Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dc028e64-2955-3844-8f5c-a4e9288d62cd.roa
File:                     dc028e64-2955-3844-8f5c-a4e9288d62cd.roa (raw, json)
Hash identifier:          fQFl3K+5LVAB2eBYPUnRpW0Gz8HBr6Xs+3WO+CNwRUw=
Subject key identifier:   51:99:E9:C5:08:07:9B:88:F1:39:49:9A:A5:E2:D4:4E:72:8F:D1:28
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285848B62612028679F64563F6AF20
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dc028e64-2955-3844-8f5c-a4e9288d62cd.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     209
IP address blocks:        207.3.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:12:02:86:79:f6:45:63:f6:af:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=ba9359a6-4112-4450-9f1a-2128412e9d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:55:04:97:5c:03:e7:7a:8d:74:6b:75:7c:
                    ab:87:f0:be:91:fa:f5:e4:ff:d4:0a:37:bd:de:cd:
                    9a:a6:14:38:35:20:92:dd:5e:36:16:c7:9f:c3:25:
                    32:48:5b:b1:c3:c0:28:62:60:c0:4a:80:62:96:85:
                    08:82:cc:83:31:7e:1d:51:99:9a:46:8e:57:b6:c2:
                    1e:a3:f1:f3:d4:3c:bd:b4:44:1c:45:93:7e:82:b9:
                    0d:97:a6:85:ba:f9:6f:be:1e:b7:37:dd:fd:d2:10:
                    06:36:e3:04:71:ca:1b:39:0a:52:b0:ce:2e:7d:d7:
                    9d:e1:15:85:29:e9:5e:f8:9e:aa:7a:99:c4:b1:ef:
                    bd:35:c4:f9:b7:ec:66:18:b7:ae:4a:9e:4d:07:e9:
                    ed:89:df:d5:f4:ff:6c:65:9e:59:f2:48:24:64:3d:
                    a7:9c:ed:d3:7c:36:45:8b:5f:45:05:e4:ce:83:82:
                    48:36:3f:91:7e:b9:61:5e:40:57:6a:f7:39:f7:1d:
                    3b:87:71:37:11:61:16:9a:3d:01:a0:4c:52:a3:c0:
                    10:60:ee:40:1a:4a:b6:b7:0e:4d:3c:c8:66:53:c1:
                    85:bd:23:3e:72:0b:db:51:21:09:13:7b:14:5e:24:
                    d0:8f:e3:0c:ce:e8:b1:c9:76:4b:bd:f0:78:a6:af:
                    fc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:99:E9:C5:08:07:9B:88:F1:39:49:9A:A5:E2:D4:4E:72:8F:D1:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dc028e64-2955-3844-8f5c-a4e9288d62cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.3.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e2:f2:5c:92:38:75:56:19:66:fa:82:4e:00:81:c5:2c:0b:
         6b:97:aa:37:ba:88:3f:9e:8a:9c:dd:6c:ab:39:c9:e4:87:23:
         b7:7b:e2:20:2e:4f:42:19:1a:46:5e:89:6c:a5:75:14:b1:72:
         fe:28:b1:bd:7f:c7:93:1d:99:ca:52:89:01:a0:b7:e2:f2:02:
         72:40:74:23:5e:f0:ce:ed:93:d8:6c:6c:90:31:5d:cf:3c:41:
         3c:05:86:7c:c4:20:6b:54:d3:32:c5:be:65:b2:ce:7e:93:a0:
         43:5d:36:5e:f3:6b:27:2a:7d:f2:21:0c:a4:d8:b3:54:8e:e7:
         99:bc:fc:36:87:c1:eb:c3:25:ae:47:49:4e:50:d3:af:df:ee:
         69:ed:d0:b0:27:b9:96:c9:67:c8:22:23:9a:23:fd:44:09:39:
         f5:60:2b:1a:57:48:09:56:07:99:22:dd:5e:f6:fd:4f:3c:13:
         94:e4:3e:53:f2:a2:5f:e2:9f:83:1b:43:87:a9:79:49:55:f2:
         c8:34:46:96:36:9f:73:d7:1f:da:49:4c:0f:07:c3:f9:be:28:
         a4:82:fa:8a:cd:f4:b1:07:8f:dc:4a:c4:6e:8d:df:f2:20:5f:
         78:0a:0a:43:de:78:12:e8:37:f8:05:83:88:b2:51:b8:1c:26:
         ca:51:de:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:27:54 2025 by rpki-client