Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/137d0bfa-2e2c-3707-9fde-3fc4ed63543f.roa
File:                     137d0bfa-2e2c-3707-9fde-3fc4ed63543f.roa (raw, json)
Hash identifier:          qT1zZN3OOOcytWH7h4a1DGk2wiBl0Tg5HNuCiUxTytY=
Subject key identifier:   87:62:A8:71:29:D8:6C:04:91:9E:F2:5A:13:F1:05:4A:1E:F5:72:89
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285848C58183F6D02D332D04967C80
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/137d0bfa-2e2c-3707-9fde-3fc4ed63543f.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        209.107.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:83:f6:d0:2d:33:2d:04:96:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=f8fa1ed6-6595-45ce-b76e-7d1e1e638864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3b:2f:08:8e:85:71:59:98:6d:aa:a6:09:dd:
                    ad:5a:45:fb:b0:3e:ea:8a:b6:06:fd:f8:3a:03:87:
                    ad:36:e1:84:a0:c5:37:2f:df:1b:62:85:7d:0d:4c:
                    ec:8b:59:da:d7:ae:06:89:5a:c2:c2:63:5d:79:cd:
                    63:96:93:c7:67:28:f7:60:cc:20:be:23:26:a1:a5:
                    eb:5b:30:af:9d:82:6a:6f:da:a7:46:b3:7f:10:a6:
                    3a:16:f9:c1:71:96:6a:de:15:75:d1:73:1a:ab:c9:
                    25:20:1e:15:f5:29:f1:b9:f6:4b:3a:a4:b3:8a:17:
                    ba:18:d3:e0:77:97:98:2b:59:ed:c7:60:7f:cd:f2:
                    80:94:1a:4a:07:4d:a8:52:b6:5a:97:5b:c5:8b:ed:
                    61:d9:b1:50:62:16:bd:f0:9c:05:5d:0e:55:83:5e:
                    ce:ed:03:12:a1:1d:ce:78:73:ee:8c:45:4b:16:56:
                    9d:7e:34:0d:97:ca:b1:ff:fb:fa:f6:1c:9a:bd:2a:
                    e3:ee:33:c9:1f:21:48:5d:2b:44:8d:fc:51:5a:10:
                    fa:e0:57:fb:5c:03:a5:4d:a6:25:f4:46:40:79:d4:
                    11:92:a4:f7:3c:60:50:7e:1f:04:8d:bf:54:c4:eb:
                    43:f6:e8:2d:e8:ac:72:c4:67:3a:08:ab:24:aa:94:
                    60:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:62:A8:71:29:D8:6C:04:91:9E:F2:5A:13:F1:05:4A:1E:F5:72:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/137d0bfa-2e2c-3707-9fde-3fc4ed63543f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:00:98:91:76:a0:a0:54:2a:f5:db:e1:ef:cd:66:21:43:16:
         f2:17:58:6f:f6:a6:63:fb:a3:27:06:89:50:b4:45:b3:ff:65:
         8d:9a:67:91:cc:76:3b:c1:83:2d:19:0a:8c:bc:d6:3a:fb:ae:
         f6:51:2e:b5:ce:ae:a8:0a:75:f3:ed:3a:12:a7:62:a7:6c:e3:
         5d:8f:d9:79:c0:52:4e:81:7b:09:e9:d8:0a:cb:7e:7b:08:53:
         2b:d8:91:dc:9e:ea:d6:71:ff:58:3a:38:1a:33:75:ed:d3:0c:
         be:6c:48:3a:11:49:fe:a8:d8:91:e4:73:c0:88:b3:7d:f9:76:
         1a:50:48:30:bb:28:fb:2a:2e:01:3d:ac:a7:4a:15:c6:ea:b7:
         b3:a3:f4:41:4a:34:0b:5a:ff:11:b5:c7:9f:32:84:d5:a2:46:
         2b:dd:28:d1:58:38:f6:53:87:c7:ea:e8:0e:6d:c1:be:68:2e:
         16:0c:6b:4e:92:f0:e8:a8:04:29:18:7f:32:ee:ba:08:90:e4:
         e7:96:e8:11:09:b9:e6:1f:46:96:75:6a:3e:48:b9:f6:a8:3f:
         c8:fd:95:d1:d4:07:a4:dd:4b:cd:9b:5e:af:3b:ed:ce:36:e0:
         26:34:97:40:ab:be:76:ef:cf:8e:f6:63:c0:ee:ad:22:eb:27:
         fd:80:75:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:18:11 2025 by rpki-client