Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fc2a1e18-89e9-3045-852d-afa8766b0d1e.roa
File:                     fc2a1e18-89e9-3045-852d-afa8766b0d1e.roa (raw, json)
Hash identifier:          4hDtTE5V9r8jj96uKjBXpXv2KCgGxQhC6KTx59wJNEE=
Subject key identifier:   C5:AB:3C:15:34:C4:8F:6A:21:C2:D6:1B:97:F5:92:CF:12:B3:5D:DC
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921344436056716567FB61100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fc2a1e18-89e9-3045-852d-afa8766b0d1e.roa
Signing time:             Sun 09 Mar 2025 10:20:49 +0000
ROA not before:           Sun 09 Mar 2025 10:20:49 +0000
ROA not after:            Sat 07 Jun 2025 10:20:49 +0000
asID:                     36522
IP address blocks:        204.101.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:44:36:05:67:16:56:7f:b6:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:49 2025 GMT
            Not After : Jun  7 10:20:49 2025 GMT
        Subject: CN=e0493aab-b3c7-407a-a158-3ddc879f3e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3a:cf:09:2c:63:20:99:a9:01:1e:b6:1d:5a:
                    42:e1:26:58:d7:ec:07:eb:e0:c7:48:e2:6f:1b:50:
                    0e:cf:7c:f7:1c:bf:53:63:b2:48:b6:e7:5d:38:03:
                    e7:04:fb:2a:61:27:1b:a0:25:1f:0a:8f:84:ea:ce:
                    ba:05:ff:d6:23:7c:a0:22:fe:15:08:8b:fb:83:13:
                    79:b5:3c:59:34:65:7d:4c:40:18:ed:f4:a2:16:dd:
                    70:d3:db:56:42:4e:09:6b:21:58:ec:c9:ab:21:6b:
                    af:cc:ca:44:77:08:28:28:17:ff:63:8a:24:4e:df:
                    84:05:37:18:d3:34:e6:95:a4:df:61:cb:c1:4f:ec:
                    33:ae:46:5e:dd:a5:53:69:b4:b5:64:fb:f7:61:d1:
                    7b:71:20:24:4b:57:62:2e:c9:b7:ec:24:29:fe:c5:
                    ff:ba:aa:dc:57:bf:aa:8c:e6:31:dd:7b:c2:ab:d1:
                    be:7c:6f:8b:3a:e5:28:f9:93:26:12:84:d7:62:34:
                    6c:23:13:08:89:5c:dc:0d:a5:91:1c:85:9f:05:91:
                    77:31:23:73:02:35:12:71:b1:59:d9:65:d3:bd:ba:
                    6a:de:02:d0:99:07:48:fb:2a:21:39:ed:7a:c9:18:
                    3c:a3:23:20:8d:36:0d:93:4d:84:a9:1c:be:10:78:
                    f4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AB:3C:15:34:C4:8F:6A:21:C2:D6:1B:97:F5:92:CF:12:B3:5D:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fc2a1e18-89e9-3045-852d-afa8766b0d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:6a:14:74:3b:44:f0:97:2b:d2:ec:4a:6a:aa:15:6e:73:46:
         d4:3e:0f:03:84:7a:51:e0:2f:58:91:3a:d5:9a:f0:02:0f:c1:
         49:e4:79:6a:b5:17:15:3b:f4:3e:0e:c4:c4:f7:96:d6:7f:bc:
         fd:94:8d:ff:4e:67:2c:7a:2b:98:9d:45:32:72:cb:ec:9e:9c:
         c2:0b:94:14:18:81:98:49:f2:ff:64:1f:68:dd:8b:50:2c:38:
         ae:ed:b3:85:3f:c9:42:ea:38:2c:db:dd:ac:ab:20:7e:87:b7:
         98:72:4c:65:47:2d:40:5b:ad:d9:d7:4e:56:36:13:74:ed:5e:
         f1:63:3f:df:81:f4:f1:40:6e:88:72:cb:05:c7:52:5c:22:f5:
         64:b0:80:22:07:28:97:14:4e:0c:1d:6f:c0:3d:66:a9:1c:6c:
         81:68:99:83:13:1e:9d:a4:f4:84:c2:ed:c2:bb:65:23:d7:bc:
         e1:b5:7f:65:28:de:4f:79:d7:b2:32:5b:44:22:6a:4a:f6:62:
         52:5e:f7:69:ba:2d:94:da:91:af:c6:a9:5c:85:2f:90:df:45:
         30:62:e6:c9:ab:16:5d:d0:bf:fe:fe:11:1a:01:de:6c:66:9d:
         27:99:81:57:25:d5:76:23:41:cd:57:5d:ce:e9:6c:e4:e3:b0:
         f1:a3:b9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:32 2025 by rpki-client