Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e4cd0da9-3efe-302a-b896-e390b8bac53e.roa
File:                     e4cd0da9-3efe-302a-b896-e390b8bac53e.roa (raw, json)
Hash identifier:          AJDeyekb23wTlqsgaDeoWTePdzsEhvu5eacBqyz8DJ0=
Subject key identifier:   56:8F:DB:BE:4F:49:C5:39:9F:C7:61:3F:9F:C2:24:BC:7A:03:B1:A4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921344B80FF48548EF30A0B00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e4cd0da9-3efe-302a-b896-e390b8bac53e.roa
Signing time:             Sun 09 Mar 2025 10:20:52 +0000
ROA not before:           Sun 09 Mar 2025 10:20:52 +0000
ROA not after:            Sat 07 Jun 2025 10:20:52 +0000
asID:                     30048
IP address blocks:        206.47.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:4b:80:ff:48:54:8e:f3:0a:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:52 2025 GMT
            Not After : Jun  7 10:20:52 2025 GMT
        Subject: CN=606537c9-40f0-461a-a1ee-81d5fdc4e4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:17:28:97:bf:38:f4:7f:be:92:84:20:34:4a:
                    96:9c:3a:4c:e1:55:d1:14:0c:7a:b7:0d:cd:61:de:
                    97:53:0f:e1:e7:f9:57:32:8d:3d:bb:3f:d4:d7:a4:
                    ae:3a:b9:17:12:4f:a9:66:ce:01:f5:f0:0a:47:98:
                    5a:32:2b:57:af:69:6b:29:64:5b:1d:68:5e:23:9b:
                    97:2e:8d:d9:96:52:6a:42:c1:ad:6c:0e:fa:0c:4b:
                    9e:37:cd:3a:3a:39:69:96:1d:e8:16:d1:bc:b4:31:
                    57:db:9f:e3:f3:06:fb:96:11:a2:84:4d:47:6c:ed:
                    24:82:48:9c:8b:1b:ed:0a:e2:8b:4d:b9:98:99:df:
                    a5:a9:bd:d3:18:5b:48:50:c4:44:49:2e:32:97:5d:
                    00:c5:0f:cf:f3:1e:7b:77:8c:1f:82:f7:95:94:b8:
                    16:73:85:3c:85:40:a0:e4:bb:6d:80:46:e0:6c:3a:
                    ba:74:76:f7:0a:c3:ec:58:d9:f2:1f:5e:45:8f:d2:
                    cf:77:92:ff:44:17:14:d1:e6:d2:fb:93:3e:60:b8:
                    90:7c:14:78:8b:5d:66:c3:6e:9e:83:b1:ca:10:e6:
                    f2:ce:46:00:87:d8:f7:c4:7a:ef:cf:b2:c4:6c:1e:
                    d4:66:dc:e3:2e:e4:9f:60:67:33:33:c5:28:18:22:
                    78:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8F:DB:BE:4F:49:C5:39:9F:C7:61:3F:9F:C2:24:BC:7A:03:B1:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e4cd0da9-3efe-302a-b896-e390b8bac53e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:d3:3c:06:69:d6:23:75:38:b3:8b:6a:8d:74:20:c8:9c:51:
         fd:54:c3:df:98:f6:ba:24:cb:99:bf:40:ab:48:98:f4:a4:ca:
         ec:bf:03:91:47:80:41:7b:7b:49:20:9d:40:48:90:ff:5f:08:
         87:24:24:54:30:ff:91:44:8f:d0:cc:13:74:95:40:d1:72:82:
         59:70:7e:87:43:dd:17:f7:85:e2:3a:9d:4d:9b:bd:0d:eb:b3:
         a6:24:69:89:0c:a2:e7:d7:27:4f:86:28:ec:f8:78:d4:4b:95:
         12:7d:86:0c:4a:e6:8c:30:85:70:21:16:2b:f9:9a:6b:f9:95:
         4d:ba:ac:52:57:07:b5:96:a1:27:5e:58:f6:b3:ab:eb:03:07:
         d9:a2:34:77:a5:11:56:c6:a3:17:5b:0a:00:1e:ca:7e:6d:69:
         fa:5c:ac:ad:ca:80:26:90:b0:d3:df:e6:1b:b8:6f:14:7a:e3:
         c7:1c:5c:4b:80:af:7a:4c:9e:13:a5:8e:e5:a5:4c:c6:11:e8:
         d6:37:0a:ee:7b:ff:44:77:1f:e6:5e:33:ef:84:1c:ec:b6:4f:
         9b:ea:05:1b:68:c1:75:8f:81:dd:2a:2d:df:c2:41:ed:5f:d1:
         00:cf:62:e0:84:5e:be:05:cd:9b:81:ad:e6:3f:0f:e6:8d:b0:
         aa:75:c0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:42 2025 by rpki-client