Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/1087c864-bda2-385e-8c85-d4ffbfe14dd5.roa
File:                     1087c864-bda2-385e-8c85-d4ffbfe14dd5.roa (raw, json)
Hash identifier:          BMVKSoH9FVPNFRtppF7m+JhpQ4tf3zovT6TJhg3N4C8=
Subject key identifier:   36:0E:F7:E4:3B:62:E7:A6:45:CA:19:21:61:C0:5C:ED:28:6C:C9:61
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F43285848E16BC1D1C043005A7C530980
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/1087c864-bda2-385e-8c85-d4ffbfe14dd5.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     153371
IP address blocks:        207.174.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:c1:d1:c0:43:00:5a:7c:53:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=ad3f90ab-c8ce-443c-8edd-198cc4f42331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ba:de:b7:e4:ef:76:11:c1:9a:59:7e:a2:09:
                    cb:15:56:37:a1:dc:40:20:bc:93:07:7d:b1:1b:b1:
                    f6:24:98:fb:32:5c:67:c2:fb:d1:36:9d:b7:89:d5:
                    2c:6b:ee:ac:df:78:32:3b:7b:c9:37:be:e1:a4:c5:
                    1d:4b:ac:4e:de:77:5f:8a:35:32:61:9a:e7:38:cb:
                    f7:b2:c7:18:28:8c:ae:5d:31:d2:f8:c3:ae:86:af:
                    c4:34:13:e8:1f:9e:cb:cb:2b:13:b1:c5:9c:85:96:
                    86:56:ea:dd:c6:df:35:a1:35:95:4d:b9:0a:d2:67:
                    7e:7d:2f:1d:38:1b:cf:c4:2e:ba:25:64:c9:52:79:
                    20:ea:17:c7:98:92:ee:8a:ec:cc:f2:66:1f:a9:75:
                    2f:81:d9:76:6e:05:79:16:1c:f5:5c:44:eb:ef:51:
                    7f:7f:ad:f3:02:c3:d6:53:c5:40:e7:e5:9a:f5:ea:
                    f7:86:a1:ac:a1:89:cb:fc:ac:da:21:92:bb:13:e3:
                    04:66:29:35:68:bb:2b:10:3d:38:f8:b4:8d:27:c6:
                    7b:e0:45:5d:00:97:58:38:82:d6:b3:e1:be:e8:c5:
                    74:9b:0f:d0:66:32:d3:44:62:b6:83:9a:86:50:28:
                    24:15:f6:1d:c7:7b:d2:cf:4d:25:1e:42:bb:99:fe:
                    92:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0E:F7:E4:3B:62:E7:A6:45:CA:19:21:61:C0:5C:ED:28:6C:C9:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/1087c864-bda2-385e-8c85-d4ffbfe14dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2b:cc:72:01:70:a4:c5:9d:dc:9b:3c:7a:e6:c9:bf:fc:14:
         d2:f4:aa:7d:29:89:70:10:d1:1a:6e:1d:c0:1c:8f:cc:5b:8b:
         9f:20:7f:0e:8b:36:72:28:3f:80:07:76:46:cb:34:61:e5:e0:
         7a:8e:95:b7:10:f1:81:e5:da:09:67:97:46:a2:2a:b1:2d:c1:
         f1:55:7d:19:35:9d:7f:dd:28:a8:af:33:b4:b8:23:56:27:cf:
         b2:76:3b:e7:a2:db:30:09:10:f3:ad:72:f9:db:70:83:fd:2c:
         84:80:14:05:d8:f0:a6:f7:de:11:75:d1:e0:60:8f:99:28:00:
         59:39:24:1b:dc:68:61:ce:16:8a:e7:7e:92:5d:86:65:b1:43:
         34:32:7b:11:ba:84:6d:55:b9:5d:e0:4b:5a:9c:2f:4a:e4:64:
         f6:4f:64:bf:50:06:af:11:7c:9d:bc:b2:f0:fa:15:0a:fe:2c:
         c3:75:87:37:c5:06:33:b2:a6:b5:ce:0c:71:5a:75:d2:25:9e:
         1d:27:81:ca:72:bc:db:a4:b6:bc:d7:44:3a:9c:65:2d:8c:7a:
         5e:b8:f9:a7:45:f6:96:6b:b7:c1:52:9a:82:ac:e4:53:b3:c9:
         6c:bf:b3:b0:90:e7:35:08:dd:26:3c:8f:e9:a7:fa:ce:dd:76:
         ba:cd:53:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:21 2025 by rpki-client