Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2c1aa4f4-f1c5-3b24-906b-4513038fb8c6.roa
File:                     2c1aa4f4-f1c5-3b24-906b-4513038fb8c6.roa (raw, json)
Hash identifier:          f9e1YALiserd6FRD5/gKm4ZPvvnmoXUchRdFTDX02K0=
Subject key identifier:   7E:6A:37:E6:B0:67:0F:A8:5B:9E:55:0D:22:92:7B:EB:4D:5C:27:19
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921345AD39DD3A363B92DB1C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2c1aa4f4-f1c5-3b24-906b-4513038fb8c6.roa
Signing time:             Sun 09 Mar 2025 10:20:59 +0000
ROA not before:           Sun 09 Mar 2025 10:20:59 +0000
ROA not after:            Sat 07 Jun 2025 10:20:59 +0000
asID:                     32441
IP address blocks:        207.179.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:5a:d3:9d:d3:a3:63:b9:2d:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:59 2025 GMT
            Not After : Jun  7 10:20:59 2025 GMT
        Subject: CN=4b21e75f-0374-4c80-a708-674005eb7e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:85:a7:b3:af:88:0d:cd:ee:02:dc:e6:56:
                    b7:46:14:6e:4e:dc:0f:07:0b:71:14:4a:b2:5e:60:
                    e6:c0:a6:b5:6b:37:2e:22:bf:81:83:d5:3b:ad:44:
                    f5:43:d8:9c:00:80:ab:74:22:73:6a:3e:6c:d9:93:
                    ca:09:2a:81:45:b8:5b:4d:bd:0f:ba:cc:be:d0:5d:
                    e4:bd:e7:ff:1f:52:bb:cb:c1:17:6a:69:f7:2c:aa:
                    20:df:90:5f:7e:27:3b:79:cb:dc:80:70:3a:4c:b8:
                    aa:e7:62:df:fd:b4:ab:34:da:d6:71:b9:34:04:04:
                    ca:f1:62:47:0a:f1:e8:8a:49:4e:b4:32:23:25:b9:
                    0f:de:9f:7b:2b:17:67:96:d6:7e:63:e4:de:41:3d:
                    af:04:f5:77:ac:e9:b0:06:87:cd:1b:fd:b6:fe:b4:
                    12:01:9d:e6:a5:26:85:cc:48:f6:63:12:8e:66:dd:
                    5d:76:fb:63:2c:0d:5a:cf:98:25:43:f1:45:10:60:
                    b6:91:9c:11:ba:b8:63:ea:1f:b5:8f:6c:7d:71:7f:
                    97:0d:be:8c:8b:19:c9:48:68:8a:61:99:1b:3a:9f:
                    5a:5e:11:86:f0:02:3e:a7:cb:b6:fc:0e:07:7f:53:
                    57:34:6d:c0:38:14:d2:de:ac:1b:3e:ed:e4:06:52:
                    bc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6A:37:E6:B0:67:0F:A8:5B:9E:55:0D:22:92:7B:EB:4D:5C:27:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2c1aa4f4-f1c5-3b24-906b-4513038fb8c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.179.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:0d:02:a9:7f:22:be:28:94:04:26:85:76:e1:fd:20:d8:d1:
         65:28:0e:d9:5d:ef:c7:ff:66:40:26:80:1b:31:ec:c3:ae:92:
         c1:c9:22:a1:89:1f:e6:86:e4:44:71:74:48:99:61:ab:75:71:
         ca:48:81:ec:ee:78:55:39:7a:36:4c:0e:73:ee:48:42:2b:da:
         19:61:56:7f:ef:79:87:2e:c1:bd:cf:e4:18:a3:a1:20:b9:84:
         fd:60:22:f4:a2:e8:4f:c5:24:9a:60:af:e8:56:e7:fb:af:16:
         aa:0d:87:40:e4:9d:0a:82:83:64:29:88:39:36:4f:bd:b9:c6:
         ce:87:98:74:84:b0:86:1c:fd:24:08:7e:5a:a3:b3:c1:43:81:
         f3:53:67:30:1f:ac:80:01:d8:45:1f:8c:85:2d:83:ee:41:5a:
         04:e5:66:97:0c:2b:6d:ea:6b:a8:ca:ab:3c:16:1d:74:3e:2c:
         a9:44:04:3c:2c:db:73:a5:3e:cd:5c:4f:e9:f6:05:02:08:ed:
         8a:15:65:02:ab:64:8c:e9:3e:b2:1f:bc:46:82:f0:f7:09:21:
         09:d7:65:bd:e1:80:09:d6:5d:bc:af:1c:0d:dd:05:c8:86:a1:
         1e:20:e7:3a:dc:3f:cb:49:4f:7d:cb:90:47:53:f5:29:6f:94:
         ad:ac:c7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:16 2025 by rpki-client