Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/41336990-96c9-3dd3-b2d4-a1fbc404f377.roa
File:                     41336990-96c9-3dd3-b2d4-a1fbc404f377.roa (raw, json)
Hash identifier:          gKp8FuOuspLJwJSQVUSEUtaKWGCiSO86cqWQccidLjg=
Subject key identifier:   56:5D:70:14:3E:FB:FD:21:05:85:74:2B:19:61:B7:61:3A:3E:FE:5B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848B62617A02CA562B956998E00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/41336990-96c9-3dd3-b2d4-a1fbc404f377.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     852
IP address blocks:        207.219.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:17:a0:2c:a5:62:b9:56:99:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=7cbda0a6-678b-402e-ae0c-e89ab821b54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2a:a4:86:4a:3a:ae:36:85:d6:93:c2:d1:37:
                    a1:94:48:aa:aa:fc:26:dd:bf:bc:68:89:2f:e6:c8:
                    d8:17:10:74:a0:27:4e:f2:81:de:86:04:5b:21:50:
                    bc:85:f7:4b:cc:a4:4e:69:d5:dc:de:87:34:56:c6:
                    da:14:5e:57:57:8c:63:e8:df:55:55:99:2d:61:ae:
                    73:81:c2:fb:9d:37:ee:84:9a:be:17:5b:df:bf:f2:
                    2e:1e:00:72:2b:c9:44:b5:4b:53:0c:ea:78:df:7b:
                    3e:58:db:82:16:ca:b5:2a:aa:db:73:ec:4a:61:d9:
                    b2:a0:86:2e:80:4a:5d:0d:91:bc:ea:87:21:c2:ee:
                    98:89:4e:38:dd:82:bd:27:44:66:52:64:4b:a3:8f:
                    88:c0:62:a2:f2:cb:e9:77:0b:f4:0d:d9:3c:5d:03:
                    69:83:b7:87:c9:dc:3a:ab:14:bb:de:eb:26:f8:38:
                    f1:40:61:b2:44:e7:3c:c5:f6:6c:04:e7:70:29:47:
                    fe:f1:61:ad:25:06:92:91:8b:7c:38:c2:13:4f:74:
                    31:be:00:a4:a5:5e:2c:aa:ab:24:82:d8:d0:38:bd:
                    01:12:4d:27:9a:2f:3f:e4:08:17:07:a7:9d:fa:11:
                    ab:e3:0e:e6:9f:9f:9d:45:96:b6:f2:12:97:af:2e:
                    56:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5D:70:14:3E:FB:FD:21:05:85:74:2B:19:61:B7:61:3A:3E:FE:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/41336990-96c9-3dd3-b2d4-a1fbc404f377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.219.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:23:02:89:10:c8:c2:72:20:6d:0f:ab:d4:4d:16:d6:e6:eb:
         75:0d:16:20:f6:c5:23:8d:68:f8:a8:19:1f:66:4a:36:01:85:
         89:7e:3a:46:46:2d:33:c5:cb:e9:c4:20:9c:26:19:62:2d:35:
         55:28:ba:55:9c:f4:5a:97:ca:32:80:b5:ea:c7:bd:07:48:26:
         68:a5:57:05:72:33:e9:1b:3b:5d:2e:83:3b:aa:00:f4:35:95:
         23:e0:23:f1:a7:44:38:6f:5b:ed:2e:74:78:f3:3c:46:12:a0:
         17:d8:80:bd:73:b9:37:dd:57:47:4c:5e:41:6c:20:ed:87:d7:
         9c:79:63:9f:7d:4b:e8:c6:f5:b4:f1:21:90:fc:8c:d1:a0:60:
         e4:ab:c8:76:0e:3b:50:c4:46:5c:f8:2f:e4:e7:7c:e7:92:16:
         af:57:14:44:b4:ee:56:23:d7:67:e0:88:9b:19:0a:14:63:6f:
         4a:e8:39:db:97:ad:8a:fe:a8:9b:eb:0a:73:8d:d5:93:07:a0:
         85:14:e7:b8:13:c3:fc:f0:0c:0e:fb:b7:19:a9:41:83:9b:ce:
         74:0e:82:ac:ad:c3:f5:c4:ac:15:0e:0a:fb:03:f6:94:18:c0:
         e2:8c:11:06:67:71:6b:bb:e6:9d:0b:e5:c2:1e:70:ce:dc:16:
         81:4d:cc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:48 2025 by rpki-client