Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/34cbe6ad-2fbd-3389-8464-c0401b36080c.roa
File:                     34cbe6ad-2fbd-3389-8464-c0401b36080c.roa (raw, json)
Hash identifier:          qwbPJbQshSg9Fz0lsDnbzt50TGX5N7o0tW0+vaH2Bzc=
Subject key identifier:   0F:B1:D0:C7:68:24:AF:01:FC:27:F3:23:6D:0D:3F:05:6C:6F:C9:27
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921345904B4FF21466FC41700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/34cbe6ad-2fbd-3389-8464-c0401b36080c.roa
Signing time:             Sun 09 Mar 2025 10:20:58 +0000
ROA not before:           Sun 09 Mar 2025 10:20:58 +0000
ROA not after:            Sat 07 Jun 2025 10:20:58 +0000
asID:                     15321
IP address blocks:        207.164.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:59:04:b4:ff:21:46:6f:c4:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:58 2025 GMT
            Not After : Jun  7 10:20:58 2025 GMT
        Subject: CN=b7af3cfe-02eb-4cbb-ba3e-444149485882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1d:aa:01:e3:aa:11:f6:7d:55:f4:cf:f0:4e:
                    55:51:ef:e0:57:b4:1f:05:56:8e:bb:f1:59:6b:70:
                    e3:b5:2b:cf:58:f0:5f:fb:e8:8b:f6:4e:a1:51:03:
                    bd:41:d2:85:29:e3:5c:07:b2:e3:cc:cb:d4:7f:4f:
                    e8:59:8f:dd:15:8b:46:a9:4b:38:47:2e:b0:a5:ce:
                    35:d8:e0:55:19:aa:4a:96:11:e8:29:6c:6f:6e:c3:
                    1a:2e:12:74:e2:9d:ec:5a:da:80:37:81:b4:02:cf:
                    4f:67:b3:db:dc:59:53:db:23:41:31:44:c7:75:6d:
                    d3:c2:e7:10:33:e3:cc:99:63:15:53:0b:4b:db:6c:
                    49:e6:78:8c:1c:76:a7:b5:25:bc:f7:0f:d9:b5:0a:
                    c9:b0:37:84:52:e2:28:a4:22:3b:3a:89:55:3c:b5:
                    65:c4:1c:af:a6:88:80:15:a3:6b:27:af:8b:db:ff:
                    66:d0:3d:61:11:c6:94:17:45:ae:91:c7:a9:05:ba:
                    f7:b4:85:67:27:d6:cd:18:09:b4:49:ea:5e:06:a0:
                    9b:56:e4:1c:a8:02:bb:23:4f:b0:d0:29:21:39:61:
                    47:11:13:24:25:4f:67:00:d7:51:ba:71:75:3d:2b:
                    ea:78:83:7a:b1:b9:38:ba:c7:88:45:8a:a0:08:2b:
                    ec:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B1:D0:C7:68:24:AF:01:FC:27:F3:23:6D:0D:3F:05:6C:6F:C9:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/34cbe6ad-2fbd-3389-8464-c0401b36080c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:77:01:19:a9:bf:4c:5b:b4:12:bc:ce:34:e4:a6:6e:a3:d9:
         5b:b5:d7:e1:09:d8:7a:95:d5:2e:a4:29:cd:2c:11:9f:4c:0e:
         05:84:ec:18:97:be:7f:30:03:62:09:4f:56:08:96:ab:2a:2f:
         dd:60:2c:83:cc:da:4f:be:6f:79:bb:98:4f:0e:ae:ad:f2:fc:
         9c:b9:98:e6:16:1c:42:8d:85:c7:b2:ab:b1:26:b8:42:3e:b2:
         8c:9f:c4:3e:ac:47:35:68:87:b4:3a:be:d1:02:41:5c:af:69:
         74:ed:af:01:27:d3:ad:0b:15:89:3e:1f:eb:75:de:ce:76:f4:
         1f:ee:3a:0c:2c:6a:38:90:09:04:df:f7:1a:a0:c0:7d:e4:6d:
         73:e1:d3:f4:c3:84:e8:c5:fe:f8:b0:e9:07:e5:da:43:18:69:
         9c:27:81:5f:fc:55:e7:d7:20:f0:fd:ae:4d:f5:a2:63:5e:da:
         92:60:88:f9:a9:b6:a4:36:b4:68:cd:67:17:79:f1:34:be:12:
         d0:d5:1f:1d:07:c0:b5:eb:93:2d:1b:98:66:4c:b3:36:01:e1:
         de:25:b7:64:cb:38:15:72:b6:e8:79:b4:af:af:92:d3:fd:6f:
         71:6a:e3:03:81:16:ec:a7:0a:d4:62:96:25:67:f5:a5:fc:87:
         56:2d:9f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:00:57 2025 by rpki-client