Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/857c51e0-ce7a-3e05-8c40-312b3eb3b8bd.roa
File:                     857c51e0-ce7a-3e05-8c40-312b3eb3b8bd.roa (raw, json)
Hash identifier:          YGMlwZAUiWPMArpKSYkPNkaKsVXlTUPzXqOZAvFubZ4=
Subject key identifier:   DA:0C:06:AC:7C:4C:F0:ED:0D:8B:79:7F:B3:89:9F:2C:FB:07:5A:71
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584905B6B28C1CF173511BC97680
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/857c51e0-ce7a-3e05-8c40-312b3eb3b8bd.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     19901
IP address blocks:        207.50.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:b2:8c:1c:f1:73:51:1b:c9:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=26c06434-8f9f-4375-b7b6-4d3ce31db56d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c2:de:cd:1e:cf:36:a5:f6:cf:19:9b:17:a0:
                    5a:4e:cd:41:d5:30:03:3b:ef:64:ea:1f:0e:2a:73:
                    3b:ac:50:17:a2:17:28:05:9e:93:47:93:bb:c7:88:
                    5f:f8:ad:8c:64:7f:ab:b0:c6:4b:b0:1d:75:13:f5:
                    38:36:c9:d8:b9:53:09:5c:60:8e:9a:47:ae:10:dd:
                    85:a9:25:0f:a2:5b:4e:4b:ad:a9:81:81:70:3d:31:
                    88:e3:59:6d:8e:31:c8:8a:62:52:b7:34:cf:9f:cd:
                    93:1c:96:18:78:57:eb:fa:13:38:ef:8d:85:87:1c:
                    3b:f5:e0:4a:39:50:83:68:34:e0:a7:9a:26:d9:6c:
                    25:d5:6b:67:49:4e:be:62:f3:18:38:b7:80:6b:65:
                    ea:6b:85:5b:e2:bb:7b:ef:ad:35:16:f1:d4:83:f9:
                    ea:b1:e4:7d:7a:42:8d:03:a1:b0:43:f3:fa:0e:a9:
                    f6:bc:4d:7e:12:6a:a3:eb:75:47:a5:62:3f:e6:38:
                    62:9a:41:22:39:17:08:a2:d4:cc:b2:8b:2e:59:38:
                    3a:83:ba:17:d0:fa:48:8e:52:da:37:8d:f3:3d:0b:
                    e6:fa:16:41:e4:5e:39:dd:2f:f8:cb:d4:aa:7c:ab:
                    88:97:4e:da:dc:9b:51:08:df:2f:29:46:bb:22:8c:
                    93:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0C:06:AC:7C:4C:F0:ED:0D:8B:79:7F:B3:89:9F:2C:FB:07:5A:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/857c51e0-ce7a-3e05-8c40-312b3eb3b8bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.50.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:47:27:d2:f4:e0:7f:f3:2c:f2:3d:11:94:4f:6a:8c:9d:ca:
         59:9c:ee:35:ce:6c:a3:12:50:00:f2:09:25:f7:85:6a:65:08:
         35:42:45:d7:e7:d4:e0:c7:3d:7e:e7:e7:75:d2:0d:b5:7a:4c:
         ab:57:9b:dc:d0:fa:07:8f:8e:5f:fe:0e:35:04:2e:e5:40:ff:
         e4:ba:6a:cb:15:40:74:bd:51:62:40:3e:31:a2:86:34:4e:d3:
         be:2f:ec:41:48:fa:0d:65:ee:34:ae:c8:05:b3:d3:ab:cb:a3:
         2d:c8:f4:1f:20:85:c0:87:57:e1:d9:37:88:95:42:5c:ed:29:
         96:06:d9:70:12:2a:03:50:a5:28:8d:18:ff:58:6f:ed:89:d8:
         22:0f:1f:d3:eb:c8:e9:15:4c:74:4a:b3:f9:77:d0:71:bd:c8:
         3f:3e:a0:af:0f:ad:48:24:d6:e0:20:2c:12:16:1c:8e:d6:e1:
         d6:fc:1d:8a:a7:f7:ac:c1:34:9c:51:05:32:4e:90:76:2c:34:
         75:c5:5e:ae:f5:71:55:16:c3:60:16:07:50:88:63:58:f6:98:
         4f:cb:aa:f1:bd:cc:49:9e:6f:c6:76:c9:80:90:cd:01:bc:c8:
         28:50:9e:9d:97:6b:3d:70:69:a7:b3:62:ec:7d:61:5a:a4:e3:
         39:88:0a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:48:10 2025 by rpki-client