Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/281d3ea3-8d51-391f-af59-84facbecc7a0.roa
File:                     281d3ea3-8d51-391f-af59-84facbecc7a0.roa (raw, json)
Hash identifier:          NVbbSyQ87IjaPVYL4gixWS8jDLEDWeQci4AT9GoQR0E=
Subject key identifier:   1A:50:F5:37:4A:D8:ED:A7:1F:4D:7C:43:DF:F9:D1:61:9A:8E:50:02
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F43285848A17089DE53C26BD54562F000
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/281d3ea3-8d51-391f-af59-84facbecc7a0.roa
Signing time:             Wed 22 Jan 2025 15:58:47 +0000
ROA not before:           Wed 22 Jan 2025 15:58:47 +0000
ROA not after:            Tue 22 Apr 2025 14:58:47 +0000
asID:                     5769
IP address blocks:        207.253.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:70:89:de:53:c2:6b:d5:45:62:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jan 22 15:58:47 2025 GMT
            Not After : Apr 22 14:58:47 2025 GMT
        Subject: CN=66152778-8e1f-476d-8ae7-15efec8ce9e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1e:1d:16:35:62:78:dd:be:92:32:58:f1:8f:
                    d0:ae:16:02:46:20:23:9c:c8:3a:be:61:2e:5b:ba:
                    13:b6:4d:22:83:b5:b6:43:49:0d:e1:f6:26:d5:17:
                    07:ab:3a:b5:93:5f:bc:36:66:19:88:6e:85:30:78:
                    34:cf:85:93:05:dd:b0:5b:7c:06:a0:42:33:52:e2:
                    de:6b:df:90:40:78:29:63:98:a6:6a:0c:a0:a0:3d:
                    e5:2e:f4:7c:e2:9b:29:fc:2c:1a:12:14:13:32:c1:
                    27:e2:b3:36:98:80:82:9d:cb:50:71:48:27:4f:fc:
                    2a:0d:16:8e:10:d6:23:64:68:83:2f:4b:63:ff:50:
                    5c:19:98:6c:30:18:96:bf:ce:49:ea:24:54:b0:2e:
                    df:d9:6c:e7:75:d1:ac:e3:e1:fd:e3:8f:4a:ef:62:
                    a6:8f:b7:a0:40:54:5d:14:c8:17:7d:66:b5:90:dd:
                    85:a4:d9:25:e3:10:04:af:4a:65:b9:50:75:78:10:
                    fe:2c:e4:e7:5e:e0:40:56:a7:d6:e8:c9:e7:3c:8f:
                    89:ea:19:7b:52:fe:ed:cf:fc:2b:e3:f5:ed:c5:5c:
                    9a:49:24:83:f4:a5:61:51:7a:b3:8d:a2:7f:32:19:
                    0d:8c:94:f0:81:f8:68:c5:e5:84:15:56:88:90:63:
                    c9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:50:F5:37:4A:D8:ED:A7:1F:4D:7C:43:DF:F9:D1:61:9A:8E:50:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/281d3ea3-8d51-391f-af59-84facbecc7a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:36:f9:31:20:aa:cd:01:6d:73:6a:21:e3:7b:e2:aa:f0:50:
         1d:f3:5c:da:1a:34:e0:a2:ad:3c:92:e7:7d:8b:05:a9:da:d2:
         b1:25:66:d9:d2:bd:14:97:c9:32:4d:b0:f9:24:2d:15:9f:b4:
         37:99:b2:7d:13:67:05:71:58:75:99:5f:66:e1:c2:b7:7e:d0:
         01:ee:6e:a0:5b:ff:13:38:ef:15:24:4e:4c:27:76:63:b1:8e:
         4a:42:78:20:54:73:b4:64:f5:6d:81:ab:5d:d3:8a:db:2e:cc:
         2d:ef:4c:6b:63:de:df:2f:b9:7b:93:84:cd:b6:c5:58:b5:ee:
         2e:76:f1:f7:94:cf:71:8b:82:06:d8:31:02:d9:cc:df:93:fe:
         7d:c3:8a:93:69:31:38:dd:65:17:28:d0:6c:a3:5f:02:77:85:
         9a:e3:1f:6e:14:6b:1d:2d:02:d0:2a:3b:be:51:a6:64:95:73:
         6b:a8:54:4c:bc:5a:e9:a9:26:35:c0:16:3a:a3:5e:b6:37:43:
         77:dc:b5:b4:e4:96:57:6c:4b:c8:de:23:74:46:b2:41:a2:e8:
         c3:66:f9:85:70:30:ca:4c:e0:61:e1:ad:87:86:1b:04:10:cb:
         2b:d3:f9:93:3f:cd:d1:e1:8c:d0:25:48:41:ee:5f:67:bd:36:
         41:98:7b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:21 2025 by rpki-client