Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/9ca2b71f-1a62-3ff7-bcd7-781b0c0ffdd0.roa
File:                     9ca2b71f-1a62-3ff7-bcd7-781b0c0ffdd0.roa (raw, json)
Hash identifier:          gdzr7dJU0NStu1Yxmx50S+2dsMk5xnm6YH2OiVqSUvc=
Subject key identifier:   D0:D6:08:53:99:83:08:A2:DA:7D:AD:47:9F:24:FB:9D:7A:F6:07:18
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285848C58189935A4F861FDD2B5480
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/9ca2b71f-1a62-3ff7-bcd7-781b0c0ffdd0.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        209.107.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:89:93:5a:4f:86:1f:dd:2b:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=323761ad-7a62-4b18-9741-74c468a4ee72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f1:d3:94:39:49:79:3a:55:c5:d1:2c:34:b6:
                    c0:48:96:a6:31:c0:71:ad:13:6f:02:d1:38:83:0f:
                    f0:c5:62:19:d2:34:d6:c7:f8:df:9b:db:6e:d2:e7:
                    c7:28:2d:5c:e7:59:21:a9:2b:50:09:da:2c:3f:10:
                    b0:e8:41:40:14:1d:03:0c:3b:0d:e8:70:42:61:5f:
                    ac:ab:5d:70:f5:77:6e:2a:85:56:64:d0:d2:96:1d:
                    58:7a:c7:5b:7c:1c:c9:4b:d6:17:d6:45:3d:4b:e1:
                    71:69:eb:13:14:a0:bf:29:1d:b0:8a:9b:f5:c5:88:
                    03:ae:68:da:2b:36:9c:4c:3c:c5:b8:e6:96:2e:bd:
                    3a:96:93:e0:04:58:7c:a5:67:bd:1a:cb:88:a6:f8:
                    6c:63:f9:5f:de:a9:71:4c:70:4e:31:51:21:71:88:
                    80:86:39:69:21:bd:a3:82:6c:26:02:46:42:60:3d:
                    73:23:62:e7:e2:d4:d4:3a:9a:a0:17:47:07:05:b8:
                    9c:22:0f:e5:1a:66:80:10:23:64:a0:1a:14:6f:d2:
                    8f:49:62:e9:db:2e:ff:87:e8:cd:39:6e:af:7c:ac:
                    5b:b5:76:ba:1c:8c:35:00:2c:65:b0:44:92:03:89:
                    66:21:2c:09:06:f1:19:d1:c9:6b:07:9b:43:60:96:
                    0f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D6:08:53:99:83:08:A2:DA:7D:AD:47:9F:24:FB:9D:7A:F6:07:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/9ca2b71f-1a62-3ff7-bcd7-781b0c0ffdd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:8c:71:ae:05:06:35:1f:1e:78:79:cf:45:12:1a:a4:d3:bb:
         17:1a:d5:0c:6f:3a:1b:e8:85:62:68:26:7c:63:67:48:f8:4c:
         4b:94:60:5c:83:c2:6c:25:82:58:3d:38:6b:8c:9d:5d:22:04:
         a3:6e:40:c9:4b:9a:03:8b:c5:bb:0e:3a:fb:96:34:b3:58:8f:
         76:7f:b6:87:f6:ee:f5:3a:e6:56:71:00:10:eb:bf:38:31:a7:
         a8:d9:71:85:67:99:c8:b4:0f:fc:81:48:75:4d:16:59:a9:0d:
         f8:8e:b5:06:d9:9e:fd:32:d3:ea:56:f1:be:77:38:c4:da:06:
         ac:2e:07:d7:b2:27:fc:88:b3:25:05:5d:6b:bf:8f:03:df:ac:
         6e:60:26:6b:04:d7:99:80:ba:64:7f:b3:70:1d:4e:f4:99:ec:
         40:71:5e:c1:df:40:11:68:5a:a8:6e:04:74:c3:5f:7f:bb:ff:
         30:75:f6:dc:9b:4e:51:40:21:16:2b:62:f5:90:11:cc:14:bb:
         dc:84:ac:e0:33:56:27:18:d6:7b:81:78:93:34:fb:e5:00:c2:
         b2:79:71:4e:0f:2e:3a:68:8c:33:74:9f:96:9a:4b:45:9b:da:
         7c:50:a9:eb:67:6a:4e:66:74:20:3d:72:a1:9a:a8:9b:99:be:
         14:d6:f6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:24 2025 by rpki-client