Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bb0c3b0f-4081-3982-a48f-54b3041b51a2.roa
File:                     bb0c3b0f-4081-3982-a48f-54b3041b51a2.roa (raw, json)
Hash identifier:          nBsT2QVh00XUMv7/i7g/qLn7ElV4MoabBzmR0Ulra2E=
Subject key identifier:   09:A2:38:82:E7:28:5C:9B:76:BF:36:27:F1:E0:A5:44:7C:EC:BD:D3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921343C5C730B47D1ABC31E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bb0c3b0f-4081-3982-a48f-54b3041b51a2.roa
Signing time:             Sun 09 Mar 2025 10:20:45 +0000
ROA not before:           Sun 09 Mar 2025 10:20:45 +0000
ROA not after:            Sat 07 Jun 2025 10:20:45 +0000
asID:                     25946
IP address blocks:        199.243.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:3c:5c:73:0b:47:d1:ab:c3:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:45 2025 GMT
            Not After : Jun  7 10:20:45 2025 GMT
        Subject: CN=78230090-1ecb-42c5-9e18-a6f646732d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:01:d7:1f:bd:d6:78:5f:6d:d0:0c:c3:96:3e:
                    f1:1b:cb:44:58:c7:15:4b:e6:05:be:81:c5:56:fc:
                    77:cd:f9:2e:20:51:e7:fd:4d:7b:62:cd:9d:ac:bb:
                    ee:a4:4f:d9:25:f6:31:a8:24:a5:f9:40:0d:21:f6:
                    82:69:58:c1:08:0a:7c:d6:86:77:34:42:f1:74:99:
                    eb:83:89:b2:0c:83:56:a8:d5:e9:27:5e:50:8f:08:
                    c3:af:34:73:15:b5:2b:74:4b:06:36:91:a0:58:04:
                    70:eb:9e:e4:f5:1e:fb:20:c0:91:c5:24:ca:2d:8d:
                    d4:20:90:16:f2:4f:7c:83:16:08:71:a9:c7:1c:5b:
                    53:65:5c:52:ed:0f:4e:c8:ab:e6:b8:e0:1a:69:b4:
                    8c:e1:0a:a5:6d:c2:6f:4e:c2:0e:34:e1:31:42:1b:
                    25:32:36:ae:be:7f:7a:41:38:a9:b5:51:d7:a7:e9:
                    b2:4d:fd:b0:f2:17:5d:a0:b5:c8:71:41:2e:17:1f:
                    fe:89:be:4b:28:5b:37:71:66:b5:8a:7e:38:db:3c:
                    32:50:87:fd:fb:2c:ca:6a:ff:44:25:fa:ea:14:b0:
                    69:c9:19:97:97:e8:84:1d:b3:1d:3a:96:0a:80:3b:
                    96:34:40:52:7a:5e:99:32:8e:da:e9:f6:4c:ad:92:
                    64:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A2:38:82:E7:28:5C:9B:76:BF:36:27:F1:E0:A5:44:7C:EC:BD:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bb0c3b0f-4081-3982-a48f-54b3041b51a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.243.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:35:b4:1e:dc:94:36:0b:88:45:3d:1d:70:d7:1f:bc:62:ad:
         b9:ff:11:14:c5:87:56:2f:f0:ef:f0:f9:32:43:de:a6:da:d3:
         56:4c:e1:18:7e:be:ed:35:5b:31:29:fc:41:e1:8a:fa:df:95:
         a9:2f:06:17:1c:59:10:45:96:00:d9:f3:e8:65:25:7e:40:7f:
         3d:1f:a7:bf:d6:1e:35:d3:4d:27:f3:80:05:db:56:99:ab:b5:
         72:0d:3a:37:05:4d:de:82:86:6b:50:38:fa:02:7a:b3:f5:c6:
         6e:48:17:9b:63:f6:05:5e:f2:1a:85:40:d1:99:35:f1:37:87:
         a2:07:43:cd:38:34:35:4d:88:9c:27:84:a5:27:70:be:59:a2:
         a6:ea:fc:1f:24:48:64:78:0d:3d:d7:60:8c:20:ce:56:db:91:
         ba:9a:87:9e:e1:c1:5c:5c:3f:ca:cc:b8:b7:d0:2d:a7:41:d0:
         b3:86:44:75:d3:12:da:33:eb:85:d3:73:d1:98:00:c2:05:88:
         5e:00:da:15:76:2c:5d:14:c3:be:32:8f:7c:3f:f5:ec:a7:91:
         2d:9a:f4:63:44:b3:37:25:06:d2:75:84:79:8d:56:e4:ba:71:
         d8:14:2d:48:84:bc:58:ee:76:af:d0:25:0b:39:3f:35:6e:17:
         89:de:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:42:53 2025 by rpki-client