Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/f7c3a673-4c55-3e00-bbc7-c9bd29d2957f.roa
File:                     f7c3a673-4c55-3e00-bbc7-c9bd29d2957f.roa (raw, json)
Hash identifier:          qUEmyY+ATj3YIe8fERhT8AC9roxiR+F4q93cpTjl6sk=
Subject key identifier:   DB:14:F7:56:1D:46:C6:88:48:26:FE:9D:5C:79:A9:A1:73:E9:C7:D0
Certificate issuer:       /CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902
Certificate serial:       010D0C9F4328584917DC021F07C6002F796CEAB0
Authority key identifier: 51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/f7c3a673-4c55-3e00-bbc7-c9bd29d2957f.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     26461
IP address blocks:        208.91.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:02:1f:07:c6:00:2f:79:6c:ea:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=ec01a01c-edbe-4a40-86b7-6c4ad518ced7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e0:0b:12:a0:b5:31:f0:29:ef:39:6a:1d:95:
                    be:99:76:26:91:a3:22:b6:46:4d:e0:b3:31:ec:f3:
                    b3:a9:2f:7f:79:00:17:2a:e9:e4:cd:b7:43:96:ec:
                    52:09:73:03:fc:e5:e1:0f:54:dd:0f:37:dc:a4:be:
                    b0:c3:76:b0:60:8b:c0:c3:f0:7b:58:7f:b6:a2:44:
                    1b:ea:36:02:47:e6:dd:23:d6:9b:7d:91:f4:8c:be:
                    8f:34:b2:da:80:36:24:84:b3:5d:db:4b:2c:84:23:
                    64:72:88:5a:d9:f1:0e:90:ac:ae:24:d3:a2:36:24:
                    20:28:48:61:49:0c:cb:60:6b:46:02:38:da:d2:bf:
                    c7:a4:48:d5:f9:a9:2a:73:54:ee:eb:8b:6f:80:61:
                    f5:73:f3:5e:3b:c9:5a:34:aa:30:fe:b3:3d:8f:1c:
                    6f:23:70:4e:73:84:9f:6e:1b:05:e8:50:5f:dd:08:
                    cd:7d:0d:f3:cf:36:5d:25:a2:6e:5b:40:31:ee:1b:
                    29:74:2f:57:75:1f:8a:03:ee:56:03:27:63:4e:17:
                    b2:ac:8e:53:4d:17:34:e0:3b:db:80:92:46:59:03:
                    5c:22:30:de:2c:19:be:2d:4d:19:ae:d5:19:a9:53:
                    39:99:49:8b:cf:85:84:e2:b0:a8:1a:bc:b3:d4:39:
                    9d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:14:F7:56:1D:46:C6:88:48:26:FE:9D:5C:79:A9:A1:73:E9:C7:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/f7c3a673-4c55-3e00-bbc7-c9bd29d2957f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl

            X509v3 Authority Key Identifier:
                keyid:51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:9d:87:ec:98:54:cc:72:a5:72:89:cc:10:cc:bd:78:18:ce:
         8b:46:d0:5c:8d:29:ad:20:d8:4d:24:40:3d:3c:0f:70:ff:3a:
         ef:45:c1:80:9e:7a:7e:5a:bd:d5:ec:3c:f3:a2:8f:21:39:1c:
         1d:4e:37:9e:9a:72:35:b1:f7:58:27:64:c3:2c:a7:d6:f6:26:
         6d:5f:1d:dc:f7:ae:c1:99:e4:02:aa:64:d6:cf:24:a6:85:ed:
         4d:d4:8e:4b:0f:ed:57:57:ec:7e:8e:90:a2:9c:8b:27:df:c3:
         00:ba:b3:9c:f4:0f:3e:64:f0:4c:ec:33:ad:13:54:ee:8c:22:
         99:ee:cf:86:36:00:8e:9c:a8:61:05:5f:49:5d:9f:ee:68:50:
         cb:41:c6:bb:de:5c:9a:4d:f8:bc:87:84:ad:78:7c:28:46:89:
         e4:9f:ce:57:e3:b5:62:2f:2e:59:81:ee:5f:d0:2b:3f:b2:13:
         3f:0c:4b:be:89:ea:37:18:79:5d:51:9d:51:45:4e:83:ff:ff:
         33:c1:ec:8a:99:04:b0:da:bd:00:5c:d7:23:87:6d:bb:03:32:
         6e:4b:05:fe:80:bb:d3:e4:4b:8c:99:23:95:38:76:5e:f1:e7:
         ae:06:e6:ba:38:94:8f:b9:78:60:a8:48:87:84:0e:a0:7b:f3:
         f5:cc:6d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:42 2025 by rpki-client