Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6bacf575-dd1a-35b7-8701-72dd9c1b6c85.roa
File:                     6bacf575-dd1a-35b7-8701-72dd9c1b6c85.roa (raw, json)
Hash identifier:          /F8+rkfGxGDLidwpmMHmuMOAO1iUHFC9/hnWSEQsmL8=
Subject key identifier:   29:DC:0B:7E:9F:A7:9F:A6:1A:23:5E:CB:D3:77:89:79:DE:94:BD:88
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858492134598D4D6CB477D6202600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6bacf575-dd1a-35b7-8701-72dd9c1b6c85.roa
Signing time:             Sun 09 Mar 2025 10:20:59 +0000
ROA not before:           Sun 09 Mar 2025 10:20:59 +0000
ROA not after:            Sat 07 Jun 2025 10:20:59 +0000
asID:                     15321
IP address blocks:        207.164.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:59:8d:4d:6c:b4:77:d6:20:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:59 2025 GMT
            Not After : Jun  7 10:20:59 2025 GMT
        Subject: CN=3111e8d2-dd86-44f5-b6d1-2074e1ccb9ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:31:4e:de:b4:53:d1:2d:db:86:df:34:d2:a5:
                    ef:e5:01:f2:4f:1a:dd:9c:bc:68:af:1e:91:7b:7a:
                    33:59:2e:6e:de:95:f5:d7:bc:01:6b:7b:56:e5:77:
                    57:25:28:ff:9c:d5:0d:be:61:ad:90:d3:29:34:c8:
                    72:99:34:ef:2b:39:38:25:6b:65:63:b5:54:9b:57:
                    9d:48:55:a3:7d:a8:12:7c:12:a0:ec:55:7e:98:0c:
                    c9:bf:fa:70:6b:f6:73:c4:bc:b2:77:25:6f:22:a5:
                    06:a2:e0:05:7b:49:dc:4c:5e:31:0c:54:29:10:1a:
                    fe:9f:41:93:f6:ad:0a:f0:8e:4f:98:78:46:c1:c5:
                    2d:8a:6e:8b:04:2a:e4:cc:cc:ed:ff:60:9b:e6:93:
                    24:d4:c2:55:25:60:df:2e:0c:bc:aa:dd:10:9e:74:
                    e7:d8:d9:84:58:6a:41:67:8d:63:62:25:a4:49:3a:
                    cf:44:41:6b:21:0e:82:81:8e:77:1e:02:30:69:84:
                    38:95:77:c9:ac:85:78:92:23:52:82:23:56:d4:f2:
                    4b:47:c7:18:41:9b:26:49:ca:f2:30:c8:ec:f3:5d:
                    38:34:e7:a8:7a:57:b4:f5:f4:8b:98:e1:39:07:b1:
                    ae:50:6e:88:2d:1a:47:ff:b2:c2:06:7d:e8:f5:ac:
                    89:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DC:0B:7E:9F:A7:9F:A6:1A:23:5E:CB:D3:77:89:79:DE:94:BD:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6bacf575-dd1a-35b7-8701-72dd9c1b6c85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b4:92:95:74:b6:7e:c7:61:4a:07:b0:89:cf:e7:fc:23:73:
         ba:4e:06:79:a2:be:57:fb:3b:b6:a9:90:4f:fc:25:d1:57:ab:
         2e:d3:e6:52:7a:64:57:7d:fb:3f:07:d4:8a:00:d2:9e:50:0c:
         53:76:93:79:df:17:01:0d:82:55:ab:52:9c:37:d6:d0:70:e3:
         f0:3c:38:db:ad:57:1a:e6:bf:07:08:d2:48:ab:6a:8d:4b:47:
         d7:ca:62:33:51:45:09:b5:76:12:ff:ec:4a:78:08:d8:09:1a:
         c1:3f:ba:1e:46:b3:c0:26:cb:13:0a:e5:76:82:f7:85:f4:cc:
         cc:d4:48:f6:cd:21:7d:f1:cd:67:ed:10:fc:25:82:cd:0a:a9:
         38:ee:2e:e3:31:00:c4:d6:ce:0c:1e:9e:c0:43:4e:99:e1:13:
         af:28:e9:bd:17:d2:e1:02:3f:73:3d:80:5d:ff:09:9d:be:e8:
         c7:56:30:b8:06:4e:9b:7c:27:9e:f1:1d:99:27:a5:1c:c5:32:
         d4:30:ef:83:c2:30:23:4b:94:8d:d5:66:b4:bc:8c:6a:49:5c:
         57:e0:bd:26:34:33:85:fd:7e:85:ef:29:c3:cb:b3:ba:3f:2e:
         db:5f:09:ed:36:9d:38:ed:fb:8f:0d:d0:78:f2:84:32:83:24:
         ac:56:c6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:41 2025 by rpki-client