Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/231abfb2-5658-3780-a87a-0c4d60ce4f88.roa
File:                     231abfb2-5658-3780-a87a-0c4d60ce4f88.roa (raw, json)
Hash identifier:          M286J5N0mDnFeqqfq8PQUCdlGbBHW2Rlx4Iqgv5wbCY=
Subject key identifier:   EA:FA:42:6A:19:64:AE:61:52:19:35:68:62:80:7A:B8:53:28:F6:0E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921345ED20D7FA843944CA200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/231abfb2-5658-3780-a87a-0c4d60ce4f88.roa
Signing time:             Sun 09 Mar 2025 10:21:01 +0000
ROA not before:           Sun 09 Mar 2025 10:21:01 +0000
ROA not after:            Sat 07 Jun 2025 10:21:01 +0000
asID:                     30336
IP address blocks:        207.236.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:5e:d2:0d:7f:a8:43:94:4c:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:01 2025 GMT
            Not After : Jun  7 10:21:01 2025 GMT
        Subject: CN=6e44d576-f159-44f5-aba8-e280120a6326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:34:c5:39:83:63:f2:5c:5e:df:0e:87:5c:7c:
                    46:e7:62:ea:d8:1c:79:9d:59:5f:b1:58:bd:73:ca:
                    97:d2:38:2c:d1:1d:20:c7:54:0e:d1:ce:ad:f1:5d:
                    47:e8:39:af:89:50:d5:dd:bb:4a:04:ee:64:58:ae:
                    54:cb:58:27:ff:e5:7f:ec:49:02:e4:0f:aa:9d:79:
                    60:fb:92:f6:16:6c:4e:a4:1c:6b:29:f0:1e:d7:cb:
                    55:76:94:71:8b:e9:a5:b6:74:91:88:77:b6:b7:f3:
                    7e:69:0f:62:c1:bd:df:ab:6e:b8:a6:58:00:c9:1e:
                    c9:bb:0b:ee:5b:a5:df:e7:90:7e:e7:7a:4e:63:59:
                    23:1d:1f:1d:a0:26:b2:aa:e5:8a:79:c7:e0:35:88:
                    0e:08:cc:83:5c:5e:89:64:8e:eb:4f:1c:09:20:77:
                    a5:1e:92:1f:21:f6:65:97:94:22:a3:01:4c:bc:7c:
                    c3:a2:ee:76:bb:2a:7e:80:5f:26:fb:6f:74:28:05:
                    3f:fc:9f:2f:c6:4b:67:0e:bf:4e:d0:e3:44:b8:bc:
                    72:9c:e5:20:26:d8:ca:78:47:b2:a3:3a:26:2e:09:
                    a6:9f:b9:c6:c9:f5:55:3e:13:a3:03:45:8f:69:47:
                    d7:3f:ff:09:9f:bf:cd:e0:10:06:f7:a9:04:35:d0:
                    3f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FA:42:6A:19:64:AE:61:52:19:35:68:62:80:7A:B8:53:28:F6:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/231abfb2-5658-3780-a87a-0c4d60ce4f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:9e:44:bd:ea:fa:15:92:a7:ed:e3:59:cc:32:e7:ed:f2:b2:
         fd:71:e9:ac:3a:b9:99:f6:de:a3:6d:22:6f:fc:86:b3:61:92:
         03:11:09:0a:ea:64:d6:fd:e9:0f:55:bd:5b:34:5c:e2:98:77:
         79:e0:b2:2a:d0:2d:6c:e2:9d:62:bf:49:0e:df:68:72:b5:d4:
         20:5b:a9:85:97:e3:ee:41:84:54:66:c4:7b:d9:17:e1:15:4d:
         6a:2b:4e:d6:62:15:99:2d:d4:8f:3f:a7:5d:ca:43:3b:84:8b:
         f7:f8:4a:f0:97:66:47:fc:61:8c:14:14:51:4e:a1:42:61:32:
         4a:6d:44:ab:75:25:53:b6:e8:34:5b:1a:8e:92:94:b5:5c:31:
         13:a8:b1:77:cf:e6:05:c4:43:df:5e:77:08:14:8f:1e:81:a6:
         5c:c1:77:a5:91:a4:18:3a:ad:68:6c:0e:27:ff:06:42:29:f4:
         cd:bf:80:2b:b9:32:5c:ac:57:70:5d:5a:ef:6b:88:b3:f1:5d:
         6e:1f:b8:35:12:95:91:56:ac:bc:1c:70:83:45:89:73:9a:1a:
         79:3a:3c:62:29:43:9d:e8:de:4c:1b:d7:31:0c:30:aa:ce:0f:
         ad:35:8f:79:60:41:93:2e:58:88:7d:fb:c8:1a:d3:60:68:1f:
         3d:ba:4b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:00:56 2025 by rpki-client