Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/16b535db-5f53-32a5-b14f-2ad957d54d23.roa
File:                     16b535db-5f53-32a5-b14f-2ad957d54d23.roa (raw, json)
Hash identifier:          TblnUW3QTb/F+P645r2EJMfjnS6QCZfgSJq0dBpX5SM=
Subject key identifier:   9A:E8:68:60:AE:3A:B7:B7:4C:AC:96:5D:54:F8:A4:1F:F4:78:6E:5F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921344EAA5EE95F7B95E44300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/16b535db-5f53-32a5-b14f-2ad957d54d23.roa
Signing time:             Sun 09 Mar 2025 10:20:54 +0000
ROA not before:           Sun 09 Mar 2025 10:20:54 +0000
ROA not after:            Sat 07 Jun 2025 10:20:54 +0000
asID:                     36522
IP address blocks:        206.172.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:4e:aa:5e:e9:5f:7b:95:e4:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:54 2025 GMT
            Not After : Jun  7 10:20:54 2025 GMT
        Subject: CN=ea648278-a805-49ce-998f-1158130024c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:8c:35:a3:1e:b3:72:bd:e6:21:58:64:2c:
                    3d:12:30:e6:7c:52:3f:b8:70:c3:b0:36:82:af:a7:
                    27:a7:ec:f5:44:33:0f:3a:5d:13:53:29:50:79:37:
                    91:dc:9a:b5:0e:bc:71:3d:c6:2f:38:4a:cb:a6:3e:
                    ab:3d:10:a0:95:99:dc:f7:5b:a1:ac:f2:95:bb:e5:
                    de:ba:51:4d:49:2e:d2:77:d7:ea:d6:19:58:b1:f4:
                    77:b1:56:04:86:51:30:1f:b5:d3:02:eb:86:41:1d:
                    09:d6:cd:10:e9:2e:ce:95:c4:73:ed:f4:a9:92:95:
                    9e:c9:ce:51:1d:5d:0a:d8:7b:0d:4b:c0:83:46:cc:
                    6b:28:bd:2a:a8:2f:6e:79:dc:d7:ed:78:59:ec:ca:
                    a6:a9:7c:e1:1d:63:67:69:44:55:19:a6:62:42:cd:
                    67:ac:7a:be:20:f4:35:b9:cd:ba:eb:14:da:74:bc:
                    d5:d4:c3:02:88:bf:6f:28:cc:35:0e:93:35:e6:95:
                    7b:a8:17:20:4c:42:ed:8c:97:c0:0a:ff:5b:14:75:
                    5d:a1:b0:d8:fe:d3:f7:3d:c5:43:f5:fb:c7:98:41:
                    41:d2:2b:d7:f4:9f:1d:eb:bc:95:ad:d6:f7:4b:04:
                    c1:47:b7:a3:e2:72:6c:48:83:af:c6:af:51:11:cc:
                    ad:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E8:68:60:AE:3A:B7:B7:4C:AC:96:5D:54:F8:A4:1F:F4:78:6E:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/16b535db-5f53-32a5-b14f-2ad957d54d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.172.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:66:dc:96:c1:d7:09:2f:af:1c:89:21:1c:99:7c:82:3c:df:
         f5:e9:ba:49:22:ab:92:0b:e3:33:7b:bd:cf:57:25:70:67:bd:
         9d:63:62:c2:1c:e2:e9:4a:95:60:aa:57:95:a2:ca:c3:82:92:
         0e:67:51:8b:29:68:26:3d:52:e5:67:64:d3:ce:92:ab:84:f1:
         2c:7a:b0:89:1a:55:af:fe:00:6c:23:b3:32:8a:23:dc:62:74:
         15:3b:cf:e4:b2:39:e6:db:a3:2a:db:62:4a:e3:76:3e:73:e1:
         b2:12:9c:1f:0c:c1:84:d6:41:d3:ca:27:f8:ab:3f:69:56:93:
         93:63:42:e1:8b:6b:b9:d9:5f:bd:f7:81:a2:4f:23:b2:3e:33:
         8a:e3:27:a7:2c:8c:db:c7:4a:75:cc:1f:e1:26:3c:55:59:e4:
         b0:4a:39:29:28:8f:33:a8:30:c7:f7:20:a7:c1:1a:df:12:44:
         27:8d:20:52:fe:ae:8a:09:57:c1:a8:ac:ac:33:15:7a:cf:ea:
         ad:6a:98:e8:11:5d:b6:96:98:1e:79:5f:87:84:57:78:61:09:
         7c:9f:8f:16:ea:4f:66:f0:39:7d:9a:53:1b:9b:b0:f1:7c:15:
         57:98:cf:07:20:2c:32:73:b8:f9:79:47:73:57:5d:72:0b:68:
         ed:a1:05:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:57 2025 by rpki-client