Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/009454ff-83eb-36e1-a19e-9115d5074bc9.roa
File:                     009454ff-83eb-36e1-a19e-9115d5074bc9.roa (raw, json)
Hash identifier:          7wvyh1aytTxdbQ61hQHGQgbKNbdXWWqS8Ysb2HIzGvI=
Subject key identifier:   DD:64:3D:AA:BA:C1:54:0A:03:A7:71:83:3B:BF:E1:68:60:A1:2C:AC
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F43285848A1783FDDA992DB6C6B9DC320
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/009454ff-83eb-36e1-a19e-9115d5074bc9.roa
Signing time:             Wed 22 Jan 2025 16:14:19 +0000
ROA not before:           Wed 22 Jan 2025 16:14:19 +0000
ROA not after:            Tue 22 Apr 2025 15:14:19 +0000
asID:                     30336
IP address blocks:        207.253.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:78:3f:dd:a9:92:db:6c:6b:9d:c3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jan 22 16:14:19 2025 GMT
            Not After : Apr 22 15:14:19 2025 GMT
        Subject: CN=6263199e-063a-4887-b5be-36f633abdc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8c:a9:24:c7:07:54:8c:18:6b:96:56:e7:2a:
                    24:3f:73:e6:e0:41:d4:72:f6:be:f0:43:1c:83:7a:
                    25:ed:10:e2:8c:b1:a6:cc:07:09:c0:03:a7:76:15:
                    7c:bf:0f:25:9f:df:15:dd:f6:2d:13:ee:35:68:2d:
                    04:5f:de:31:65:8b:1f:a4:d5:af:2c:16:30:60:b1:
                    a5:48:b6:33:3b:98:4a:66:6d:15:1e:28:36:92:6d:
                    75:56:72:62:53:50:83:3e:b6:69:4b:1a:0f:30:6a:
                    ed:56:cb:89:cc:2e:f1:39:4f:8f:d4:2c:8c:9b:da:
                    43:68:94:1f:3a:00:9c:62:63:ea:28:4e:71:04:fb:
                    2c:a4:27:15:db:2a:84:c8:53:9e:0c:49:e2:ff:7b:
                    f4:4e:8a:78:ab:60:9c:7a:90:4c:ed:58:71:ca:6b:
                    61:9b:8a:58:17:a5:b5:1c:d7:b7:c4:ab:d7:bf:ae:
                    87:c6:81:97:6e:ca:f8:fc:94:64:60:07:39:50:5e:
                    2a:05:da:f1:8a:47:b2:e3:0e:9b:a1:8b:09:b6:92:
                    aa:93:1d:33:c4:f1:b6:a5:e0:e0:53:ea:a1:94:65:
                    07:d3:48:bb:73:51:54:49:c7:16:c7:2e:64:16:e3:
                    87:9f:bb:14:8d:fc:e1:a1:3a:07:d4:60:11:64:92:
                    e2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:64:3D:AA:BA:C1:54:0A:03:A7:71:83:3B:BF:E1:68:60:A1:2C:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/009454ff-83eb-36e1-a19e-9115d5074bc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:22:4f:2f:06:d6:24:58:6b:a8:2f:6f:09:8b:38:5a:97:ac:
         c2:71:b9:5b:a1:6d:33:c4:04:6b:49:eb:93:ea:44:8a:2a:1d:
         49:16:ce:7f:d3:b1:74:0c:73:0d:47:e2:3b:0b:89:a7:21:22:
         49:c4:fc:d5:51:fa:e0:ad:e6:f1:fc:54:39:7c:66:0a:11:e0:
         11:b1:42:d7:3a:99:f9:f1:38:3c:a4:63:53:c4:4d:9d:c9:02:
         42:b6:65:1b:73:77:99:db:51:7b:83:0b:2f:13:ec:88:e1:e0:
         2c:f5:3e:46:7b:4c:dc:a6:ed:d5:f6:67:5f:ce:23:c5:f6:0e:
         06:62:4e:6e:02:7d:f5:f2:a5:04:60:06:7e:0d:50:2f:3c:e7:
         a1:b1:24:82:c0:ca:09:da:02:54:bc:a3:b7:8c:11:3d:d0:8b:
         ee:e2:c0:22:bf:8e:60:04:27:5c:77:6f:66:fa:2d:93:ab:e5:
         2d:0d:8b:99:0f:3c:07:aa:6b:9f:8c:5c:db:71:84:55:21:93:
         97:c7:06:98:36:d9:9a:78:de:21:0b:a3:89:e5:d6:d7:dc:d7:
         20:80:69:25:d4:2c:4f:fa:03:53:4b:15:60:e5:25:4f:10:19:
         73:b6:7d:63:a0:f9:00:2d:60:c1:29:b7:75:d5:86:a0:90:b0:
         2b:da:c4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:22:42 2025 by rpki-client