Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/44f31820-9493-3528-980e-539d99895685.roa
File:                     44f31820-9493-3528-980e-539d99895685.roa (raw, json)
Hash identifier:          APibstP/eK1Md/3wtjYcwrhqC2h7OGJsznIqWWb2+yo=
Subject key identifier:   6B:81:74:AC:A0:F0:AC:2A:87:61:C7:5F:77:B3:22:13:9F:2F:12:68
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F432858495D89670ACB8CA350A8735660
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/44f31820-9493-3528-980e-539d99895685.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     22652
IP address blocks:        208.88.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:67:0a:cb:8c:a3:50:a8:73:56:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=5b6165b1-0d67-48f0-b8da-fbdf3e8d74bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:3b:48:f8:33:58:f2:41:51:8f:1c:46:36:
                    d5:4d:2b:ad:6e:d7:36:e2:84:33:0c:f0:8a:18:2e:
                    7a:43:67:b3:32:85:99:3c:8a:27:04:0f:9a:bc:11:
                    62:d9:50:9f:d7:68:5f:c1:b0:82:ac:a6:c2:b5:9e:
                    55:67:69:fb:03:61:28:73:ff:b7:cc:55:2a:d7:b3:
                    fa:dd:12:73:ee:0c:fa:b2:01:2b:aa:3b:fe:2f:45:
                    34:97:21:1a:d2:d6:53:97:b2:5d:3b:c0:cf:2f:1c:
                    cf:4d:76:b0:61:11:ba:78:e6:69:29:68:65:39:78:
                    7a:eb:8b:29:9d:82:83:f4:fb:52:d0:c7:a9:46:08:
                    a1:17:42:5d:b8:b7:08:61:8b:d1:f6:83:a4:73:dc:
                    98:a3:57:6d:af:40:e3:1d:63:13:5b:cb:f5:12:13:
                    78:e8:06:da:aa:6f:da:6a:3b:3c:ea:a0:3c:36:ce:
                    74:28:2a:4a:65:c9:05:1f:29:b5:a1:16:c6:c2:3e:
                    14:21:d9:b0:7d:f5:a3:28:80:89:ab:f5:4a:53:43:
                    fa:23:33:69:92:38:1e:41:7d:f3:71:d4:3e:f1:b4:
                    fa:37:a8:c1:e3:e6:e5:49:13:03:90:ae:99:fa:17:
                    0c:f8:4c:59:c6:6d:84:26:f6:ad:ad:12:e6:c3:35:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:81:74:AC:A0:F0:AC:2A:87:61:C7:5F:77:B3:22:13:9F:2F:12:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/44f31820-9493-3528-980e-539d99895685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.88.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:63:1f:cc:5f:91:85:b4:d1:f3:89:26:40:df:97:cc:8f:66:
         d4:e2:a3:b8:ae:db:7a:37:ad:8b:6c:36:fd:c5:d5:77:45:d3:
         64:a0:b0:c5:10:14:b2:82:90:1d:0c:0f:e3:44:d8:1c:2e:5a:
         aa:2f:97:af:aa:65:16:b8:0d:cd:3c:f6:85:03:c6:99:dd:e4:
         01:98:b4:81:8e:87:20:4b:17:ca:13:03:f1:0d:14:c0:37:6b:
         df:59:c2:f1:93:77:4b:8c:af:68:c5:01:32:03:d0:ab:68:91:
         65:ba:59:3d:3a:4b:3e:26:83:62:4e:ab:0b:fd:18:6c:9a:e1:
         ce:46:fb:3c:78:bf:b6:dd:38:2b:b9:a7:04:09:b5:6e:9b:62:
         80:74:23:07:84:0a:ac:52:6f:5d:c6:16:2e:6c:e5:be:7d:60:
         26:7f:9b:86:81:7c:23:af:22:bc:51:91:38:3d:2f:35:41:82:
         3e:a8:0d:0e:cf:96:ac:3d:20:ec:fe:24:18:6e:35:6b:35:32:
         d0:37:cf:c3:73:d2:08:a7:d3:07:35:b5:d5:8b:51:05:bb:ac:
         71:ca:68:9d:b2:58:6f:8a:61:c1:0c:23:5b:eb:cd:a7:1c:bd:
         54:48:6b:0c:d0:26:f5:80:bf:90:26:52:b3:74:43:69:69:58:
         4c:50:bf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:13 2025 by rpki-client