Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/31e5e018-9642-39db-b406-d128469348b3.roa
File:                     31e5e018-9642-39db-b406-d128469348b3.roa (raw, json)
Hash identifier:          ibekREkcfuYGVv3PMFyXfNQrwlRMFJvT+Q6qeU2quec=
Subject key identifier:   DF:19:4E:54:C2:8D:3F:66:BD:BF:83:15:B5:DA:DF:5A:60:82:9B:51
Certificate issuer:       /CN=88390227-7474-42cc-ab77-86c936657096
Certificate serial:       010D0C9F43285848EF61536B5A675E3B2C45E500
Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/31e5e018-9642-39db-b406-d128469348b3.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        207.230.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:53:6b:5a:67:5e:3b:2c:45:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88390227-7474-42cc-ab77-86c936657096
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=9fb4a426-5f1f-4b75-ba57-9fe9bb4d9397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4d:59:db:52:a7:ea:c6:46:9d:10:56:72:64:
                    cb:a6:0e:6c:c9:c7:5b:2a:6d:41:65:8a:60:b5:33:
                    87:0e:8e:20:d0:e1:d3:b5:65:0b:7b:82:10:19:da:
                    7c:20:9d:85:81:f5:49:20:25:76:ac:1f:09:e1:ea:
                    77:19:51:1a:7d:6a:ab:18:cf:f4:97:61:f2:50:db:
                    92:b8:fe:71:66:fe:c3:87:17:6f:a9:07:3e:76:3f:
                    58:e6:c5:a5:4f:00:3d:76:79:9b:45:f6:2c:c7:f5:
                    74:51:d1:49:d5:0f:d6:7b:bb:14:0b:32:50:bf:b5:
                    9e:fc:90:1f:a2:48:37:6c:24:d2:c8:10:ab:61:3d:
                    c5:46:ab:24:32:93:f8:c9:42:dd:b6:de:6c:9f:a9:
                    ba:27:55:c1:7b:45:8f:0e:96:0d:3c:7d:2d:3d:d2:
                    1f:71:2a:e7:71:ac:32:d8:57:fc:5d:24:74:c0:1a:
                    28:c1:62:89:87:c5:83:fd:15:c9:8b:6d:f7:3c:82:
                    56:ff:49:5d:aa:d6:91:84:84:dd:a3:48:5e:20:92:
                    4b:3a:13:33:06:7a:89:4b:b5:6f:6f:a9:54:fd:3d:
                    33:01:f8:c9:7d:04:d2:32:f3:79:ea:ea:31:49:85:
                    3a:0c:60:26:0d:67:b9:08:6b:11:be:66:f9:89:b4:
                    ae:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:19:4E:54:C2:8D:3F:66:BD:BF:83:15:B5:DA:DF:5A:60:82:9B:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/31e5e018-9642-39db-b406-d128469348b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:d2:c8:b8:a5:e8:73:70:cb:2e:a0:a7:cb:df:d9:a5:53:69:
         df:ce:9f:1f:6f:c9:a7:61:5a:7d:e3:cb:af:95:7c:ef:d6:cb:
         fb:b7:ea:e0:ae:e1:41:17:1e:05:56:18:5b:11:91:28:d2:ac:
         40:10:1b:27:97:79:01:65:0e:cf:12:14:6e:11:05:92:9f:e4:
         9c:3c:a7:c3:af:93:a5:e9:8e:06:0c:b1:2b:fc:ba:5e:15:2b:
         1a:33:cb:98:38:8d:c3:14:15:ed:db:91:40:1d:2f:0e:98:f5:
         54:f9:65:97:93:60:81:b7:f1:2d:e2:5b:b7:c0:27:40:78:6c:
         49:b3:f1:da:04:a3:f4:c7:c6:0f:1b:be:d6:b0:08:f7:78:f4:
         e0:fd:bc:2a:b2:db:f3:34:4a:d3:3c:fe:30:cd:ef:ba:6e:5a:
         c7:58:c4:48:5c:80:9b:6f:70:54:e3:0d:87:6e:f3:ef:2e:c5:
         bb:6e:45:35:8f:3b:1d:11:53:6f:b7:03:ff:63:8d:2d:18:42:
         d8:96:73:fd:bd:6c:8b:a9:35:4a:9f:93:0c:56:5c:33:6b:5e:
         38:dd:48:8a:85:8e:18:2b:af:68:4a:44:80:b0:68:82:20:a2:
         cb:f4:17:73:db:3e:8d:c0:39:80:c7:9a:1a:c0:20:b1:87:10:
         3e:65:03:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:42 2025 by rpki-client