Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/921f193c-15da-4399-969b-ee92f297f61a/7e108bc2-49b8-3f48-9a5f-9c4f946cb15c.roa
File:                     7e108bc2-49b8-3f48-9a5f-9c4f946cb15c.roa (raw, json)
Hash identifier:          yRAUmp0I6I4pAxuxbdk3s8yHUVykqy88AffVbZ3VCHU=
Subject key identifier:   9A:40:59:46:B0:37:0D:AF:37:03:41:30:02:DD:F0:F7:89:10:D8:4C
Certificate issuer:       /CN=921f193c-15da-4399-969b-ee92f297f61a
Certificate serial:       010D0C9F43285848D2113BF7971138FEFA2A8A80
Authority key identifier: 7B:80:50:1E:21:D5:2D:B8:F9:8B:88:DC:72:D7:B1:C3:68:C6:71:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/921f193c-15da-4399-969b-ee92f297f61a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/921f193c-15da-4399-969b-ee92f297f61a/7e108bc2-49b8-3f48-9a5f-9c4f946cb15c.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     54277
IP address blocks:        136.175.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/921f193c-15da-4399-969b-ee92f297f61a/921f193c-15da-4399-969b-ee92f297f61a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/921f193c-15da-4399-969b-ee92f297f61a/921f193c-15da-4399-969b-ee92f297f61a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/921f193c-15da-4399-969b-ee92f297f61a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:3b:f7:97:11:38:fe:fa:2a:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921f193c-15da-4399-969b-ee92f297f61a
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=8d5ee583-6ccb-4391-af74-0a37afb1a6e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:6b:11:ca:79:dc:fe:ca:64:5a:ee:0d:8c:
                    75:d2:3a:05:e9:91:df:21:e2:cd:01:49:4a:76:ec:
                    43:9a:45:20:a8:54:3c:53:e2:6e:d9:68:50:ea:54:
                    e6:19:fd:e9:7a:68:24:70:0f:dd:46:14:34:18:5a:
                    c1:db:47:7e:cf:b5:97:97:d9:1e:10:69:cb:37:b1:
                    30:be:56:13:53:50:04:ac:c2:6a:bc:8a:5f:d6:6d:
                    f5:55:43:37:5a:ae:0f:ab:ee:03:58:1f:11:a1:1b:
                    38:d0:42:e8:46:db:7c:0e:9d:2b:22:2e:7d:59:4e:
                    0e:52:42:08:ed:62:a3:0a:96:ef:f5:42:e2:23:f9:
                    46:45:f0:01:4a:6d:d8:58:b1:59:2a:4b:53:58:09:
                    c3:65:4a:51:f5:9c:10:02:65:87:ef:50:03:90:65:
                    39:a9:5b:b7:a9:f5:81:d4:f3:14:09:4d:7c:fe:7c:
                    a8:ef:21:c2:e2:dd:c1:f0:36:e3:a3:e0:9c:39:64:
                    07:63:b4:e4:fd:28:0d:14:55:c7:a7:b9:a9:2f:99:
                    60:d1:62:f7:bc:31:f5:42:09:ae:38:9e:bf:55:f7:
                    34:21:ce:d3:e3:ba:7b:74:2b:65:e7:77:2c:91:f4:
                    bf:d9:6c:f8:5e:23:78:8b:94:01:c2:fa:bb:89:6a:
                    3d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:40:59:46:B0:37:0D:AF:37:03:41:30:02:DD:F0:F7:89:10:D8:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/921f193c-15da-4399-969b-ee92f297f61a/7e108bc2-49b8-3f48-9a5f-9c4f946cb15c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/921f193c-15da-4399-969b-ee92f297f61a/921f193c-15da-4399-969b-ee92f297f61a.crl

            X509v3 Authority Key Identifier:
                keyid:7B:80:50:1E:21:D5:2D:B8:F9:8B:88:DC:72:D7:B1:C3:68:C6:71:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/921f193c-15da-4399-969b-ee92f297f61a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:10:e9:76:27:39:c4:4e:1c:14:04:76:f0:8c:ac:f8:0f:1d:
         2c:01:9c:98:62:ce:74:56:fc:8a:74:be:09:59:53:91:45:2a:
         78:31:4a:00:e4:e0:2f:63:71:39:cb:91:77:79:82:57:b0:81:
         2c:03:4f:44:70:70:ef:8f:d8:46:95:71:c0:53:ed:c1:ba:a4:
         91:96:0d:2b:96:aa:33:b7:21:47:47:46:d6:a8:7e:1a:05:f7:
         7e:ea:1a:7f:d1:a7:76:35:07:ac:52:6e:b4:aa:91:e8:ba:bf:
         f6:36:eb:cb:47:c2:a5:69:44:16:36:94:a7:cd:e2:45:7f:12:
         1d:dd:af:a9:35:67:68:b1:74:b1:1b:02:53:ea:b4:3b:3f:30:
         e0:24:47:62:36:f3:b3:c8:7c:c0:eb:c1:e6:68:00:c4:25:96:
         24:5c:30:fc:a6:52:e4:c5:b9:ab:24:1d:75:d6:70:ad:53:5f:
         25:e2:0b:c7:62:d1:22:fb:7d:c4:6a:f0:4b:4a:f4:96:b5:46:
         ea:9d:86:91:79:a3:25:7f:79:c5:0e:40:06:74:10:68:50:ac:
         9d:56:23:a5:e8:86:69:6f:1f:ee:64:3f:ea:1f:95:4a:d7:a5:
         f5:78:14:8e:3f:5d:46:8e:0d:11:bb:3d:c1:e9:56:78:a4:6a:
         41:61:6c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:28 2025 by rpki-client