Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9079d15d-686c-37dd-9143-0a54c5830c31.roa
File:                     9079d15d-686c-37dd-9143-0a54c5830c31.roa (raw, json)
Hash identifier:          Pn/oyLhAnrojjlLmF/S5hkXT87EgoEsLmDJNifzl+UU=
Subject key identifier:   7C:7A:BE:DC:05:9A:E8:80:93:E0:9D:1E:44:02:84:A9:18:F3:F2:05
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921344F5522F9FE27774D8000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9079d15d-686c-37dd-9143-0a54c5830c31.roa
Signing time:             Sun 09 Mar 2025 10:20:54 +0000
ROA not before:           Sun 09 Mar 2025 10:20:54 +0000
ROA not after:            Sat 07 Jun 2025 10:20:54 +0000
asID:                     21723
IP address blocks:        206.172.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:4f:55:22:f9:fe:27:77:4d:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:54 2025 GMT
            Not After : Jun  7 10:20:54 2025 GMT
        Subject: CN=d9c95f76-b96a-49a3-877a-29d13fedafb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3c:f5:d0:a8:7e:90:9d:86:e6:13:d3:a4:af:
                    e1:2b:e2:f5:2e:2a:65:96:6d:94:da:ec:84:29:1d:
                    86:43:49:c8:4d:42:19:2b:19:e6:e1:d3:c0:17:b8:
                    34:bc:a7:47:5b:96:34:ab:2c:70:54:6c:60:b7:5d:
                    35:3c:52:b3:e1:f7:ba:01:df:f1:f9:4c:ad:03:f4:
                    b0:a8:92:3f:bf:56:8d:3f:7c:ac:52:55:be:49:c9:
                    d1:16:f3:d7:05:e9:0d:f7:4c:b3:f5:dd:3e:c9:9e:
                    c3:15:1e:b0:9d:83:43:e1:ca:ea:58:19:ce:d5:68:
                    b3:ce:9a:ee:8f:47:b9:ac:d1:08:e9:3d:ef:2c:a8:
                    80:9a:0d:fe:7a:e4:c2:ed:c2:5b:2b:8a:15:6c:ec:
                    b6:f7:b0:f1:a6:8d:f3:78:e0:d6:f7:6d:7c:9d:28:
                    17:3b:25:37:22:d1:24:6c:66:ff:4c:b1:22:79:f6:
                    5f:86:86:3b:aa:08:7d:dd:d1:c7:ad:b1:6d:36:63:
                    81:ad:01:a4:63:7b:f0:ee:5f:d2:f4:7a:66:10:5a:
                    5c:fb:6a:be:8a:12:dd:68:00:f1:7c:25:70:40:da:
                    bd:b9:d7:2c:59:ba:24:6e:69:44:40:84:81:76:e4:
                    9f:89:13:d8:73:3a:b5:8e:d8:77:a7:28:88:a6:0f:
                    19:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7A:BE:DC:05:9A:E8:80:93:E0:9D:1E:44:02:84:A9:18:F3:F2:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9079d15d-686c-37dd-9143-0a54c5830c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.172.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:45:0f:09:2f:01:38:ce:2c:84:41:bb:87:6c:af:99:ff:fe:
         c6:84:16:60:8b:d7:48:78:a5:df:76:4d:34:36:3c:72:d9:a6:
         72:a8:c4:bf:5e:9f:64:f6:8e:a1:22:51:36:f4:7b:ee:17:e0:
         98:2d:1d:b2:9f:ab:33:1e:b4:07:5e:22:00:61:00:5d:b2:b6:
         ad:04:66:b9:c1:ac:f2:d3:01:2b:c6:a5:f9:33:a7:c6:b7:3a:
         85:93:78:05:fc:de:88:29:33:3f:f7:73:50:89:8e:0f:6f:04:
         2b:fd:fb:0f:2c:a9:9a:b3:41:a2:86:84:60:87:bb:47:76:66:
         3a:d1:f2:31:25:5b:62:22:78:82:01:43:6b:09:61:05:f8:ba:
         0b:40:0d:1e:99:13:f6:7f:ac:d7:16:ee:4b:07:ed:8e:3b:d3:
         fc:6c:9b:31:52:cc:b9:f5:3c:24:33:74:49:b5:db:4d:b2:fe:
         80:91:5c:e6:a0:b8:16:97:78:0e:02:88:8a:eb:64:e3:a7:41:
         77:c2:9b:b2:11:37:6f:bb:39:b1:fc:7b:50:bd:3e:1d:c9:1d:
         b8:2f:0f:d3:58:e8:78:bf:9f:58:df:76:ca:9e:a6:38:da:be:
         a2:dd:a2:96:9d:5b:a4:ea:4b:30:da:0c:e0:1c:4c:31:42:18:
         3f:d8:d4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:17 2025 by rpki-client