Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/62ca77ad-aafb-363a-98af-cd9b6cc8b404.roa
File:                     62ca77ad-aafb-363a-98af-cd9b6cc8b404.roa (raw, json)
Hash identifier:          EGoIC1g2kk/c0NYymJnz6vVzklH1Qwy2RatDa4uoQhQ=
Subject key identifier:   D4:6A:61:DF:D4:B2:08:44:23:45:D9:58:7B:BD:BC:72:0E:53:CD:F2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921343B5D1D3E70B6811A5880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/62ca77ad-aafb-363a-98af-cd9b6cc8b404.roa
Signing time:             Sun 09 Mar 2025 10:20:44 +0000
ROA not before:           Sun 09 Mar 2025 10:20:44 +0000
ROA not after:            Sat 07 Jun 2025 10:20:44 +0000
asID:                     577
IP address blocks:        198.235.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:3b:5d:1d:3e:70:b6:81:1a:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:44 2025 GMT
            Not After : Jun  7 10:20:44 2025 GMT
        Subject: CN=02b2473b-8ec6-464d-b723-7109b3bc96e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:42:50:47:8d:e4:3c:9e:cf:9a:a9:ca:5b:
                    83:6b:56:47:31:cb:31:69:cb:ff:92:61:50:04:e9:
                    29:0c:dd:0a:b9:3d:30:bf:a7:8b:76:67:69:b3:2e:
                    c4:5f:5c:d5:b1:7d:34:7a:64:db:01:52:02:09:fc:
                    40:47:bb:92:fc:c7:a7:12:ca:c0:5b:64:ca:1f:aa:
                    fc:2a:25:94:b0:59:65:69:a8:6e:46:01:2e:6d:e2:
                    24:12:5f:8e:be:a3:ed:93:a3:4b:91:ae:5b:ec:59:
                    07:03:56:47:ba:ad:b8:31:1e:3d:a4:8d:fb:93:08:
                    a2:29:3c:7a:fb:a6:12:a0:8b:e1:0f:ae:33:3b:2e:
                    6a:e6:3a:e8:9b:f3:ff:db:18:86:c3:3b:c9:7f:cc:
                    f1:27:7a:9d:42:03:4c:e5:2f:92:5f:dd:e3:24:48:
                    76:1f:4e:81:b8:f7:d1:37:ad:17:b1:35:46:ee:2b:
                    1a:6a:96:b0:b9:86:75:b8:51:86:dc:d9:84:86:e5:
                    de:53:80:31:ba:e1:14:e2:60:5e:9b:d8:3e:0a:08:
                    8b:f8:a0:f3:66:48:0b:8b:b2:43:d3:73:22:b1:b5:
                    0a:6e:de:30:71:8a:8a:1f:c5:12:69:a4:45:37:b4:
                    63:75:46:de:24:92:a5:52:22:73:8b:87:86:fd:fd:
                    34:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6A:61:DF:D4:B2:08:44:23:45:D9:58:7B:BD:BC:72:0E:53:CD:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/62ca77ad-aafb-363a-98af-cd9b6cc8b404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:be:dc:3c:c8:89:6a:2a:9b:95:cd:2a:ac:aa:01:89:20:b0:
         7d:87:6a:1f:65:f6:b4:32:ca:c2:f2:a4:40:70:54:2d:fe:df:
         34:c0:76:76:03:7e:dc:17:dc:62:7c:01:b5:9f:f4:cd:bf:5c:
         26:53:b3:a9:fe:04:39:05:b4:8d:70:1d:d8:a8:2f:9f:80:6d:
         96:fb:fa:81:19:ca:8f:20:6e:5c:98:18:2d:a7:61:74:f4:0c:
         93:01:4b:d4:c1:11:6d:bc:8a:fb:d6:9a:74:00:fa:59:71:cc:
         df:30:9d:92:2b:ff:3e:91:2b:33:fb:ad:39:5c:bd:e7:87:52:
         30:bd:04:70:12:b7:ab:d8:87:07:a9:bf:f6:fa:15:4e:e1:46:
         da:bb:08:53:0a:3c:e3:4b:1e:08:87:dd:75:2d:d9:11:9e:54:
         0d:42:e3:40:2e:c7:82:e4:84:f2:17:83:13:7e:b1:09:67:56:
         cd:71:09:28:b8:41:59:cb:cb:2b:01:3a:87:91:de:17:9d:f3:
         35:e3:38:37:d4:7d:63:64:3f:87:3d:45:11:b7:01:f5:af:cf:
         9a:79:3b:3d:fa:c6:cf:9b:50:ee:68:48:bc:61:a0:23:fa:0c:
         91:7c:3e:de:e5:ba:01:fa:e9:09:7a:96:32:45:a0:24:09:f5:
         ec:ba:7d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:28 2025 by rpki-client