Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f4208e21-9ba8-37ff-bfff-16ca1827a50a.roa
File:                     f4208e21-9ba8-37ff-bfff-16ca1827a50a.roa (raw, json)
Hash identifier:          6cPiW7GCJeGjIrnEgUjflbEE61nsuAUmUCjl56Q5n8c=
Subject key identifier:   7B:9A:C9:70:9E:37:9D:BC:04:E2:69:4C:59:98:FA:A4:4B:AE:2D:79
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848EF61654CD7F13B33C0A61500
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f4208e21-9ba8-37ff-bfff-16ca1827a50a.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     398919
IP address blocks:        107.144.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:65:4c:d7:f1:3b:33:c0:a6:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=d603b6ae-f779-4dd5-bb7a-ed82712a3ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3e:ce:af:31:d6:30:8c:16:27:2f:8a:1a:4a:
                    50:35:00:cb:19:17:18:82:77:1e:27:59:11:03:49:
                    1f:43:ff:7b:c1:cf:92:30:02:fb:98:6b:49:64:94:
                    80:bc:49:7d:bc:3f:e5:76:05:a0:48:0e:c7:03:e1:
                    ca:31:71:a3:b3:d5:d5:7c:9c:ad:5d:a7:18:85:38:
                    4f:71:7a:86:e8:e7:8a:f3:d7:4b:ff:42:b5:57:5f:
                    57:de:91:a1:83:e8:b0:a6:da:ca:d3:12:36:7f:09:
                    eb:22:b8:58:f6:5e:a3:a7:dd:c0:be:12:55:8a:94:
                    5b:16:20:58:59:ba:a2:ab:07:cd:6b:7f:27:87:a7:
                    cf:31:19:a3:a5:06:40:60:74:08:90:2f:a3:54:21:
                    8e:bb:26:4f:ce:66:ea:34:da:33:0d:da:27:ee:dc:
                    e2:58:21:56:07:58:3c:ce:dc:d9:32:f6:7c:18:5f:
                    54:e1:fa:da:43:e6:eb:41:fd:9a:7b:dc:fb:16:d9:
                    78:91:79:a4:85:04:d8:19:83:0a:c4:b9:be:c5:ff:
                    a8:eb:51:8c:f7:61:c7:fe:d4:24:2c:a6:22:0c:17:
                    c5:37:d1:7c:97:95:fc:ca:07:73:e4:37:f2:42:d0:
                    3a:33:10:9e:c0:00:2b:f1:73:75:3c:48:27:34:7a:
                    b2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9A:C9:70:9E:37:9D:BC:04:E2:69:4C:59:98:FA:A4:4B:AE:2D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f4208e21-9ba8-37ff-bfff-16ca1827a50a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.144.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ee:b7:72:9b:c2:15:a8:5f:e2:2c:19:87:52:8b:98:70:4c:
         9d:43:0c:71:33:15:1d:10:6e:67:85:94:9b:13:9b:2c:83:a0:
         ed:24:5f:af:4e:dc:7e:8e:cc:71:d9:ed:1d:f5:b0:31:48:d9:
         b7:e1:78:11:c3:fc:81:c8:34:36:45:f3:20:6e:cc:77:a5:dd:
         9e:31:9e:02:38:98:56:c6:36:0e:10:b6:a7:7f:65:7b:8b:d6:
         8a:cc:ec:e6:7d:38:79:c3:19:33:ac:5c:a3:5a:d2:45:a2:58:
         e9:7a:5f:fc:50:83:1b:3c:05:ed:12:6c:f6:7d:2a:75:3f:7b:
         41:34:aa:bc:88:e8:fd:4f:ba:79:f0:df:a8:d8:1b:4d:c7:44:
         30:03:04:98:7a:71:70:72:cc:e8:09:7d:b9:c3:73:76:03:79:
         6d:12:c5:35:4b:70:e3:f2:db:4c:0e:7d:41:ac:b5:58:06:67:
         06:5b:9f:6d:88:51:87:13:d9:f8:1c:67:84:b9:35:16:49:68:
         48:25:c4:78:a4:05:e5:6e:aa:8a:13:43:0f:dd:96:32:a9:47:
         74:63:76:68:96:e0:74:4f:ae:41:37:d1:b6:d7:dc:57:be:19:
         77:a2:ea:71:54:1d:d4:7d:97:81:34:af:14:b4:a5:85:14:d0:
         a2:8b:2c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:48 2025 by rpki-client