Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/87c18001-5e2c-3f8c-8137-d60bdacd9c38.roa
File:                     87c18001-5e2c-3f8c-8137-d60bdacd9c38.roa (raw, json)
Hash identifier:          euDK3xxoOXPHmbx9XS6AjkPUWvEjOPKxlninnhSC5Hk=
Subject key identifier:   ED:C2:CD:DB:F5:B1:31:85:9D:40:EC:EF:FF:27:2A:28:F3:57:C9:A8
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848B62610AB5EEA4694DC455640
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/87c18001-5e2c-3f8c-8137-d60bdacd9c38.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     852
IP address blocks:        207.219.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:10:ab:5e:ea:46:94:dc:45:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=b0d07dae-af68-4a38-b9e7-6bf0ea99ba41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:f7:92:a4:5f:04:8a:88:ab:9b:47:21:9a:
                    cd:a0:91:d5:e8:25:74:a6:e0:68:16:7c:c7:fd:30:
                    49:27:8d:da:20:ba:08:a0:39:6f:6c:bc:8d:30:29:
                    7a:70:0b:07:44:fa:2b:15:9a:4e:6f:47:f2:76:56:
                    0c:66:f3:5d:16:1a:85:42:ea:af:1b:3f:bd:fc:19:
                    54:fa:55:04:4e:9d:e9:50:4e:ca:f4:97:d4:d5:d8:
                    87:c4:a2:62:12:a8:14:fc:b6:85:77:49:59:d8:ed:
                    c3:ad:30:bd:91:6b:3a:44:2a:47:5d:04:f5:eb:19:
                    8d:89:cd:d6:b4:ab:59:cf:0c:72:4e:c5:24:42:e4:
                    fc:f8:5d:f3:32:3c:12:60:80:41:81:88:b5:0a:57:
                    a2:e3:36:33:54:44:79:dc:35:cc:f8:54:04:af:48:
                    5c:82:39:cf:ed:c8:98:ca:cc:ac:86:4c:1b:51:61:
                    dd:e3:09:31:b6:06:a1:06:7c:f0:88:be:27:5c:cd:
                    7f:fb:f9:25:e1:bf:a5:e1:2a:69:0c:93:ae:53:15:
                    f7:63:39:26:5d:7a:5a:52:da:b9:f5:8c:3a:40:e3:
                    a7:5f:77:77:a4:43:a3:d4:d1:74:6d:03:06:52:d2:
                    7d:e2:c2:60:45:74:a9:ea:a9:5c:17:51:61:50:ce:
                    d3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C2:CD:DB:F5:B1:31:85:9D:40:EC:EF:FF:27:2A:28:F3:57:C9:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/87c18001-5e2c-3f8c-8137-d60bdacd9c38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.219.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:3e:e8:2a:6b:ac:9d:92:1c:c0:c4:8a:11:17:81:6e:48:a2:
         6c:91:94:49:e4:56:15:e4:dc:b9:3a:24:ae:ca:2a:0d:b6:66:
         ae:01:1d:bc:12:d7:b0:a2:04:e3:bd:24:56:d5:0f:7a:ac:c7:
         40:80:e3:b9:61:07:25:8c:4b:5b:f0:44:21:7c:73:68:5f:f7:
         a2:f7:69:a7:9b:37:4f:6f:4e:58:85:a4:ac:a7:18:00:5e:91:
         76:c5:49:d7:ee:25:ef:71:74:73:83:d5:e5:de:1e:c0:ee:5f:
         96:a9:b5:66:a1:31:ed:c8:4d:42:09:d7:25:de:2c:42:9d:ca:
         b0:05:d1:af:c6:0f:0d:ef:9d:4f:d1:58:44:31:a9:0b:ff:7b:
         f2:b5:86:09:e2:9f:33:09:e0:d6:6f:99:cd:6a:cc:d9:5b:3a:
         cc:51:4c:2b:df:83:b7:79:bd:66:3c:49:6d:58:b3:3e:e9:c4:
         ff:5f:92:d9:4b:ab:44:93:27:19:e4:a9:e9:6e:93:9a:a2:8d:
         97:d7:e7:fa:32:ca:00:da:3e:b6:35:21:76:10:d8:a4:cb:15:
         38:d3:2b:32:76:e0:2a:dc:54:e5:8f:13:a5:ea:ee:80:76:89:
         93:d7:f3:5d:46:1e:78:cc:b7:72:96:0f:a8:90:02:e8:36:0e:
         a7:2a:a5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:00:56 2025 by rpki-client