Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/e7ee6420-4b9a-3570-94a6-f16a25260505.roa
File:                     e7ee6420-4b9a-3570-94a6-f16a25260505.roa (raw, json)
Hash identifier:          4ag+JSJicvvknCwUjE6bp0EliP2XhakQ6jFlCJhWa90=
Subject key identifier:   AA:B4:4B:DC:A0:D4:87:69:69:79:56:35:FF:41:92:8A:48:6A:0A:50
Certificate issuer:       /CN=88390227-7474-42cc-ab77-86c936657096
Certificate serial:       010D0C9F43285848EF615350339682C3B3034FE0
Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/e7ee6420-4b9a-3570-94a6-f16a25260505.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     17157
IP address blocks:        207.230.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:53:50:33:96:82:c3:b3:03:4f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88390227-7474-42cc-ab77-86c936657096
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=c507d0bd-104a-451c-b028-02bde0bffe62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9c:00:ab:9e:88:33:a5:61:66:d3:17:7a:5f:
                    bc:7b:6b:e6:3d:61:7d:7a:ae:d9:82:37:1b:21:07:
                    ae:7c:c1:f5:83:24:f2:00:c7:b2:10:f8:a9:0d:29:
                    99:c4:eb:34:04:6f:59:06:0b:db:51:6e:93:95:49:
                    b9:c4:ce:92:b6:4b:8a:97:84:90:87:08:94:51:91:
                    31:91:66:e0:f0:62:0b:17:93:b5:97:7d:40:66:79:
                    ee:50:5b:f8:e5:e5:a2:d2:40:45:a5:52:c6:a5:44:
                    95:92:43:b3:8f:87:c1:70:8e:c9:6e:ee:7b:fe:20:
                    d4:0c:23:a9:e4:72:9f:93:f6:bb:ae:41:8a:26:c0:
                    50:bb:98:61:3b:5b:8c:c6:5f:96:5d:30:ae:d9:49:
                    1e:85:05:10:8f:ba:aa:4b:bd:57:d2:b3:19:48:6a:
                    93:8f:1f:ef:df:cc:fb:e6:c9:57:a6:9f:a5:a6:3a:
                    a2:5a:cb:b1:39:3a:b7:1d:bf:76:dc:97:80:64:7d:
                    e4:a1:4d:94:3e:27:81:d8:2c:79:fb:ff:e1:0d:c5:
                    2e:e8:a2:f1:47:47:e4:fc:28:d1:79:5e:00:f4:97:
                    44:8c:a7:84:a7:d9:43:3e:be:44:97:cc:81:00:25:
                    b6:48:77:2d:5e:ad:46:e7:50:a2:21:da:b8:c9:2e:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B4:4B:DC:A0:D4:87:69:69:79:56:35:FF:41:92:8A:48:6A:0A:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/e7ee6420-4b9a-3570-94a6-f16a25260505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:fd:df:6e:e5:c3:f4:33:ef:3b:3b:71:7b:32:0e:2c:c7:63:
         cb:64:f0:8f:7b:24:a9:3d:d4:f8:84:77:8c:50:91:aa:db:1d:
         58:40:4f:ee:9b:89:08:cf:4a:42:dd:c3:a5:bf:8c:f0:8e:21:
         07:eb:02:5d:23:87:1c:33:d3:7d:f6:4c:7b:b1:38:98:3c:1c:
         7e:dc:ff:bc:85:03:84:9f:0f:5c:d1:18:b1:26:3c:72:43:d8:
         5d:25:ab:3a:2f:f9:39:9e:68:eb:48:df:c9:dc:26:77:db:d0:
         02:36:6b:36:3c:ab:6c:d9:f2:d7:0e:7d:69:aa:9f:4e:ac:0a:
         20:67:b0:5e:88:fd:7e:7c:c2:7e:79:a7:9f:c6:b0:7b:eb:15:
         42:6c:78:f4:5f:d5:41:88:29:6e:a4:4b:25:e4:fb:70:f0:e9:
         f2:87:18:61:b2:35:e8:2f:79:fd:58:21:66:cb:44:14:4c:dc:
         ce:e5:41:87:87:06:db:17:70:80:a7:10:70:0e:ce:47:f7:67:
         2b:22:df:63:6c:6a:86:82:5c:3e:41:d5:c1:55:bc:4b:1d:70:
         70:24:bf:d8:ab:4b:c3:26:b3:e7:d8:9e:40:ec:a3:99:4b:d3:
         37:7e:f7:46:32:87:ee:34:79:b1:ef:cd:59:58:a6:e1:b9:4c:
         62:62:78:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:59:20 2025 by rpki-client