Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b2740739-8594-30c2-892b-2d5138c7dbd0.roa
File:                     b2740739-8594-30c2-892b-2d5138c7dbd0.roa (raw, json)
Hash identifier:          2Aa15Ki/uivFNHMJVpMQ78TUxBz4Mjtu4yInJRHe/74=
Subject key identifier:   A9:25:F0:DA:DD:D4:29:EF:35:0B:DF:25:F1:40:EA:26:A6:56:73:9F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858492134674C1584398C8A9D3C00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b2740739-8594-30c2-892b-2d5138c7dbd0.roa
Signing time:             Sun 09 Mar 2025 10:21:05 +0000
ROA not before:           Sun 09 Mar 2025 10:21:05 +0000
ROA not after:            Sat 07 Jun 2025 10:21:05 +0000
asID:                     30336
IP address blocks:        209.226.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:67:4c:15:84:39:8c:8a:9d:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:05 2025 GMT
            Not After : Jun  7 10:21:05 2025 GMT
        Subject: CN=f56dacfd-65aa-414b-927a-eb97d9bb053b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3e:5e:47:c1:c8:4e:9e:aa:b4:eb:02:fe:5a:
                    ca:6c:7f:8d:f5:c6:20:56:de:ff:b6:85:5b:47:a7:
                    0b:ca:7f:c2:da:e2:3a:ed:7f:2d:92:37:50:56:4c:
                    df:8f:39:e3:00:d4:cc:98:91:2a:02:92:a1:d2:28:
                    00:fd:46:1e:28:ec:70:9c:de:48:6a:6a:0a:d4:a2:
                    b0:b4:4a:e6:b3:9f:db:3d:81:23:27:64:54:7a:6d:
                    b2:51:3e:33:c7:32:00:b7:6e:cc:bb:f6:11:20:77:
                    c5:4b:d3:73:91:6a:af:c8:5e:ee:fe:77:bf:33:07:
                    cb:10:81:0b:72:1e:6d:09:2f:8e:5a:1a:6e:c1:71:
                    63:32:ed:21:20:77:df:6c:68:ab:8a:f1:61:9c:f6:
                    40:5c:e5:23:6f:9c:d2:d8:e1:ef:8e:0d:26:5f:03:
                    cd:f2:fa:4b:ed:d9:f4:ea:a8:67:1e:4e:88:18:de:
                    77:3f:23:f9:e9:75:78:92:47:a2:a7:f5:a7:c9:44:
                    fe:4e:a1:8d:7c:91:e4:7e:76:10:d2:f2:ee:ac:c4:
                    fd:81:9b:3a:65:c8:d3:74:2e:a0:9d:f1:16:5e:26:
                    b3:6f:9c:d4:a7:d6:ae:9a:45:fa:5c:2d:e7:98:a1:
                    27:7b:19:15:36:f6:0d:fb:ff:71:23:bd:57:19:d9:
                    11:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:25:F0:DA:DD:D4:29:EF:35:0B:DF:25:F1:40:EA:26:A6:56:73:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b2740739-8594-30c2-892b-2d5138c7dbd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:19:b1:8a:2d:3f:42:db:46:d3:2d:1e:98:6b:51:bb:a2:de:
         e9:6e:db:2b:9c:ba:a8:8e:2b:99:c3:e6:66:c4:31:6a:7c:25:
         ed:35:49:36:4f:73:37:3e:e9:91:82:49:5d:36:63:ad:e3:4f:
         dc:15:b7:30:ca:6a:37:db:b6:5f:c0:b9:0c:9c:75:c9:14:58:
         2a:8d:3b:4f:a6:25:e1:91:75:0f:ce:9c:15:6d:bf:b4:5e:3a:
         99:57:9f:09:8b:fb:41:59:81:ba:1d:08:86:0c:b8:c0:ab:12:
         c3:ef:78:a3:18:57:3c:98:f8:32:b2:61:a9:98:39:04:81:26:
         27:64:f9:da:f1:69:54:b5:c8:a4:90:e2:86:2d:3f:8e:f0:9f:
         1e:6c:97:76:d8:17:00:cc:8a:77:f3:7e:20:41:18:29:91:78:
         33:8a:fb:ea:68:87:ee:7d:32:4d:91:3e:8c:7c:fc:9f:99:c6:
         73:18:96:fe:f4:88:f0:63:84:9f:8e:8a:e3:4d:ce:06:33:56:
         76:b1:a0:43:e9:c2:42:e4:9c:5e:29:eb:e8:70:d8:66:be:1d:
         71:00:73:80:ff:18:8f:2f:46:10:e8:90:fc:30:cd:b0:c9:c6:
         db:0e:5a:27:78:cd:69:a1:36:79:d2:94:8b:e0:1d:63:6a:30:
         9e:d0:9c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:17 2025 by rpki-client