Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa
File:                     98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa (raw, json)
Hash identifier:          WEuvxmkpr5DajOT/MxCuerviI0R780WtdsaBv4hUNRY=
Subject key identifier:   1F:C3:0A:51:D9:E8:4A:E0:EA:BD:7A:22:F5:54:BE:4E:C6:C3:36:AF
Certificate issuer:       /CN=7fd18149-017f-4551-ae16-4dcabee6b650
Certificate serial:       010D0C9F43285848ADC600BD0A6FBBB96CCEFB80
Authority key identifier: 42:97:62:7C:36:C4:D6:8E:A6:7A:7D:FB:DE:DB:18:78:60:49:80:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     394791
IP address blocks:        204.10.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/7fd18149-017f-4551-ae16-4dcabee6b650.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/7fd18149-017f-4551-ae16-4dcabee6b650.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:00:bd:0a:6f:bb:b9:6c:ce:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd18149-017f-4551-ae16-4dcabee6b650
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=79403eef-6861-4de2-9003-b4d9325f174f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ed:b8:65:fc:03:a7:74:c4:dc:8f:80:cf:10:
                    b3:49:6e:6c:ac:cf:54:74:b9:5b:0f:c1:b4:ab:1a:
                    54:9d:21:d2:10:39:db:4e:33:27:c9:0d:7a:46:57:
                    1f:3e:bb:bc:ee:e6:79:5d:9e:3d:b4:eb:6b:3d:6d:
                    df:24:bb:a4:03:ff:c5:42:27:6b:cb:6b:c6:13:df:
                    1e:62:56:8a:4e:f4:04:ea:1b:99:08:5c:a0:51:23:
                    6e:24:a2:fa:4c:54:ec:42:d3:db:04:ac:99:c4:58:
                    bc:7e:8c:9c:a2:9d:ce:7a:93:b8:f4:00:cf:ae:f6:
                    66:74:de:59:78:fc:1e:9f:b1:13:c4:a2:06:2e:58:
                    f4:bc:81:b9:de:6f:a6:14:6b:ac:df:d7:92:9f:6f:
                    7f:54:d6:92:92:6c:31:bd:f7:78:6b:47:48:f0:a6:
                    0c:f5:98:72:bf:e5:7c:0a:f3:95:55:74:cb:e9:ed:
                    71:b2:93:7c:1c:d2:24:13:0e:89:0d:0b:31:9c:1e:
                    ad:8b:e8:0d:de:7b:a7:29:88:21:76:9b:40:db:16:
                    04:3b:d6:06:1b:32:f5:e4:fa:27:b3:80:b5:d8:a3:
                    1d:c7:68:4d:67:47:db:a8:8f:9a:9a:ff:4c:91:ca:
                    36:5d:3e:a6:1c:1c:1d:83:97:76:e6:6e:0b:b6:b0:
                    6b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C3:0A:51:D9:E8:4A:E0:EA:BD:7A:22:F5:54:BE:4E:C6:C3:36:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/7fd18149-017f-4551-ae16-4dcabee6b650.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:62:7C:36:C4:D6:8E:A6:7A:7D:FB:DE:DB:18:78:60:49:80:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:45:96:94:dc:c8:91:37:31:3b:5b:a3:f9:8c:27:6f:9c:a0:
         00:da:d3:b2:1a:e2:be:13:eb:99:15:70:79:67:dc:2f:6e:d0:
         7e:78:6d:19:6d:e7:f4:e4:d3:80:70:bd:4c:38:31:7e:08:76:
         35:fb:d8:9c:87:a4:7c:0b:eb:3d:ee:13:18:03:a1:b4:ad:cf:
         67:4c:eb:6b:7d:07:a4:8b:4b:2b:9a:a8:70:86:e7:f1:c1:2f:
         fb:e8:ae:44:5e:f0:32:fd:75:cc:34:08:c7:49:7e:6f:b8:ca:
         37:93:b6:f7:f9:cf:1e:bf:5a:0b:79:af:1a:c9:72:6f:4a:0c:
         19:ac:a2:ee:93:c2:3b:db:23:e9:c6:0b:c3:b3:d1:7f:93:56:
         dc:37:48:cf:a9:ad:64:ad:7e:6a:33:7f:09:4c:20:fc:de:ca:
         6d:83:41:b2:4f:cc:11:f3:04:8f:ea:f1:36:ff:54:03:04:bd:
         9f:22:48:0c:95:09:19:82:56:2c:17:32:99:5a:88:6f:bb:92:
         8d:eb:6c:e4:11:a1:4d:6b:ef:b0:6d:79:8e:2e:e0:39:1e:78:
         f5:06:3d:04:76:9c:9c:95:44:cd:79:60:a1:54:f3:08:53:03:
         af:c8:28:92:97:69:0a:49:0c:55:ba:5b:42:3b:59:30:54:d6:
         cb:3b:20:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:02 2025 by rpki-client