Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/269f4238-c1e7-3a3a-b1c2-ed70bdbbfa23.roa
File:                     269f4238-c1e7-3a3a-b1c2-ed70bdbbfa23.roa (raw, json)
Hash identifier:          17Y+PabVbPS+YLSY2mkOXrmOJhh11LzQ6BidR37whaw=
Subject key identifier:   F9:1C:53:AB:8A:04:3F:7C:A6:2F:08:87:28:03:47:B7:56:24:7A:0F
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F43285848EC968124FDE6CDA725360E00
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/269f4238-c1e7-3a3a-b1c2-ed70bdbbfa23.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     42
IP address blocks:        207.34.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:81:24:fd:e6:cd:a7:25:36:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=3d7755f5-b404-4f92-a77c-c9f276aa5034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:1f:13:d0:21:af:68:1d:f1:c7:99:d1:84:
                    20:d7:94:4c:8a:da:f2:d8:ce:0f:b6:b5:49:d9:56:
                    6c:46:69:95:18:46:2a:f3:bf:de:8f:14:fa:af:41:
                    16:d0:9e:30:6a:69:8b:87:c1:2b:24:21:8f:66:09:
                    60:08:6a:90:8e:84:d5:66:fb:4e:f4:85:58:b5:7e:
                    78:00:b0:7d:59:e4:dd:df:06:7a:d0:df:d4:00:d6:
                    d9:6a:2d:ca:74:83:a1:e4:65:40:a3:36:d7:d5:83:
                    50:78:9c:bb:16:5c:26:e7:a0:87:a7:ec:e0:f7:d1:
                    74:4d:a2:a5:c1:89:9c:6f:7a:b2:94:a4:b4:52:c3:
                    35:12:fd:13:f0:eb:70:5b:99:fc:48:a6:9b:b5:a0:
                    82:8d:17:95:de:b2:23:d8:f5:34:9f:84:bb:0a:21:
                    09:7b:61:c1:45:f2:e0:15:8a:3c:a6:85:85:55:62:
                    62:00:9a:5e:69:8c:3c:1f:a8:fe:19:4c:d8:61:33:
                    78:1b:6d:10:a7:db:c6:84:06:7b:8d:c5:97:50:c7:
                    d7:c6:64:cb:a0:d1:7f:1e:bc:d2:b7:64:8b:54:73:
                    31:a3:b5:95:da:47:d7:3b:bf:92:00:49:62:d7:6a:
                    fc:1c:ff:0d:4d:b2:e0:4d:e0:ea:7e:12:bb:f4:32:
                    24:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1C:53:AB:8A:04:3F:7C:A6:2F:08:87:28:03:47:B7:56:24:7A:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/269f4238-c1e7-3a3a-b1c2-ed70bdbbfa23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:00:c3:f1:ba:d0:eb:fa:01:88:2e:de:77:08:2d:4d:43:e6:
         c2:98:72:08:8d:0d:b8:91:34:37:af:01:37:d2:29:cc:d9:c7:
         9c:a2:df:0a:8b:ff:dc:2b:15:8d:61:17:65:3e:6d:ed:63:87:
         cb:9e:4e:b9:20:fb:9e:2c:cb:44:84:8b:2c:ad:d8:b3:26:51:
         41:0d:2b:18:27:7a:53:6c:08:c6:8c:a4:3d:84:a2:55:31:cc:
         94:b9:10:3d:1e:97:2e:78:e1:36:9e:39:5a:90:f3:b9:d9:c7:
         65:87:c6:2b:f5:df:b1:58:1a:54:4d:b7:96:23:8f:56:d8:21:
         49:78:1d:23:b9:67:31:f5:d2:17:37:61:8a:8d:c8:28:70:0d:
         e4:29:35:cc:9d:74:6a:85:a4:b6:86:11:df:8b:45:09:2d:b5:
         e2:40:25:a9:ee:52:9f:72:4e:6b:3b:d6:87:bd:d3:c7:e5:5a:
         ce:64:fd:15:09:89:25:76:52:f6:86:11:a7:08:e9:55:3f:f5:
         ba:e1:00:fa:dc:7c:d5:03:1d:1a:fb:c5:be:4e:69:44:c8:54:
         ac:3e:45:42:a8:8e:61:9b:99:49:b3:2f:cd:6e:ad:06:cd:3b:
         4b:66:1c:fe:80:db:d6:f5:08:1c:4e:63:85:6d:92:b7:43:ce:
         4e:25:d1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:30:20 2025 by rpki-client