Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/71f912f7-7017-30be-a224-feccfd53c825.roa
File:                     71f912f7-7017-30be-a224-feccfd53c825.roa (raw, json)
Hash identifier:          Krx72g1wxar0RrYKQ3nTRgZdjmwvgbQ+FnPwSPqi2GY=
Subject key identifier:   3D:79:F1:17:5E:D1:3D:B2:B8:53:63:70:10:A1:62:C3:E1:1C:7C:BA
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921344D0D4BACC392962C9480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/71f912f7-7017-30be-a224-feccfd53c825.roa
Signing time:             Sun 09 Mar 2025 10:20:53 +0000
ROA not before:           Sun 09 Mar 2025 10:20:53 +0000
ROA not after:            Sat 07 Jun 2025 10:20:53 +0000
asID:                     36522
IP address blocks:        206.47.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:4d:0d:4b:ac:c3:92:96:2c:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:53 2025 GMT
            Not After : Jun  7 10:20:53 2025 GMT
        Subject: CN=6928c7c5-772e-4a48-a7fa-eda228238ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:66:f8:f0:0d:86:9c:d9:79:92:ed:dc:13:fc:
                    8d:b2:d1:dd:a6:ca:c2:02:79:3e:29:23:e3:b0:19:
                    30:7c:23:e7:46:0b:cc:9c:a7:04:b2:1d:83:3b:66:
                    2c:8c:01:27:98:b5:05:a0:65:7d:ba:3f:d9:cd:0e:
                    31:31:2b:72:ae:a1:3d:b3:cc:08:c2:95:94:2a:07:
                    89:93:f4:ab:72:07:74:86:12:1b:84:11:8a:e5:9a:
                    1e:b6:5e:c3:34:31:89:10:e5:4e:f7:22:d8:b8:2b:
                    2b:1f:d7:56:a2:40:3d:ba:bc:5b:07:52:78:dc:68:
                    ae:b1:7b:3e:f1:8d:2c:6d:36:69:03:1f:64:cf:ad:
                    ac:f4:84:95:36:31:ef:a1:30:9a:63:ce:f9:b5:1d:
                    e8:46:8f:ef:5f:3d:28:57:09:b5:6d:c5:b3:4a:77:
                    37:12:d9:3d:b9:88:d0:98:b2:41:51:7f:b5:32:a6:
                    bc:5d:c9:db:23:c9:8a:93:d4:28:88:f5:20:a5:4d:
                    f9:1d:08:7b:fc:fe:e0:6a:7b:c2:f9:f1:08:b5:3b:
                    0c:f6:7c:91:c6:fe:0e:70:5d:88:3d:87:bc:78:1c:
                    d7:8a:5a:31:53:68:f1:89:46:50:f1:aa:5f:5c:3b:
                    9b:e5:fe:58:b9:df:4d:a8:15:2c:a7:7e:7b:00:1d:
                    d3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:79:F1:17:5E:D1:3D:B2:B8:53:63:70:10:A1:62:C3:E1:1C:7C:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/71f912f7-7017-30be-a224-feccfd53c825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c7:14:df:23:20:94:75:83:db:77:ff:98:ac:f3:65:3f:66:
         d3:01:b8:85:92:9c:c0:41:19:41:08:27:8d:66:05:f0:0e:a7:
         d4:e3:66:b2:b2:be:48:51:30:9f:a6:91:ca:f5:60:d2:d5:d9:
         8e:8c:c1:90:b8:63:b7:69:4b:ec:4b:d4:2b:a9:3a:50:1b:c5:
         eb:e7:da:42:00:79:5e:92:10:49:3b:6b:4a:77:c1:81:d0:ac:
         e3:73:e9:b7:bb:81:fe:6b:ae:fc:28:56:8e:a1:06:03:87:05:
         12:09:ed:5e:ee:0f:75:3b:2b:ef:d8:ca:e0:af:c9:7e:c4:71:
         91:10:c2:42:45:04:a4:ae:fe:d8:a1:e1:35:82:ea:b7:c7:38:
         ae:e2:68:36:5c:df:3d:22:38:f3:20:2e:3e:c5:b0:2a:33:c4:
         e3:58:cd:f5:08:1f:42:fa:ad:d0:b8:21:81:4d:1a:8f:e9:03:
         0a:49:09:34:91:a7:f1:fe:72:c5:fe:18:84:cf:d9:c3:95:70:
         b1:1a:20:bf:d3:95:c1:1b:89:cb:f4:25:07:a6:bd:a8:1f:0e:
         f6:b0:86:ad:3a:24:47:eb:fa:27:13:f8:e5:ad:61:cc:b7:bf:
         22:1d:34:ae:16:b6:6b:02:81:31:d7:e3:77:89:b5:ca:7e:9c:
         47:08:11:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:00:57 2025 by rpki-client