Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7953cd39-a0b2-3245-9709-b272c6bc9f0c.roa
File:                     7953cd39-a0b2-3245-9709-b272c6bc9f0c.roa (raw, json)
Hash identifier:          +cQvaCGTp9m+9aXcoQeF5OFMBkkvjHc6xkyJtIKN8G4=
Subject key identifier:   0A:0F:BA:B7:39:BC:F0:3C:3F:46:73:17:C8:81:EF:DD:F4:88:5C:5D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921345876AE6F160D3444E000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7953cd39-a0b2-3245-9709-b272c6bc9f0c.roa
Signing time:             Sun 09 Mar 2025 10:20:58 +0000
ROA not before:           Sun 09 Mar 2025 10:20:58 +0000
ROA not after:            Sat 07 Jun 2025 10:20:58 +0000
asID:                     36522
IP address blocks:        207.164.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:58:76:ae:6f:16:0d:34:44:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:58 2025 GMT
            Not After : Jun  7 10:20:58 2025 GMT
        Subject: CN=210561b3-88bc-48bf-ba9d-44079054c1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:91:e7:ad:a9:19:33:7e:4d:b4:e9:a5:05:b3:
                    49:9c:a1:54:34:d0:a3:3e:0c:2c:6f:26:c0:26:5e:
                    1a:5c:fd:55:dc:18:c1:a2:e4:ae:24:7e:8d:5d:82:
                    d3:19:4a:02:0d:5f:c6:05:5e:89:0c:ab:7e:26:1f:
                    47:ac:85:87:e4:04:13:4e:41:44:9d:f6:ae:b4:4e:
                    57:fb:b2:92:7d:4e:3f:f0:f2:f2:6a:8f:0a:29:b1:
                    62:2b:8b:39:f0:96:70:06:59:5a:b8:64:90:4c:3e:
                    8b:07:ec:ad:47:8c:ef:8f:1e:b5:09:e1:02:eb:04:
                    59:fa:c9:1f:fc:5c:6b:1e:95:31:dd:d5:8c:01:16:
                    81:9c:8a:db:10:dc:ab:60:84:47:05:53:22:d1:25:
                    15:46:da:23:76:ff:75:fe:3b:e8:91:95:10:e5:40:
                    9f:02:63:77:8c:de:5a:ba:bd:e2:12:18:3c:0d:c9:
                    72:b1:4c:f2:3e:46:81:cf:89:91:ff:cc:6d:d0:8f:
                    9a:6f:c8:57:c6:7b:d2:c8:e1:d0:7e:9c:8f:1f:8e:
                    28:bb:6a:ab:f6:3a:81:03:a3:4a:15:e8:82:12:8c:
                    cc:5a:31:c7:ba:99:34:92:50:1a:46:62:95:20:6e:
                    be:10:6f:a3:f4:f2:90:16:34:30:f4:b5:59:67:44:
                    06:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0F:BA:B7:39:BC:F0:3C:3F:46:73:17:C8:81:EF:DD:F4:88:5C:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7953cd39-a0b2-3245-9709-b272c6bc9f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:bf:75:f9:98:c1:49:ed:da:d8:5d:30:f6:20:eb:30:e3:05:
         a0:1f:7a:3b:35:da:bc:8a:77:0c:60:00:cf:ea:b1:5e:fe:fe:
         3c:a0:c8:46:ef:91:d7:9a:19:bc:5f:de:38:30:6d:89:e2:82:
         99:a8:da:ef:5f:fe:62:5d:3b:fe:6b:ca:b0:b8:4d:f2:21:d7:
         1f:48:d1:1b:7e:ec:37:31:a9:2d:42:45:9b:30:34:f2:f8:db:
         b6:f1:bb:68:d7:15:92:c6:d4:0e:4a:f8:73:c1:b6:a9:e6:d0:
         ac:e5:05:65:fa:25:23:a5:99:b0:76:46:6f:90:8e:46:f3:66:
         29:02:81:40:48:c1:c9:01:54:99:e1:30:65:2c:60:d2:99:cf:
         40:fb:89:cf:ac:e8:68:a7:b2:2b:d8:fc:dd:aa:07:16:ef:64:
         31:43:65:cc:9d:54:6e:f9:03:b9:69:28:47:6d:ba:18:2b:88:
         fb:1e:35:4b:9b:30:7f:77:78:97:3a:65:c9:48:67:f1:78:a9:
         21:18:7f:dc:20:2f:a9:9a:76:cf:d8:ee:ce:e4:e8:18:46:79:
         c8:eb:da:fb:48:f3:50:d1:7e:8f:49:d4:a0:83:71:bc:1e:4a:
         85:cd:6c:3f:fc:7c:b0:0a:d4:b3:cc:fa:e7:49:f6:43:a5:5d:
         8a:bb:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:35 2025 by rpki-client