Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/56c30a73-e50b-3528-a108-113a09129b2e.roa
File:                     56c30a73-e50b-3528-a108-113a09129b2e.roa (raw, json)
Hash identifier:          s4m7Q+tg0q9jszjpqGFC8IZAtw20J82RQfbJKWQYVXs=
Subject key identifier:   29:BF:A4:84:D1:EB:A2:73:59:5A:BE:1E:9E:CD:F1:E7:03:3B:A8:7B
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F432858492E4F53E851E8825EB1954300
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/56c30a73-e50b-3528-a108-113a09129b2e.roa
Signing time:             Fri 14 Mar 2025 03:00:51 +0000
ROA not before:           Fri 14 Mar 2025 03:00:51 +0000
ROA not after:            Thu 12 Jun 2025 03:00:51 +0000
asID:                     22351
IP address blocks:        209.159.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:4f:53:e8:51:e8:82:5e:b1:95:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Mar 14 03:00:51 2025 GMT
            Not After : Jun 12 03:00:51 2025 GMT
        Subject: CN=b81cfa4d-07ee-4f9e-9cd2-769db1770776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:66:ff:31:97:62:a2:9e:cd:f7:41:dc:a5:00:
                    63:38:24:23:12:4d:9c:03:db:d5:cb:b9:5b:09:3f:
                    65:71:04:d9:24:c5:5a:41:3f:7f:b5:bb:14:07:f4:
                    03:14:ce:6f:4d:9a:be:ee:ae:65:b7:32:6b:c3:0c:
                    72:10:8d:d3:6f:a3:18:99:6e:f1:20:e1:ab:6d:8b:
                    c1:73:6d:86:a6:32:1e:a8:b3:bd:59:fa:7f:36:eb:
                    44:55:2b:aa:9f:7c:6f:da:26:07:91:42:e7:1a:85:
                    ae:42:91:73:e0:a6:2a:de:b9:2b:f5:7f:cb:c7:fd:
                    e7:f1:20:49:a4:ef:48:23:63:a5:90:a3:fa:26:2a:
                    4b:e3:70:e6:ae:64:71:98:09:2e:e3:f6:9b:69:f3:
                    30:1b:36:30:a7:c1:e4:13:17:b8:a7:6d:7c:b7:26:
                    9c:cc:44:49:a8:ad:33:66:27:58:95:0d:03:bb:31:
                    f6:07:2c:4d:f2:c3:4f:55:c3:03:24:fd:82:d4:a4:
                    44:a7:74:1a:94:9f:09:bd:6a:2b:8a:dc:b4:d9:2e:
                    a9:88:da:d1:89:31:27:cc:da:6b:bc:a1:19:e3:50:
                    b5:f5:7e:59:eb:5b:4c:b2:11:b2:3e:94:53:3d:a0:
                    2d:b5:4f:29:06:39:81:6a:5c:ca:ea:5b:fb:e5:17:
                    b3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BF:A4:84:D1:EB:A2:73:59:5A:BE:1E:9E:CD:F1:E7:03:3B:A8:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/56c30a73-e50b-3528-a108-113a09129b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.159.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:36:58:73:8b:ef:b8:11:28:f8:c0:82:21:19:bc:5e:ef:df:
         6a:02:c4:31:9e:c6:bd:c9:a1:a6:1d:2c:85:8e:22:44:13:18:
         97:2b:04:00:ee:d0:1a:b3:48:f6:75:42:3a:bb:13:16:78:b5:
         89:d1:81:71:ae:3a:7a:1f:c5:df:4e:66:35:bd:31:2a:7c:9f:
         44:e2:f6:c9:b5:53:6c:2e:bb:2f:9d:77:d5:4a:6d:fd:87:64:
         ac:a4:86:83:c9:f3:ca:2f:00:e0:dd:8c:28:4f:a2:a0:5f:2c:
         87:cd:2d:44:e0:5f:65:77:76:66:6a:9e:2a:b0:7b:0d:0f:7c:
         c4:b2:c3:84:1c:a2:8e:b2:02:85:38:c8:ce:41:cf:62:8c:4d:
         30:7e:10:61:43:d9:57:e0:02:4a:1b:98:df:55:76:2b:d5:48:
         23:8b:55:dc:b9:01:3e:f2:b6:86:d2:b1:c0:ea:33:69:df:bc:
         c4:5f:da:36:53:25:bd:a4:d5:bf:8e:cf:2f:a0:2e:a7:13:66:
         37:0d:34:2c:29:92:e1:c7:7a:f2:0d:bb:09:d0:0e:4a:fa:37:
         86:bb:e6:e0:65:ee:33:dd:63:49:c5:dc:7b:c5:7c:29:2d:a5:
         02:f2:31:1f:0b:a9:f0:08:ea:ca:72:32:91:14:9f:2a:28:09:
         e7:fc:c9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:29:08 2025 by rpki-client