Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0b90ac91-6104-3e37-9061-fcb7d036d004.roa
File:                     0b90ac91-6104-3e37-9061-fcb7d036d004.roa (raw, json)
Hash identifier:          zuOjqLMx7ny6FMDGfu7Q6kxOiwzomMyBippGtt35EbE=
Subject key identifier:   D1:1E:D4:27:68:43:17:61:1A:6C:3C:A0:6D:68:E5:79:42:D1:FE:49
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921344DA6ACDC4EE5D80CF2C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0b90ac91-6104-3e37-9061-fcb7d036d004.roa
Signing time:             Sun 09 Mar 2025 10:20:53 +0000
ROA not before:           Sun 09 Mar 2025 10:20:53 +0000
ROA not after:            Sat 07 Jun 2025 10:20:53 +0000
asID:                     36522
IP address blocks:        206.47.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:4d:a6:ac:dc:4e:e5:d8:0c:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:53 2025 GMT
            Not After : Jun  7 10:20:53 2025 GMT
        Subject: CN=fbabf91c-1633-42f7-9452-9dede8574927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:25:8e:da:b3:b0:fa:e9:80:76:33:26:82:4b:
                    16:ae:40:9f:67:dc:18:b0:6f:b2:a2:cf:60:5e:15:
                    bc:1d:bd:80:ac:47:ca:a6:e0:4f:ed:b9:b5:20:23:
                    fe:42:4a:37:79:08:89:8e:8f:c9:7c:a4:2e:ad:15:
                    8e:aa:2b:cf:70:48:4f:2e:54:6c:d3:4b:09:d0:59:
                    38:be:72:90:32:96:2a:35:d5:5a:74:32:32:0f:c3:
                    5a:91:0d:95:09:0e:cb:1b:97:36:10:5b:77:bc:20:
                    1f:fe:af:b3:d7:3f:ab:9e:e7:ce:72:2e:b1:71:9a:
                    d2:b8:a9:13:72:73:b9:93:6d:25:a0:32:fe:9c:65:
                    87:6e:53:3a:05:48:9e:76:74:d7:1d:b4:05:80:8f:
                    74:28:cd:5a:93:ee:28:43:eb:1e:8e:1b:f5:9e:57:
                    66:f3:c4:e7:4e:49:0a:5c:d0:8c:4a:81:6a:1e:c6:
                    45:bf:9e:c4:61:b7:fe:c0:01:9c:9f:47:0f:5d:6c:
                    41:56:96:61:41:f2:89:62:c3:97:23:89:47:4a:79:
                    de:3a:d4:84:8d:32:3f:50:7d:f4:16:a9:6b:39:17:
                    2a:2a:56:5d:68:5f:3b:7b:32:52:79:2d:ab:c5:54:
                    f1:ef:12:fa:a7:58:e2:d5:65:e5:ec:54:1d:0f:e3:
                    78:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1E:D4:27:68:43:17:61:1A:6C:3C:A0:6D:68:E5:79:42:D1:FE:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0b90ac91-6104-3e37-9061-fcb7d036d004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:c3:cf:ed:86:be:5c:9d:e6:74:18:fa:94:f8:ba:1b:9d:1e:
         52:7c:d5:7f:b4:ac:88:24:1a:94:0e:8f:7a:a1:fd:f8:c7:01:
         2b:e9:9f:9c:43:74:cf:1d:b1:62:b6:72:ca:41:6b:d2:48:44:
         83:1f:1d:b9:bc:94:81:13:c7:93:2a:ff:ae:03:52:63:f2:b2:
         7d:2a:48:c1:48:e2:bb:38:c5:40:75:12:3a:5e:3e:e4:41:8f:
         30:2f:a7:ba:de:f2:7e:54:c0:05:1a:24:77:34:c8:9b:21:b9:
         d1:e3:83:c0:08:f9:25:e0:0e:24:b9:b9:91:12:c5:fa:fb:23:
         8d:ff:bb:03:f4:1e:02:77:f2:b8:12:56:bb:df:45:7e:24:72:
         60:36:e3:f1:1b:57:32:31:c8:eb:17:1a:bf:e0:62:fe:b9:d7:
         31:d0:ce:0a:ea:0f:5a:ca:8d:33:92:3c:62:b8:0a:d1:27:69:
         5e:ac:6b:f8:f9:14:52:11:01:d2:d6:3e:ca:93:6f:da:4a:3a:
         b7:94:ac:66:4d:40:a3:91:62:ff:6d:8d:a8:50:3a:f1:79:4b:
         27:86:ce:98:b1:66:b8:fe:bd:06:0b:29:3e:91:d9:dc:fc:c2:
         be:e7:9a:da:e1:c2:07:5a:e2:57:99:f4:e4:38:26:31:51:ac:
         a5:41:e6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:12 2025 by rpki-client