Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1cc1e999-de3a-3a4d-8aa3-cbe2c8683dbc.roa
File:                     1cc1e999-de3a-3a4d-8aa3-cbe2c8683dbc.roa (raw, json)
Hash identifier:          1rDGkJc9O3vIcabQev07U0BXBbDF/tzObWj4vc6PFIk=
Subject key identifier:   C8:1B:EB:1D:87:DE:A9:6F:F5:39:2C:C5:1D:51:8A:92:D4:08:89:87
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584950F967D66E750BE44E842080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1cc1e999-de3a-3a4d-8aa3-cbe2c8683dbc.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     64267
IP address blocks:        209.73.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:67:d6:6e:75:0b:e4:4e:84:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=f7243ee7-d63b-42d4-8356-2ef1eeea3163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:60:59:fe:91:89:92:27:50:c8:35:3e:1b:6c:
                    e4:92:03:53:c4:e8:d5:cc:76:38:a0:1b:1c:32:11:
                    c1:34:65:5e:98:0e:e5:a8:90:5a:1c:b7:09:ef:ba:
                    3b:99:a3:0a:ec:d8:3f:0d:1c:80:3c:87:39:e7:4f:
                    23:56:9d:8a:ce:2a:63:66:70:d5:16:e0:de:f8:85:
                    fc:7f:da:6d:54:22:b0:70:14:89:31:3b:ea:d1:8f:
                    a0:a1:ff:c6:04:9b:bc:07:22:75:5f:7b:dd:4b:72:
                    b5:26:ad:a2:0f:f1:79:6c:00:5a:bc:1b:01:f3:85:
                    17:7d:50:cf:27:e2:54:ac:98:9d:bc:76:39:33:f7:
                    5b:52:c6:1b:8f:d4:f5:d8:4c:01:67:83:c4:5b:e1:
                    9b:bd:81:b3:eb:76:07:e9:24:91:d0:40:90:06:14:
                    04:2c:77:56:6e:60:f3:a3:7a:78:3e:ed:8c:cb:6f:
                    c3:4f:0e:c2:27:00:2e:2e:ea:c4:47:fb:80:e6:64:
                    56:fe:b8:46:eb:67:21:7e:f0:45:cb:62:5f:6f:75:
                    9f:65:99:0d:43:05:86:80:df:ee:8f:61:16:4a:bc:
                    de:08:b0:11:d3:7e:cc:38:1f:cd:c3:c6:46:5b:2d:
                    d4:a3:b7:a9:57:69:08:85:80:61:26:87:42:18:bf:
                    39:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1B:EB:1D:87:DE:A9:6F:F5:39:2C:C5:1D:51:8A:92:D4:08:89:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1cc1e999-de3a-3a4d-8aa3-cbe2c8683dbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.73.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:50:fc:6f:a8:5c:70:b1:0e:c3:94:10:ac:63:f3:e5:84:2d:
         24:0d:05:a5:5b:11:f9:c0:63:65:6c:80:7e:af:64:da:f1:17:
         9c:aa:86:87:d9:0c:7d:5b:4e:e2:69:a1:bf:7c:46:b2:aa:0a:
         3e:3d:8f:2c:eb:e9:77:6b:9b:cf:87:7a:1d:de:42:81:8f:1e:
         a1:cc:f0:a0:87:e5:4d:b6:e8:15:c5:25:cd:63:dc:31:92:92:
         b8:c7:01:8e:7d:d5:0c:ce:fc:fa:f4:ad:0b:eb:d5:75:78:e4:
         e0:2c:b2:9e:41:cc:38:8c:7a:1f:7b:29:c9:f5:9c:32:dc:65:
         44:67:64:61:54:13:9b:e3:c9:4e:23:e5:c1:47:ec:9f:48:ed:
         64:4e:e8:b6:6f:f2:f8:dd:83:c2:c0:3d:86:c0:b3:ef:ee:87:
         2f:3f:e8:30:9d:57:a0:79:a1:bf:29:67:0b:f2:30:da:86:58:
         f0:c1:e1:38:9c:7d:d7:f3:68:ba:69:f7:9e:0d:35:88:a0:4c:
         2e:67:c2:c4:ff:da:9e:b6:b8:e7:cd:6b:5e:f4:5c:1f:fc:a0:
         eb:98:9d:cd:09:35:51:64:43:02:2c:e8:d4:40:4a:a2:54:a7:
         1c:37:9b:b7:f7:ea:db:29:de:f7:38:09:f0:28:94:1c:55:e3:
         e5:a9:e6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:24 2025 by rpki-client