Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a010ebda-69b1-36c3-b543-ae4242f4faeb.roa
File:                     a010ebda-69b1-36c3-b543-ae4242f4faeb.roa (raw, json)
Hash identifier:          TSyJ9Rs1FvKUs9H73q1g7/KC9e7KreCcf/0bMRrs42A=
Subject key identifier:   4C:0B:05:2A:64:78:C1:A4:33:6E:CC:13:5F:9E:7E:5E:E6:DF:31:CE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213449BD720F1B77BCDC8D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a010ebda-69b1-36c3-b543-ae4242f4faeb.roa
Signing time:             Sun 09 Mar 2025 10:20:51 +0000
ROA not before:           Sun 09 Mar 2025 10:20:51 +0000
ROA not after:            Sat 07 Jun 2025 10:20:51 +0000
asID:                     397168
IP address blocks:        206.47.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:49:bd:72:0f:1b:77:bc:dc:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:51 2025 GMT
            Not After : Jun  7 10:20:51 2025 GMT
        Subject: CN=03b8c9a9-52cd-4111-9f15-f02397fd6516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e0:3b:89:50:0b:7c:aa:63:f3:b6:c5:82:1e:
                    c5:c0:2f:86:40:7c:c6:86:2f:52:0c:8c:1c:25:c1:
                    b5:56:89:16:ff:4e:26:69:4c:b1:b7:fb:72:45:cc:
                    36:19:e0:66:4f:08:b3:1e:00:b3:11:f7:ab:57:09:
                    44:af:9c:6b:b3:da:fb:b3:03:8d:01:e3:26:ce:42:
                    a7:c9:c6:3d:1b:48:76:ff:a7:48:9c:51:6a:8c:c9:
                    d1:54:23:cb:75:e4:ee:68:33:4a:89:69:34:34:40:
                    d9:a5:76:0f:3b:b3:45:50:c6:0c:6b:fe:10:16:18:
                    7d:4e:fd:ef:31:d8:07:b4:58:a6:66:e0:b4:23:d3:
                    b5:79:13:93:55:0d:f8:0c:d0:0e:7e:16:87:b5:f7:
                    93:3d:3d:af:db:9d:cb:12:e8:53:2c:b6:b8:3e:d7:
                    8d:3b:db:c1:26:30:ce:2a:3f:08:60:74:b1:60:ca:
                    5b:69:bb:35:0c:ef:cf:9f:e9:a7:e6:e9:28:4f:57:
                    7f:bb:4d:82:fd:97:62:69:e0:4a:83:b3:0c:f0:6c:
                    7f:b7:af:89:56:0f:99:04:64:df:5d:a2:82:a2:a4:
                    fb:5d:9b:b5:55:3e:3b:ae:e9:c6:21:41:75:96:76:
                    1e:3d:a8:d1:62:3d:db:62:20:d3:ac:12:9b:d3:7a:
                    f2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0B:05:2A:64:78:C1:A4:33:6E:CC:13:5F:9E:7E:5E:E6:DF:31:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a010ebda-69b1-36c3-b543-ae4242f4faeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:34:0a:95:e3:bc:52:96:11:c7:37:cf:31:2a:96:ed:ff:55:
         37:30:8a:05:3a:be:c0:48:c2:08:aa:93:3b:8b:13:47:59:08:
         ba:ca:fa:a5:b9:55:b5:ca:ce:96:1a:58:2d:8b:1a:ef:e3:03:
         a7:21:36:af:ee:6a:ca:92:58:cb:16:12:0d:94:3e:25:9e:38:
         53:47:4c:a9:0a:e7:25:fe:54:f6:4d:4c:22:a5:a1:28:db:5d:
         a4:23:32:fe:f5:32:2a:18:46:4b:d8:ad:ce:15:eb:ba:d2:94:
         1c:a3:05:23:be:5c:8a:19:59:d9:d9:c3:c9:ba:c1:51:59:b8:
         7a:29:7d:b9:f7:21:86:fb:e2:5e:6a:3b:b2:63:a5:bb:fc:94:
         25:77:92:ff:65:f5:17:c4:88:a5:30:8a:9b:f6:cd:11:a5:22:
         a4:ab:fb:eb:67:ae:a6:c3:15:19:28:54:25:34:fc:19:41:2b:
         ff:fe:fc:39:c6:c0:99:4b:4b:5d:b5:42:4e:9f:db:1f:65:a9:
         26:6e:24:22:88:75:ea:61:13:85:08:c4:4d:d3:a9:63:7b:bc:
         77:db:89:8e:69:2c:05:ef:e4:f7:ae:93:35:d2:90:2a:e9:eb:
         b2:e4:15:e7:7e:0f:9e:14:0a:17:2d:82:ce:3f:12:9f:b9:ce:
         dc:04:94:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:31 2025 by rpki-client