Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a536b876-020d-397a-8b24-9603f4e7976a.roa
File:                     a536b876-020d-397a-8b24-9603f4e7976a.roa (raw, json)
Hash identifier:          USiQgUSNO4bkUJjYLi6HaaJdsrYNa8zp42jeqbPEU1Y=
Subject key identifier:   0F:0D:D9:A3:A0:2E:1D:FB:5C:F8:D2:52:CC:C4:16:CD:F1:2A:12:DC
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921344052B75B6512775D6600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a536b876-020d-397a-8b24-9603f4e7976a.roa
Signing time:             Sun 09 Mar 2025 10:20:47 +0000
ROA not before:           Sun 09 Mar 2025 10:20:47 +0000
ROA not after:            Sat 07 Jun 2025 10:20:47 +0000
asID:                     36522
IP address blocks:        204.101.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:40:52:b7:5b:65:12:77:5d:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:47 2025 GMT
            Not After : Jun  7 10:20:47 2025 GMT
        Subject: CN=c504590b-7a46-4b29-93c3-6e595dd71931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1d:83:1d:e8:f7:18:44:b9:6a:3a:d4:8b:68:
                    c4:21:61:b2:36:d7:47:1f:8a:4f:28:8b:d3:b3:18:
                    04:17:38:2f:3c:90:66:f7:72:86:a0:ac:84:df:7a:
                    35:e5:f3:fe:fe:4f:a1:cf:a7:36:07:57:d2:cd:65:
                    da:11:d2:78:0c:d2:f1:a7:f0:71:25:6d:e5:60:81:
                    0f:41:c2:18:47:48:a9:6b:ff:9b:c0:7a:bb:e8:3c:
                    eb:c3:2a:52:e0:8c:ff:d8:dd:6e:71:68:2f:32:ea:
                    50:d3:fa:66:8f:cc:44:bd:a2:44:7d:53:59:6a:e9:
                    d9:b9:dc:11:36:6e:73:19:96:89:4d:66:af:42:89:
                    a3:d0:c0:1c:98:36:d9:2b:a5:1e:20:08:ee:9f:8e:
                    d2:15:5d:b3:27:3e:5a:53:76:c1:d4:50:b5:a2:97:
                    55:5c:25:fd:2b:d9:32:34:d3:ad:62:95:ff:3e:27:
                    ba:8a:5e:48:9a:de:7b:d8:99:86:b9:6e:de:e7:5a:
                    7b:db:62:16:18:3a:6a:03:93:aa:3c:42:5f:ef:7f:
                    57:19:76:4c:c2:e3:1f:67:48:f8:c1:7d:d3:40:21:
                    82:ac:7e:25:bb:b1:ad:ad:79:0c:63:b8:1f:e4:d3:
                    6e:dc:0e:d0:27:02:eb:b0:36:f6:cb:91:82:b3:66:
                    ca:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0D:D9:A3:A0:2E:1D:FB:5C:F8:D2:52:CC:C4:16:CD:F1:2A:12:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a536b876-020d-397a-8b24-9603f4e7976a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:cf:0e:7f:01:31:66:b8:f9:ac:6b:1a:f7:fb:97:ad:2b:90:
         66:a2:a9:cc:1e:6d:ee:32:24:eb:ca:1d:39:78:14:57:e1:5f:
         6b:ca:cf:a4:97:02:6e:95:36:b3:41:cf:33:59:ad:45:99:fe:
         71:f9:97:92:75:bc:1f:fa:4b:ca:fb:f9:e7:33:3e:19:e2:4e:
         6b:6d:36:f8:5d:f1:96:58:be:25:02:6f:45:89:77:bc:0c:0a:
         ed:74:ee:49:a3:20:ea:74:25:fd:29:15:2a:a3:4f:1e:0c:55:
         d9:26:29:8b:fb:d8:1f:b4:70:ad:9a:fc:b2:70:3d:a3:85:3d:
         0c:c7:ad:f7:01:fd:60:52:19:cc:f2:eb:c0:eb:a6:a9:98:cd:
         18:85:30:fc:0c:c0:b3:11:d2:82:58:d0:a3:13:39:50:0f:c3:
         84:fe:6f:78:4b:ec:52:75:24:b4:da:45:ab:cf:80:5f:c9:3b:
         bb:93:2f:70:7c:49:61:55:8c:e5:15:af:26:80:e2:83:6f:b1:
         19:18:bc:39:ea:45:04:63:12:01:8f:b6:08:e9:f1:bb:ac:99:
         57:fe:c9:16:c2:c3:55:d3:fa:75:c6:b7:7c:29:23:e2:95:ef:
         f0:25:d5:ea:10:69:63:98:e0:fb:01:9a:1d:f6:34:25:62:e6:
         8d:ac:63:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:10 2025 by rpki-client