Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/736c334c-c5ea-3de0-b859-5e0b23955eec.roa
File:                     736c334c-c5ea-3de0-b859-5e0b23955eec.roa (raw, json)
Hash identifier:          hqbqm/iAETjV8vJ/p6He/0ZreyCF2UwsErHTQjSAgOE=
Subject key identifier:   98:BF:BD:CE:DF:06:FA:DC:D9:42:A7:D8:39:92:FF:02:C8:B6:88:50
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F4328584957F40B07C5AA8F2D46002140
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/736c334c-c5ea-3de0-b859-5e0b23955eec.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     27220
IP address blocks:        209.104.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:0b:07:c5:aa:8f:2d:46:00:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=39b68020-c7fc-4887-8853-91df8bc3c33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:5d:0f:b0:d6:22:a4:a7:d7:36:fa:10:5e:
                    2e:5f:ad:95:bd:49:e1:b0:0d:f3:3d:4b:99:1e:09:
                    86:ec:ff:9d:8f:dc:39:04:77:15:6a:00:53:45:42:
                    2a:7a:c3:b2:ac:fe:9e:13:e7:66:00:55:48:fd:fb:
                    06:32:2c:f1:86:b5:06:05:64:6c:4b:44:cd:5c:81:
                    33:fe:3f:0d:6c:ca:27:6a:4c:83:47:8b:c8:55:ec:
                    a5:6c:ac:3c:d0:da:30:ed:9c:24:bc:30:4b:53:f5:
                    bb:ff:ca:c0:5d:85:c0:81:c0:35:e5:aa:71:2b:10:
                    0a:25:04:5f:b2:75:b1:83:e5:d5:3f:a5:c9:ae:31:
                    32:b5:14:94:e1:54:d2:ff:f4:05:0e:9e:04:01:58:
                    3c:1c:6e:4f:bb:da:2e:06:11:9d:9e:7c:72:b2:e5:
                    81:3a:df:6d:5f:39:b5:38:47:d9:62:29:6f:3a:7e:
                    b0:b3:36:48:5b:01:83:a2:ce:9f:a8:15:c2:b1:f9:
                    7a:e8:71:93:c0:f7:c1:db:27:78:d7:61:70:ee:73:
                    b5:62:3b:30:75:b2:be:9a:21:00:85:d1:80:9d:20:
                    3d:1c:48:e4:e8:0a:cc:51:47:cb:67:48:22:40:22:
                    c2:ea:fd:09:03:73:99:06:20:b1:3b:45:ae:33:4a:
                    39:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BF:BD:CE:DF:06:FA:DC:D9:42:A7:D8:39:92:FF:02:C8:B6:88:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/736c334c-c5ea-3de0-b859-5e0b23955eec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.104.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9e:85:9c:9d:41:85:5d:02:75:48:13:af:bc:b6:46:c5:b3:
         03:c8:aa:f8:3a:28:f6:93:00:4a:17:a7:b2:a2:3e:45:8e:40:
         37:95:60:46:79:77:d4:2c:f2:a2:8f:31:70:c5:b6:04:6c:01:
         c5:6a:43:d6:d1:d0:e3:66:5e:f8:0a:ae:82:fa:44:9b:12:f0:
         08:b3:48:c1:0c:4a:b0:d8:e3:f4:0d:b2:88:a4:64:86:5e:a1:
         10:5f:1d:d0:cb:65:16:12:a9:35:f8:5e:95:0a:10:05:11:02:
         47:0d:d9:e0:96:e7:94:af:9b:56:9e:36:0c:93:be:5a:c6:7a:
         52:76:46:4a:9d:7b:23:71:96:69:01:f9:12:25:2f:3f:4c:1f:
         c5:7d:75:25:8a:f4:cf:e4:2e:7e:74:89:b6:52:aa:1b:85:33:
         24:b5:c6:b8:84:07:a8:6c:c0:98:bf:6b:2c:1b:14:1b:79:55:
         6a:24:b4:4b:62:e9:a5:f7:9c:27:2b:15:93:50:61:dc:cf:3b:
         d5:af:62:34:82:fe:56:bc:4b:85:5a:4c:04:73:e5:4a:17:84:
         e2:3b:58:58:fb:2e:de:e8:be:7b:9e:39:48:f4:00:38:69:12:
         8a:67:ee:f4:eb:37:65:e6:bf:d2:7d:75:e1:27:30:be:8a:e9:
         7d:88:7b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:45 2025 by rpki-client