Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e/ff5e1e6f-9000-3a66-b478-c1dff7f45989.roa
File:                     ff5e1e6f-9000-3a66-b478-c1dff7f45989.roa (raw, json)
Hash identifier:          6C/3bmq7KE41zwGVknexQnL/KVZ8hN2rxAnmYuysDjA=
Subject key identifier:   CB:CF:C3:C3:0E:89:17:29:6C:23:74:1C:9B:6D:29:A4:DA:53:68:9E
Certificate issuer:       /CN=438b28e8-b7c9-4bb1-aec2-234f758dfa5e
Certificate serial:       010D0C9F43285848F926A8D3A1D6A1E0299AF880
Authority key identifier: B2:60:93:23:B8:B0:88:91:08:42:73:EE:12:76:1C:1B:6C:7F:AE:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e/ff5e1e6f-9000-3a66-b478-c1dff7f45989.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     397409
IP address blocks:        192.207.237.0/24 maxlen: 24
                          2607:e40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e/438b28e8-b7c9-4bb1-aec2-234f758dfa5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e/438b28e8-b7c9-4bb1-aec2-234f758dfa5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:a8:d3:a1:d6:a1:e0:29:9a:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=438b28e8-b7c9-4bb1-aec2-234f758dfa5e
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=c6a3eb0b-67a1-442f-bb85-e02dc7533934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:03:ed:e6:3a:f8:09:6e:f2:c3:0b:df:c4:be:
                    de:6d:01:99:f9:72:e1:ef:73:66:1e:30:08:ec:84:
                    51:1d:c5:da:d5:2c:a3:5e:24:b0:d6:f6:e7:f1:8b:
                    c3:8c:2d:75:1e:ae:b7:00:fb:eb:f3:b3:7b:75:0d:
                    94:f1:c6:4b:3f:43:5c:12:25:a8:f4:22:08:40:00:
                    18:fc:73:15:51:d2:b6:f2:49:6e:4f:aa:8e:f8:3b:
                    07:1c:52:83:94:19:b4:3f:c4:7f:45:ab:3b:f4:45:
                    d6:ed:0d:1e:af:bc:c4:9c:35:07:6e:ee:a4:89:f1:
                    88:1a:24:de:8e:df:87:81:32:eb:0c:6d:2b:37:27:
                    fb:dc:81:ec:e1:e3:df:71:8b:8f:78:75:8f:52:57:
                    71:31:d1:ab:e6:f7:07:71:fa:dd:01:41:5f:c5:14:
                    12:3c:a9:3e:f9:26:76:75:b0:69:50:c5:34:0f:b2:
                    75:0f:03:1e:ac:68:2c:30:32:10:b1:a9:e2:ef:20:
                    8c:a9:3c:f5:70:5b:23:94:74:63:04:a9:5f:a0:36:
                    4b:98:69:32:8e:5b:7f:22:7a:8a:09:1a:23:c2:51:
                    82:a4:73:10:65:8a:d4:8d:6d:3f:c3:01:02:14:bb:
                    00:aa:3a:43:2d:27:2f:2a:da:f4:16:87:13:02:ad:
                    9e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CF:C3:C3:0E:89:17:29:6C:23:74:1C:9B:6D:29:A4:DA:53:68:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e/ff5e1e6f-9000-3a66-b478-c1dff7f45989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e/438b28e8-b7c9-4bb1-aec2-234f758dfa5e.crl

            X509v3 Authority Key Identifier:
                keyid:B2:60:93:23:B8:B0:88:91:08:42:73:EE:12:76:1C:1B:6C:7F:AE:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.237.0/24
                IPv6:
                  2607:e40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:6e:10:31:b5:20:a9:00:c0:af:3b:a9:7e:33:7b:5c:21:
         df:aa:a6:24:21:db:a5:12:9e:a4:eb:69:03:47:82:13:bb:00:
         d9:32:21:d4:72:5d:cd:76:0d:27:63:0f:8e:d6:41:c1:49:b9:
         01:c8:ea:3b:c3:0a:ea:59:52:16:f2:33:bd:e1:1f:a1:97:df:
         9e:35:fc:98:80:6d:f7:b4:89:c5:ca:87:ed:33:94:c3:29:88:
         a2:87:9c:5a:8a:d8:0d:b1:dc:13:87:67:e4:f0:e3:59:1a:a0:
         ab:c3:93:9b:03:11:2e:6c:e8:bf:7f:37:dd:18:c3:8d:9e:76:
         0a:c3:cc:4c:d8:0d:ad:bb:11:4d:11:5c:e0:73:e0:71:62:dc:
         28:c4:be:7f:5e:0c:be:90:5b:29:e7:f3:73:a2:a0:81:8d:00:
         e3:df:d1:a5:78:ac:30:89:3e:9c:65:46:aa:bf:a4:9b:f2:1a:
         fc:ef:34:f1:69:be:14:cb:b5:d3:bc:dd:63:db:3b:3e:af:00:
         db:fb:7f:9b:fc:e7:de:d3:81:63:45:d8:1a:db:bd:83:3e:b7:
         f1:83:10:d9:51:28:38:10:f3:e8:48:cc:83:e2:12:2e:70:dd:
         16:66:cd:f9:0b:5a:a7:30:1b:e9:7e:df:30:d1:e6:19:eb:c2:
         53:74:c0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:16 2025 by rpki-client