Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7e4f1743-bfb4-3859-a33c-c49d8a34be0a.roa
File:                     7e4f1743-bfb4-3859-a33c-c49d8a34be0a.roa (raw, json)
Hash identifier:          EznEPlWdD0urtr/gopeZ6BLCyNMHQZN3qpaduUVEwFE=
Subject key identifier:   35:5E:CF:99:6A:11:5C:4E:2F:53:03:F0:FE:5A:82:07:E5:71:10:84
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F432858494CC9400DDE63E80722972DA0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7e4f1743-bfb4-3859-a33c-c49d8a34be0a.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     13414
IP address blocks:        209.237.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:40:0d:de:63:e8:07:22:97:2d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=613332d6-e402-4ba6-a968-141212997373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:d4:5b:e9:2e:13:8b:39:9b:61:11:41:69:
                    10:64:4b:c5:cb:c4:3c:6e:16:13:aa:2d:12:b6:ce:
                    33:cf:9c:79:43:d5:e0:e4:40:74:09:a0:45:04:44:
                    5f:7d:af:4d:d1:c0:fd:37:03:35:a1:8a:b3:ef:cd:
                    a9:42:9a:e4:c0:17:26:86:fc:25:93:c5:be:6f:fe:
                    3b:0a:83:e4:8f:c8:68:bb:c5:41:06:dc:77:a9:80:
                    53:09:b3:7f:84:be:1b:ce:13:ca:f2:d8:ac:65:59:
                    96:ee:9b:8f:8c:d9:cb:7d:02:77:34:fd:55:3c:1a:
                    16:cc:04:67:be:59:8a:20:81:28:7f:91:28:6a:61:
                    1e:81:27:42:ff:fd:66:f1:3d:44:80:3f:af:4f:51:
                    88:a0:37:b9:33:73:59:fe:a2:6a:3f:eb:f0:f7:32:
                    55:86:92:12:4a:4d:52:12:08:fe:67:9a:1d:1e:da:
                    32:c1:66:ce:ed:22:5d:24:c8:e2:f7:b3:17:3d:ec:
                    1b:f8:6a:56:79:82:39:ff:90:5d:00:2a:41:22:2c:
                    ea:22:5e:f0:be:90:3c:e5:54:ff:38:9a:59:b1:eb:
                    b5:1d:27:6c:f0:e1:65:ff:8b:92:0c:6d:5e:22:1d:
                    13:26:b9:36:e1:7f:2a:52:ba:34:2d:71:88:df:f4:
                    1b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5E:CF:99:6A:11:5C:4E:2F:53:03:F0:FE:5A:82:07:E5:71:10:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7e4f1743-bfb4-3859-a33c-c49d8a34be0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:35:d5:7e:f3:35:aa:c1:b0:7a:26:70:93:0b:1a:a9:99:97:
         79:f1:8d:fe:ca:ba:e4:dd:da:0f:46:71:b7:f4:ea:af:4e:d2:
         19:77:5d:32:6e:7a:05:ba:9b:53:81:99:cd:b5:3b:d2:9f:35:
         91:c2:95:81:51:3d:22:a0:5a:33:3a:c2:04:e8:d8:42:95:16:
         9d:e3:a1:8d:3c:83:6c:f9:65:b9:33:f5:d8:df:3f:46:58:99:
         04:da:07:27:3d:51:3c:97:10:d2:e7:06:1e:df:47:8a:aa:b4:
         da:fd:91:2a:9b:0c:43:8d:4f:b9:ef:8d:1c:01:d0:90:04:ab:
         aa:64:e8:e1:cb:56:ca:92:1f:8d:35:16:67:dc:48:9b:b4:06:
         7a:89:ac:3d:05:a3:d7:70:e3:c8:2a:c5:ae:fb:35:c7:da:ad:
         77:08:c9:0e:4b:f0:69:be:f9:71:1e:bd:f3:a8:cf:d0:f7:40:
         eb:bc:66:bb:22:a9:f5:c5:0c:45:84:c9:d7:99:3e:f2:e6:ed:
         e1:ee:1e:0e:3f:a2:a7:d4:42:19:79:9e:f7:40:33:99:72:d2:
         b8:9e:f0:72:44:de:87:da:65:3b:0f:02:2d:e3:14:69:25:34:
         82:18:27:a8:02:1e:fa:d2:d1:be:24:e5:cd:16:af:db:ed:db:
         92:bd:b2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:15:00 2025 by rpki-client