Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3cf0df26-61ca-3b96-827e-01b2a0eb099b.roa
File:                     3cf0df26-61ca-3b96-827e-01b2a0eb099b.roa (raw, json)
Hash identifier:          6ngZkAnA0VLb3rI847FPu5lqTEGLLH+mrkkC2J8Tq7w=
Subject key identifier:   F5:92:D5:5D:6F:32:82:EF:DF:6A:3B:D8:34:F7:F7:92:1A:C4:DF:F7
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213438A2E716FA91BC378A00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3cf0df26-61ca-3b96-827e-01b2a0eb099b.roa
Signing time:             Sun 09 Mar 2025 10:20:43 +0000
ROA not before:           Sun 09 Mar 2025 10:20:43 +0000
ROA not after:            Sat 07 Jun 2025 10:20:43 +0000
asID:                     577
IP address blocks:        184.150.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:38:a2:e7:16:fa:91:bc:37:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:43 2025 GMT
            Not After : Jun  7 10:20:43 2025 GMT
        Subject: CN=f5f6da17-baec-4076-804e-0870609f5660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:47:7b:59:db:a0:c4:a8:a0:cc:59:cf:51:
                    24:87:0f:d8:f9:c9:4f:fb:ee:34:2c:df:40:68:72:
                    c5:a0:fe:de:71:41:fd:36:4b:7c:82:37:e9:65:17:
                    bc:ba:97:0e:ad:57:d7:c2:f1:8a:86:7a:96:da:59:
                    b9:e0:a7:c4:e2:c9:73:80:c2:0c:13:8c:54:d7:b0:
                    bd:ca:2a:d1:d4:e6:9b:32:a6:c3:27:fe:95:aa:48:
                    ef:5f:91:c3:ce:ab:b5:aa:7c:06:1c:38:d2:94:2c:
                    76:cb:71:45:21:9b:51:7c:18:a8:f2:17:0e:b9:b8:
                    5a:81:01:42:ff:d4:bb:bd:df:b5:c9:42:9e:d8:cd:
                    c8:e4:9e:19:37:4b:97:db:93:f0:d4:f1:38:9a:3b:
                    a8:7e:69:8b:fe:c3:30:d0:75:c7:e1:ee:89:58:37:
                    c7:2d:15:94:d5:c4:51:9c:1f:40:13:87:b6:14:0c:
                    26:71:5f:0e:b1:f4:14:f5:c7:43:e4:d5:77:8e:bd:
                    6f:70:20:c6:5b:fe:99:9e:67:fa:27:b6:4a:d9:d2:
                    59:e1:2f:89:58:40:25:26:a5:ed:95:7f:f3:e1:b4:
                    db:b1:60:2e:d6:d4:cb:3b:67:cf:55:d6:d5:3c:82:
                    84:90:d9:55:3f:d1:7e:de:10:95:a4:62:df:a3:a0:
                    90:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:92:D5:5D:6F:32:82:EF:DF:6A:3B:D8:34:F7:F7:92:1A:C4:DF:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3cf0df26-61ca-3b96-827e-01b2a0eb099b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.150.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:8d:53:16:de:7b:12:8f:63:bc:55:e4:82:da:3d:ae:5b:38:
         65:21:a7:61:b4:94:81:f3:c5:3d:de:46:ef:01:7d:42:9d:e3:
         8d:5a:1a:bd:69:88:d2:f8:bd:d6:9b:1e:eb:a4:32:55:52:86:
         17:b4:4b:39:a8:da:bd:f9:30:62:e9:d8:0c:c6:8d:e3:01:52:
         f3:3c:1a:74:f3:dd:d3:ae:3b:f0:8d:b9:52:d2:b3:2c:26:10:
         12:c6:b4:c8:80:73:95:13:5a:45:4b:43:f8:97:1d:b1:f3:c1:
         2c:7b:f6:25:3c:f3:ac:ca:c9:7d:45:5c:cd:54:4e:47:8e:eb:
         9e:15:5d:c6:2e:71:6a:07:6c:30:2b:4e:98:8d:60:d5:33:6a:
         f9:5c:fa:31:be:71:5f:a3:21:2e:4c:b2:71:2e:e9:0c:20:3b:
         f3:98:2f:ca:be:be:c1:f7:9a:80:8c:9c:4b:3a:64:1c:3e:f9:
         f4:f6:fd:28:e9:77:4e:38:96:02:b1:2d:65:59:1b:f0:d0:3c:
         97:36:69:60:ed:57:53:3f:17:bd:d6:42:76:a6:bf:e1:e2:5a:
         bf:f0:4e:df:9e:c6:01:24:3a:f7:89:bf:99:30:9d:de:a7:09:
         56:68:cf:fb:14:8c:fc:05:0e:77:61:f8:8e:9e:2a:d6:2c:30:
         9d:f8:61:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:37 2025 by rpki-client