Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/058be8cf-8236-3d85-a825-36bb095a41a1.roa
File:                     058be8cf-8236-3d85-a825-36bb095a41a1.roa (raw, json)
Hash identifier:          tHPF0hAFEgzXfFF1PGxMHijzFs5AH8sr/v6fhkNkbk4=
Subject key identifier:   9E:EF:1B:01:17:DA:CE:67:5E:73:B1:B1:A4:51:07:1F:FD:16:BA:75
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921345F7165BF922F2C211970
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/058be8cf-8236-3d85-a825-36bb095a41a1.roa
Signing time:             Sun 09 Mar 2025 10:21:01 +0000
ROA not before:           Sun 09 Mar 2025 10:21:01 +0000
ROA not after:            Sat 07 Jun 2025 10:21:01 +0000
asID:                     36522
IP address blocks:        207.236.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:5f:71:65:bf:92:2f:2c:21:19:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:01 2025 GMT
            Not After : Jun  7 10:21:01 2025 GMT
        Subject: CN=ccb80d9c-cea2-48be-903a-38ac866184c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:88:51:53:fd:14:6a:3d:03:50:e3:8e:d3:0f:
                    de:51:37:c5:fc:d1:89:82:73:fe:86:76:47:e4:4a:
                    db:a3:8d:d9:ff:34:f5:1c:52:a0:3a:a9:d9:5d:89:
                    99:86:f8:b3:25:c8:6d:f3:25:bb:83:a0:ed:28:79:
                    86:f8:b9:a9:69:54:25:26:8d:c8:b5:70:bc:66:dd:
                    fb:11:f1:1c:d7:a1:f8:7e:0e:dd:86:07:aa:09:64:
                    b3:ec:42:25:51:ed:be:7e:42:4a:ae:50:4f:c6:de:
                    e9:62:4e:ca:d1:97:94:d5:a3:9d:2b:1b:39:82:48:
                    d0:f7:c3:b8:62:59:e7:0a:2d:21:f9:d0:91:c0:bc:
                    6d:16:1b:70:fd:2d:38:1e:c4:04:b8:02:14:73:72:
                    28:be:14:d4:e2:89:8c:d8:31:8c:1d:3e:9d:da:f2:
                    82:67:f8:d0:03:3c:99:62:4b:04:b9:c6:4f:01:56:
                    b6:4c:18:4c:1c:26:20:30:18:79:48:da:ff:c9:6c:
                    fa:19:52:a6:b1:8b:78:dd:94:06:c4:fd:c2:0b:e2:
                    fb:5a:fa:32:fa:bf:51:46:aa:27:2b:a0:ca:c6:0d:
                    97:56:d1:cc:11:da:81:13:1e:ba:a5:10:30:9f:2d:
                    cb:4a:e5:51:56:2e:7a:8b:95:b0:da:ec:48:b0:4d:
                    83:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EF:1B:01:17:DA:CE:67:5E:73:B1:B1:A4:51:07:1F:FD:16:BA:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/058be8cf-8236-3d85-a825-36bb095a41a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e3:24:6a:3c:ce:5f:85:a0:3a:dc:85:99:97:94:0c:07:5a:
         c8:10:0f:a7:97:05:15:52:49:b3:41:d5:4f:11:e4:8b:9d:bc:
         f1:08:19:2f:79:3d:52:38:7e:dd:96:81:37:30:1f:9d:ea:10:
         bb:f3:99:71:a4:af:ad:02:ea:eb:7d:3c:4f:02:b1:39:50:ac:
         ca:70:9b:0e:5a:4c:36:e4:13:24:c7:cc:41:40:7e:0c:73:6d:
         d5:f7:5e:8e:94:4c:86:14:db:fb:19:28:1b:5e:f3:5c:c0:dd:
         a5:25:85:53:bc:98:37:0c:37:b7:5c:2f:e6:f4:35:bd:66:1a:
         fb:b5:0d:86:aa:40:9c:9d:f2:d5:5c:d6:94:79:5f:69:63:ac:
         86:88:44:b3:81:3c:be:35:63:f0:d2:3b:74:90:af:64:24:a8:
         07:8c:99:90:8f:4c:9c:08:a1:e3:12:20:a7:f4:cd:08:25:e5:
         b8:4a:73:db:e4:50:0a:d6:e0:73:18:ee:b2:04:4c:75:89:07:
         4b:58:25:85:00:4f:07:f5:8a:40:be:24:6c:b0:64:36:c8:6d:
         cd:76:0b:d5:a7:c0:d0:30:86:39:9e:e2:b9:06:9b:69:b4:d8:
         df:cb:6e:cc:71:11:0a:af:0f:90:c1:35:db:87:75:bb:87:4c:
         7c:8d:88:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:05 2025 by rpki-client