Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/26d6921e-6c18-3898-b2f4-e87d0d9d65df.roa
File:                     26d6921e-6c18-3898-b2f4-e87d0d9d65df.roa (raw, json)
Hash identifier:          Nvu7tLoKcxI4X3zV5cEbx+RvCMeVb44Asd2C8PCvEH4=
Subject key identifier:   9C:6C:9A:D7:28:44:C0:B7:00:37:CA:B6:62:5F:2A:14:39:3B:F0:F1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848B1F628A1358159A928D51A00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/26d6921e-6c18-3898-b2f4-e87d0d9d65df.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     7861
IP address blocks:        207.229.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:28:a1:35:81:59:a9:28:d5:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=b0ffc8d1-4760-4e04-bfae-d488f7197113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9b:7f:b4:e6:0a:38:74:d5:61:37:7b:18:ff:
                    92:81:c8:ea:8a:d9:59:d5:4c:a8:ec:11:00:a8:aa:
                    0f:f8:32:76:1f:53:76:d4:c3:88:78:78:04:ba:0b:
                    f6:b7:f3:99:9a:f7:4c:88:6e:ae:19:f6:bc:67:5a:
                    e6:12:21:28:3e:09:9f:23:f1:79:a8:a5:9b:19:4f:
                    24:17:1d:78:40:4f:be:75:8b:88:6b:16:00:d3:7a:
                    9a:68:2f:27:87:a1:81:ba:66:e7:1e:39:49:54:0b:
                    80:4b:98:ca:5a:54:bd:6f:94:4e:ad:cd:42:21:40:
                    73:63:ec:0a:a9:5f:09:0d:b4:89:09:a1:ee:95:1c:
                    f2:0c:c4:54:f0:0f:4e:02:86:3b:80:ee:5a:8c:c0:
                    d0:0d:b2:a3:cd:7e:bc:8f:41:b0:8d:9c:40:23:cf:
                    db:85:7a:2a:0f:e1:f5:92:fc:0c:c0:b0:88:5d:51:
                    a0:34:45:71:e2:03:26:b1:e9:26:5e:85:54:1f:44:
                    5f:4e:1d:d6:3d:fd:cd:2a:3b:e1:ed:a0:7e:69:33:
                    11:d1:a3:56:20:9e:21:79:e5:27:00:d4:17:c9:8c:
                    e8:f1:55:67:e1:b6:19:57:93:b1:55:62:5a:dc:5e:
                    89:78:d4:dd:49:b4:4b:83:fe:ea:37:53:9b:40:ee:
                    b9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6C:9A:D7:28:44:C0:B7:00:37:CA:B6:62:5F:2A:14:39:3B:F0:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/26d6921e-6c18-3898-b2f4-e87d0d9d65df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.229.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:14:de:6e:67:94:91:ff:b8:bd:c4:a0:45:c2:66:66:43:ce:
         cd:8e:e7:ec:22:97:f2:7b:20:4d:37:50:6a:e0:39:e4:16:2f:
         54:82:47:84:e7:84:93:51:9c:d7:9d:a7:db:09:9c:66:cd:20:
         66:f5:8b:95:e3:5d:f0:90:d1:4a:52:6e:ba:31:5a:f8:a2:f2:
         af:b4:27:22:94:c1:92:a3:48:9e:38:18:87:93:9c:bb:6e:f0:
         85:91:6b:d0:e1:fe:45:11:53:24:25:0d:7d:8f:d4:cf:81:e2:
         fc:c5:8f:6b:02:f2:98:7f:0e:1f:77:57:59:b9:57:99:43:3a:
         d0:43:72:b3:94:be:86:a2:3f:26:38:a6:79:a1:b5:f7:4d:ff:
         88:68:69:87:56:af:d0:b7:fa:48:6c:18:8e:9c:c4:b7:80:f7:
         0e:7b:ea:17:3b:e7:de:12:5a:6e:ce:e7:87:87:2f:1f:9e:23:
         ff:81:8a:ff:f1:ae:38:9d:48:91:93:a1:9f:b7:15:ab:1a:de:
         8e:61:6b:b7:9e:76:39:80:c5:5a:cb:7c:89:b5:f6:21:cd:40:
         1f:71:5b:4d:d6:e7:9c:f5:2e:d8:60:99:33:94:27:48:53:eb:
         68:13:fd:11:d3:c4:9e:db:c8:5e:9f:65:1a:35:a7:40:96:c4:
         ee:35:38:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:17 2025 by rpki-client