Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fb067cdd-c61c-3be2-9bad-7ef1c90e447f.roa
File:                     fb067cdd-c61c-3be2-9bad-7ef1c90e447f.roa (raw, json)
Hash identifier:          fN1/b9XT175k+o13JDHE3od0bAalfQe4UCPQcmYPmAU=
Subject key identifier:   49:3F:A4:B0:EC:90:97:3F:35:FB:8B:2A:10:74:6B:6F:EA:0F:1A:E6
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848B6261097E68047C4B93B4700
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fb067cdd-c61c-3be2-9bad-7ef1c90e447f.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     852
IP address blocks:        207.102.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:10:97:e6:80:47:c4:b9:3b:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=f75c4b58-3fac-4c0e-adf2-871e42745bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:37:65:10:80:dc:d5:94:2b:42:2c:de:bc:39:
                    3f:8b:70:d1:e7:44:7b:1f:a5:7d:16:86:4b:05:72:
                    45:ca:6f:d8:2b:ff:9a:68:60:a1:ae:77:43:d0:bd:
                    d3:35:83:c2:30:39:1c:7d:91:b6:e0:cf:19:bf:95:
                    c9:59:a2:23:ee:e1:ff:a1:c0:92:a7:fa:65:cd:b9:
                    6f:db:a3:83:a4:22:e9:fa:90:1c:d7:10:3e:6d:9b:
                    1a:9d:84:7a:77:e2:46:b5:67:70:dc:bc:ec:ba:d1:
                    fc:bc:ae:f6:dd:01:f9:29:60:8b:e3:a5:cd:aa:6c:
                    34:5a:c6:dd:fc:da:a5:4b:88:54:d3:ee:f5:33:d2:
                    cf:ec:21:9f:ee:d3:47:9a:60:e1:b2:79:80:13:2e:
                    ea:c2:8b:fb:f8:f4:a2:4f:a0:4d:69:88:bd:38:f7:
                    ef:13:11:f0:5c:d6:32:80:00:3d:61:a9:8b:f3:3d:
                    e1:de:f7:d4:3f:a7:86:29:e7:c8:83:d9:09:07:11:
                    44:8d:ed:cf:72:cc:99:4c:0d:a4:5b:69:c2:42:76:
                    61:fd:b1:48:b3:aa:b8:85:e8:ff:9d:7c:48:b1:bd:
                    b1:2c:d2:ec:43:d0:56:1b:3f:da:97:e2:e9:5c:28:
                    b9:f1:78:62:18:47:a0:47:d4:5c:75:f9:17:08:0a:
                    c7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3F:A4:B0:EC:90:97:3F:35:FB:8B:2A:10:74:6B:6F:EA:0F:1A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fb067cdd-c61c-3be2-9bad-7ef1c90e447f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.102.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:36:f1:51:f2:df:a0:b3:5a:5f:10:02:99:95:bb:18:8a:04:
         76:76:4e:a4:f4:7c:2e:11:84:01:2f:ae:35:af:b6:97:8b:39:
         e0:17:a0:2f:d9:75:fe:ab:9e:2a:7b:5d:68:ad:9c:40:24:c2:
         31:d9:bb:0f:1f:b3:1d:65:63:05:4c:f5:c7:25:5a:6f:17:dd:
         f4:87:ca:17:f9:a0:73:a2:e0:a4:66:1a:97:cf:8b:e5:de:54:
         71:05:b0:0e:41:cf:fd:3c:99:0f:69:42:2a:0e:35:af:1c:64:
         d4:59:3b:f7:5c:ce:7f:41:bf:c2:c2:c5:ba:96:f4:72:f8:ac:
         d5:7a:a9:0c:4b:d8:8e:26:5c:3e:bd:8d:43:ee:ec:e0:6f:9f:
         0a:48:f4:54:e5:4e:69:bc:5f:28:18:ac:19:11:39:ec:68:78:
         9c:78:48:d8:84:d4:5e:ab:4d:b2:d2:0b:c1:6e:40:0d:07:5c:
         5f:a8:39:25:6b:ce:1d:93:d1:2e:47:cb:f9:a9:15:25:0a:a9:
         2d:56:86:51:fb:56:e2:f6:6b:d3:2c:98:ad:86:00:a5:06:15:
         b7:20:7a:ab:61:65:51:40:a1:3d:84:bf:d9:da:04:3f:1e:83:
         52:46:c8:70:6f:9a:25:77:6e:0b:a0:88:0d:a8:0e:24:50:2e:
         98:83:86:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:29 2025 by rpki-client