Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/341f070d-dba9-30db-90c8-414205e52d39.roa
File:                     341f070d-dba9-30db-90c8-414205e52d39.roa (raw, json)
Hash identifier:          MVehquEzF+MrJP/j8Z8rtjZ8EqiaYM7yILCY6UgXuQ8=
Subject key identifier:   BD:C4:B4:2E:D9:EA:00:1F:6C:0D:DC:62:8D:6C:D4:AC:A7:E4:DC:47
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858495ABEE57F856F90C4DB4C0080
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/341f070d-dba9-30db-90c8-414205e52d39.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     9009
IP address blocks:        67.207.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e5:7f:85:6f:90:c4:db:4c:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=d05a26c3-b040-4890-bc02-532c24af595d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:24:1e:69:4b:63:b7:ea:a9:fb:98:08:aa:
                    b7:9d:64:93:34:e3:bf:6c:de:ac:ac:a3:b8:93:09:
                    05:32:6c:ed:37:c5:7f:c9:75:ec:d2:88:14:22:24:
                    01:23:67:d2:cc:47:5a:0e:0c:df:95:68:8e:cb:47:
                    87:40:f4:5f:b5:47:9a:09:ee:a5:a3:33:88:5a:70:
                    b1:8b:0b:36:d7:20:d8:ea:6f:21:47:f7:ed:39:08:
                    a2:61:94:08:b7:3a:32:5d:a3:ae:e5:bb:07:6e:d8:
                    48:c3:3c:6c:fa:da:73:37:d7:f8:3d:aa:e9:75:b0:
                    2e:7c:3c:08:e1:4d:0d:98:f9:d8:9f:34:2f:83:4a:
                    3c:63:cd:91:be:e7:1d:47:0c:c7:62:72:3c:78:7a:
                    50:6b:7b:2d:e1:26:b6:6a:5a:fe:0e:48:af:ce:72:
                    9e:c9:a5:97:64:da:95:06:70:43:1a:c2:1d:db:e5:
                    e9:05:3a:9b:49:4e:e0:be:b0:5d:1b:6f:40:2f:4a:
                    7c:80:c3:0c:e3:5d:7c:c9:8b:57:8b:ec:44:59:33:
                    bf:02:8b:b4:a7:fd:ca:26:65:fa:64:3b:e6:5e:d3:
                    65:31:2e:c8:87:b6:50:0f:a0:c3:60:74:bf:33:7b:
                    29:93:74:bc:8e:91:2a:22:74:c2:db:f5:34:df:b9:
                    c9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C4:B4:2E:D9:EA:00:1F:6C:0D:DC:62:8D:6C:D4:AC:A7:E4:DC:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/341f070d-dba9-30db-90c8-414205e52d39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.207.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:4d:32:0c:78:79:2e:70:d2:a8:aa:c7:ac:35:2f:ad:ab:58:
         aa:46:9a:b5:a4:84:34:ab:cb:5b:8b:11:de:63:6a:2c:5e:a0:
         e4:16:ac:d0:4e:6f:68:3e:70:7a:90:a6:ca:b4:19:ec:65:54:
         bf:bb:8d:3e:7c:e0:8c:9e:4d:73:46:28:33:48:80:84:30:c9:
         e4:6a:6c:b6:fd:4d:2f:94:9a:58:ae:d4:c3:4c:18:ac:22:4a:
         e2:9b:c5:14:e5:4b:14:1f:64:bf:be:80:8e:ba:cf:46:7f:30:
         5a:33:e3:23:16:cc:eb:ae:6b:dd:83:14:96:e3:ac:5f:10:41:
         11:3d:59:06:73:e1:9c:79:04:ea:7b:d1:09:72:08:47:cb:9c:
         dc:11:cd:50:e4:6c:a1:53:57:60:e1:b8:b2:23:87:2a:63:53:
         9f:5e:12:b1:91:30:b5:e9:16:d8:0c:44:c0:81:f3:e3:21:ba:
         36:a9:bb:9a:49:fe:7f:d0:2b:91:7d:99:04:fa:d7:b1:ec:13:
         82:94:5d:e4:3f:ab:3a:58:7e:e7:75:a0:a2:e9:f9:75:9c:1a:
         5b:db:93:9a:18:93:08:80:58:48:64:28:83:e8:e6:8b:33:0b:
         19:74:de:72:32:4b:df:71:16:45:8e:03:17:3d:26:78:a0:55:
         a8:64:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 07:15:05 2025 by rpki-client