Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/79181e42-32f7-3219-9195-88b549e832d6.roa
File:                     79181e42-32f7-3219-9195-88b549e832d6.roa (raw, json)
Hash identifier:          w3S/SLy44QFnjyz4nqoNbqnkWwFZ3DBIwPDzsuk1fqE=
Subject key identifier:   E6:30:EA:44:DA:13:B8:C2:62:61:5A:70:A1:09:90:C1:0D:55:61:51
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285848F65BCC42A88558E66367FFC0
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/79181e42-32f7-3219-9195-88b549e832d6.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     16904
IP address blocks:        207.191.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:cc:42:a8:85:58:e6:63:67:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=56e9f063-6474-4180-87f7-ca168f719ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:22:b3:c8:d1:e4:2a:e2:a2:55:2c:73:7b:
                    c9:18:67:fa:d4:91:e5:7c:c8:b4:6a:f2:e4:1f:95:
                    26:27:d3:15:3a:bf:e2:eb:0c:91:71:10:cc:ce:6c:
                    eb:b2:ae:fc:92:70:48:9e:35:93:db:66:f5:28:cc:
                    9c:cc:05:b1:9a:a1:e3:bc:80:5e:67:8f:83:84:15:
                    57:09:07:92:af:5d:e8:54:82:7f:23:87:55:8a:2e:
                    70:f1:07:a5:e4:fe:05:91:9a:e5:9f:6b:3e:51:99:
                    0c:2c:bb:fd:87:95:6a:1c:61:98:85:a8:f6:4c:6c:
                    b2:c1:23:13:98:f7:95:0b:f9:0a:cc:4e:15:5d:64:
                    33:0c:4c:61:44:de:ef:c6:0e:f4:eb:9b:bd:af:b9:
                    6c:46:79:7e:a8:9e:27:2a:a8:84:7c:95:9f:a5:44:
                    d7:2d:b3:63:d2:be:80:77:1a:c4:cc:8b:95:26:68:
                    77:27:2a:79:19:1b:cf:a4:36:2d:c7:19:c9:16:8c:
                    78:af:30:d0:d3:bf:6b:6e:48:c2:9e:30:35:97:19:
                    e2:2a:65:2a:17:88:38:29:2d:53:be:2c:33:ee:fa:
                    06:43:7a:52:7b:55:c4:5d:cc:8d:cc:f5:c6:50:03:
                    c6:3d:ca:74:09:9e:91:69:da:4d:90:f3:25:d8:18:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:30:EA:44:DA:13:B8:C2:62:61:5A:70:A1:09:90:C1:0D:55:61:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/79181e42-32f7-3219-9195-88b549e832d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b4:59:92:cf:f1:29:7f:43:03:25:ff:9f:a1:02:4d:0a:09:
         3d:17:68:8a:b2:31:5c:2e:f5:98:c3:7b:24:5a:08:30:8d:2b:
         16:d6:8c:94:cb:73:e5:04:5f:3b:dd:b3:97:8a:e3:87:15:2c:
         5b:6f:5d:66:f3:35:4c:c4:48:36:c3:57:ea:a8:b0:eb:2a:ed:
         39:8c:fd:85:b1:c1:5e:b8:dd:f1:4e:9b:9b:2a:23:a5:80:40:
         a0:81:18:b2:9b:8c:6f:be:5d:d1:31:f1:70:b4:bb:b8:7e:b7:
         2d:53:3a:62:98:79:77:42:a2:3a:71:2a:66:13:80:0d:86:f7:
         c3:6b:e1:24:d8:01:63:d2:e8:06:c8:54:09:42:7d:f2:d7:f4:
         92:cd:98:01:d7:0e:95:68:71:11:ba:45:5b:ee:66:a7:3c:d7:
         7c:63:c4:64:cd:1b:83:80:7a:1a:82:f6:dd:c9:3b:81:36:9c:
         04:dc:59:41:78:67:26:4f:1e:e0:0c:af:68:d8:a1:a9:c5:e5:
         ef:1d:18:e2:ec:4a:94:c8:86:37:ee:72:7a:27:6b:de:22:cc:
         1a:ec:ed:ed:f7:e5:1a:ce:0e:25:43:6a:2d:86:70:2f:cb:4f:
         d8:3c:e0:10:5a:d7:6f:a4:5f:d5:f9:8a:d3:1b:85:bf:12:25:
         fa:fd:77:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:14:23 2025 by rpki-client