Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/98277976-b42d-3c8f-917e-6bf12b3c5674.roa
File:                     98277976-b42d-3c8f-917e-6bf12b3c5674.roa (raw, json)
Hash identifier:          R+4xPzy37ImyXe8KrZSHw/mJHXZ6xpsrJ1mRJJbyz64=
Subject key identifier:   7E:3B:32:C9:C7:F2:51:1F:64:52:96:11:38:D4:20:05:A0:52:F9:20
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F43285848CDE10F15200A19457F98D1C0
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/98277976-b42d-3c8f-917e-6bf12b3c5674.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     393262
IP address blocks:        216.41.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:0f:15:20:0a:19:45:7f:98:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=344f7217-cd25-45d9-aa05-6582e8d3da0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:eb:94:c7:82:da:f6:ea:d7:ae:55:3e:8f:38:
                    6b:15:91:2a:78:46:64:44:37:ac:56:4e:a0:4e:5d:
                    8a:70:45:54:ce:d5:fe:d7:22:f3:7a:0e:26:ca:73:
                    96:57:09:11:d0:73:3a:59:6e:c1:c6:f2:38:00:a0:
                    83:39:fa:cb:71:60:44:c2:4e:81:8f:08:ec:dd:dc:
                    11:22:20:0b:7c:e5:1c:1e:87:d9:9b:23:96:61:08:
                    c8:c2:8d:e7:29:22:dd:5b:55:94:b9:b2:47:ed:f1:
                    05:c6:d3:97:95:dd:3d:e9:bf:02:3c:e5:66:94:b5:
                    5a:1f:ba:e1:c3:c9:80:6c:80:2f:22:d2:0a:59:21:
                    f8:a0:49:8f:fd:02:15:7a:1c:c0:e3:b6:3e:3c:6e:
                    6d:60:e1:68:15:65:97:a1:65:01:f8:74:e1:1e:90:
                    95:ac:b5:ff:71:bf:51:60:51:21:43:2f:b3:89:5b:
                    b1:6b:0b:78:fd:f1:76:ee:a6:68:ad:c9:97:16:05:
                    15:ae:8e:4d:23:bd:6f:22:22:81:8b:cd:a9:80:9c:
                    ee:b9:ad:d0:22:a7:be:ef:af:78:13:9f:37:a4:7d:
                    7a:0a:25:0b:be:83:88:86:fc:9a:a1:7b:8c:8e:7c:
                    c1:cc:93:7f:bf:bf:94:05:12:99:31:20:9b:32:2c:
                    f4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3B:32:C9:C7:F2:51:1F:64:52:96:11:38:D4:20:05:A0:52:F9:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/98277976-b42d-3c8f-917e-6bf12b3c5674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.41.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d5:f1:58:eb:0e:38:66:1c:92:d7:fd:d3:15:dd:5d:e0:13:
         ab:a3:ce:61:ad:74:8b:b3:29:c1:78:a6:ee:dd:d5:8c:8a:14:
         33:21:11:42:7f:bd:0c:49:07:98:f9:f2:a5:8d:64:ce:d5:6f:
         05:3c:23:cd:c2:1e:a8:26:3c:a4:78:4e:f0:a1:a0:3e:84:17:
         cc:fc:b9:f9:99:f0:ce:66:2d:64:bc:82:5c:62:0c:2d:a1:09:
         20:6e:a6:a5:db:91:0a:db:32:39:3f:14:d1:11:a6:66:83:30:
         d5:ec:cc:fa:5b:e9:78:13:4c:7d:d6:d6:8d:1d:2a:73:68:40:
         75:bc:59:ec:db:d4:72:95:0b:30:8a:0f:08:18:5d:11:3f:39:
         50:92:f9:a8:35:59:28:ca:f0:38:6e:34:6d:c1:bd:bf:3b:db:
         77:f4:f6:46:2e:61:6b:0b:6b:9d:05:84:18:84:97:e9:81:bb:
         44:e7:cb:7f:2f:ac:87:3b:95:31:c0:60:b3:26:44:58:ad:1b:
         97:31:63:68:f3:11:f7:e6:d0:31:6b:83:78:6b:c1:f5:dd:35:
         82:fe:14:d4:bc:18:2b:be:9a:75:55:3e:5b:cd:36:fb:89:8b:
         57:b8:15:94:73:8b:99:2b:70:26:40:96:29:7b:26:00:2f:33:
         ed:08:b3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:01:23 2025 by rpki-client