4:fd:f6:66:07:37:
         c3:b6:46:c7:8d:01:62:45:b0:cb:6d:db:44:99:57:c9:f9:85:
         f7:ff:5f:79:24:49:9e:3f:7a:4d:f3:51:9c:34:57:2a:47:0c:
         52:f5:72:14:73:79:b5:5e:a8:c0:1d:63:3f:64:64:e8:4c:b5:
         91:54:8b:66:82:1e:f4:cd:79:1e:d9:61:75:63:c6:36:d6:df:
         42:c1:07:0a:0e:05:19:a5:e1:15:d8:7d:f3:97:ea:5b:f4:26:
         2d:3a:09:a6:3d:db:60:a2:d7:07:e0:60:37:f6:96:e9:73:6f:
         e5:e7:87:f7:4c:5f:e6:70:59:94:7b:0c:92:e9:0e:2b:df:0e:
         cc:d1:f0:fa:b2:14:27:00:3f:9f:70:01:83:67:f4:9e:b6:d4:
         47:0c:62:fb:b7:7c:f6:0d:41:2f:a9:29:60:3a:3f:78:a8:59:
         1e:50:6b:19:f7:02:da:48:ac:bb:d1:95:e3:12:0e:ac:27:3c:
         55:81:f8:bc:d5:3c:a9:b2:85:98:1f:87:16:e7:c1:93:47:7e:
         f0:fa:21:96:16:ad:af:12:3a:49:f0:6f:87:5a:e8:6d:fc:a6:
         71:f4:29:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:44:59 2025 by rpki-client