Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90349ee3-733b-3652-8fd1-ab6a5e57f4f8.roa
File:                     90349ee3-733b-3652-8fd1-ab6a5e57f4f8.roa (raw, json)
Hash identifier:          YJ+mFlTn6dhrPwjDTAKdI1MlCbN/W7JsTYUGN3jvaCg=
Subject key identifier:   E2:00:B6:85:76:58:08:3F:1B:8D:A9:B8:10:E6:D2:37:BC:E4:9B:74
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921343E0D8DA6372BD5E7F9C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90349ee3-733b-3652-8fd1-ab6a5e57f4f8.roa
Signing time:             Sun 09 Mar 2025 10:20:46 +0000
ROA not before:           Sun 09 Mar 2025 10:20:46 +0000
ROA not after:            Sat 07 Jun 2025 10:20:46 +0000
asID:                     21552
IP address blocks:        204.101.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:3e:0d:8d:a6:37:2b:d5:e7:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:46 2025 GMT
            Not After : Jun  7 10:20:46 2025 GMT
        Subject: CN=f9682c7e-f056-40a9-8e3e-a995c984b66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:c4:ef:7f:ea:fc:84:b4:1c:de:1a:fd:a1:
                    be:92:2f:ca:ee:42:1f:30:21:83:14:1e:5c:c0:04:
                    de:59:c7:76:ec:81:e2:bc:66:f0:23:1c:b9:a2:96:
                    9a:5d:23:fa:69:d1:db:9c:98:4d:c2:47:c4:e2:6d:
                    ec:b2:35:cb:2b:09:d8:d2:d1:dd:b1:77:52:6a:ff:
                    bd:ae:e8:3f:82:4f:75:12:60:ae:33:85:98:5f:68:
                    98:ba:49:68:19:d0:c5:84:81:c1:3e:aa:15:25:06:
                    aa:df:05:7b:50:26:1f:62:97:7b:89:c8:54:cb:15:
                    0c:dd:ec:11:8d:59:68:2f:da:49:7f:8d:ac:0f:f8:
                    9b:d6:eb:b4:5f:43:46:c5:e2:fb:3c:63:ad:b4:0a:
                    57:61:68:20:64:a3:b0:29:38:fb:dc:7f:74:22:5f:
                    e0:c0:c1:a7:06:12:2e:96:24:78:bf:ec:09:10:7f:
                    b5:73:75:25:fd:58:af:52:4a:af:c0:d5:c3:bc:cb:
                    bf:39:92:91:e1:10:6f:11:80:07:7d:42:8d:75:69:
                    07:04:f9:79:6a:b4:5e:f5:75:57:a9:cf:9d:37:1a:
                    08:ac:91:04:30:17:9a:28:40:15:d9:01:27:77:e6:
                    15:b1:09:74:85:13:09:1d:85:ed:3c:90:7e:bf:1d:
                    70:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:00:B6:85:76:58:08:3F:1B:8D:A9:B8:10:E6:D2:37:BC:E4:9B:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90349ee3-733b-3652-8fd1-ab6a5e57f4f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:98:40:27:ec:4c:df:a0:aa:95:dd:de:ba:89:2f:65:70:11:
         1e:8b:91:ed:e3:39:93:ba:f4:f0:a2:65:fa:e9:5f:40:88:99:
         b9:e2:c4:4e:40:5f:2e:0a:4b:82:31:0b:46:3f:4f:52:97:d1:
         74:f7:f0:98:d7:ca:80:16:fb:eb:86:e3:da:04:b9:8a:bb:f1:
         f2:1b:68:ea:6c:da:f3:35:3a:9f:15:d9:97:79:8e:1e:33:fd:
         72:b9:01:01:bb:dc:87:80:79:4c:71:fc:52:5b:99:75:69:1f:
         7c:7b:f6:5e:8e:87:45:58:8f:94:91:64:86:70:75:4f:ce:77:
         08:f3:f5:25:c8:c1:b6:77:b3:28:01:1a:11:bf:58:36:74:8f:
         be:d7:1e:07:fd:42:a3:5a:e4:23:c5:5b:27:b4:77:76:58:4a:
         a1:01:19:f2:da:da:95:7b:75:56:6b:20:2d:e7:37:80:7c:2f:
         6a:56:a5:77:bf:51:8d:5b:6b:4d:3f:06:92:d0:05:e1:ad:c8:
         fe:fd:3f:38:28:ac:fe:54:c8:65:f4:3b:a1:36:80:6d:f1:d7:
         cd:f3:ca:ca:1a:09:58:d0:3d:50:b1:3d:9f:bd:39:8c:15:1c:
         af:f7:b3:86:5c:bd:05:83:b4:28:af:96:63:ff:fd:6b:72:f3:
         b4:b0:3a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:00:55 2025 by rpki-client