Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/22bf4cfa-b258-3a9c-a0fe-c5f0f0aed786.roa
File:                     22bf4cfa-b258-3a9c-a0fe-c5f0f0aed786.roa (raw, json)
Hash identifier:          6LmqmndI8FHczXfcKg95kaSbdrjmC9iJIBMS7J6mhb4=
Subject key identifier:   B2:87:71:00:F0:26:3A:D2:C9:79:1E:5C:84:15:2A:0D:70:B9:C2:FE
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285848C581711231177E1981034080
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/22bf4cfa-b258-3a9c-a0fe-c5f0f0aed786.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        209.107.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:71:12:31:17:7e:19:81:03:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=56f5d36c-fc6a-4656-a74d-0a60a1dc3233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e3:34:c1:60:ac:af:cc:6b:8f:a6:86:d5:3b:
                    72:07:b1:64:bd:0c:78:3b:dd:d5:32:7c:b3:63:ac:
                    0a:61:49:d0:34:6f:d4:04:b3:34:8e:18:80:45:4f:
                    91:da:e9:77:8c:51:55:78:a4:42:77:c7:54:11:fd:
                    27:f6:64:b1:f9:e0:7f:54:52:e1:cd:45:5c:1f:5d:
                    4b:17:27:7e:10:6a:b9:90:d0:b9:cf:5a:55:4c:ac:
                    9a:34:1e:af:e0:9a:41:7a:43:4e:7a:63:01:0f:42:
                    75:b1:8c:c0:fa:34:d8:c3:84:6a:f3:33:cb:95:60:
                    77:cb:37:f8:dd:02:f1:bc:12:11:c2:53:1b:67:4f:
                    64:7f:06:01:f5:e4:75:c9:a2:31:84:cd:77:16:97:
                    3f:0a:56:26:55:45:e4:c2:37:1e:c5:6b:87:1c:4d:
                    d9:bf:eb:c5:5b:08:c7:28:d6:bb:c6:40:93:e0:b5:
                    ed:8f:d9:be:01:32:39:8a:91:23:2a:1f:7c:fb:cc:
                    bb:36:98:4e:57:f9:fd:a2:81:34:5d:6d:20:02:c0:
                    4b:94:c7:80:42:7b:35:d8:56:0a:d5:15:21:72:16:
                    b5:9b:80:3d:59:45:f2:40:6c:5e:a3:46:9c:89:e0:
                    f9:d3:2f:cc:6b:7d:9a:b3:1e:e6:fa:e5:9a:e6:08:
                    ae:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:87:71:00:F0:26:3A:D2:C9:79:1E:5C:84:15:2A:0D:70:B9:C2:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/22bf4cfa-b258-3a9c-a0fe-c5f0f0aed786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:19:b8:94:77:fe:ab:78:e2:1b:c3:98:e3:70:8e:d3:d2:20:
         55:61:bf:09:59:1c:99:cf:f3:3c:7e:cc:9d:0c:80:1d:1a:ad:
         89:84:4b:f1:55:d6:09:69:54:bc:ed:e7:a7:4c:96:48:4c:29:
         47:ac:02:83:05:e4:be:4e:e3:29:d6:11:ac:71:ce:51:9f:b7:
         57:dc:c1:7b:a4:a1:24:68:e3:c1:79:32:71:c7:73:a0:9b:ec:
         57:14:38:69:7c:e2:3b:50:f1:eb:72:76:66:63:2e:c0:fd:30:
         56:f8:6e:25:f6:e3:e2:fa:6e:58:7f:d2:89:15:d5:0c:a8:d9:
         c8:c7:3c:4c:c4:95:e0:39:af:6e:12:88:60:0e:6a:3c:5f:64:
         37:32:f4:45:da:d7:98:59:33:40:e7:8e:b5:b7:23:5d:e4:3a:
         6e:b7:eb:3e:23:b5:95:d2:42:22:ed:24:2c:49:86:0b:03:94:
         e9:84:46:f4:48:cc:69:7b:cc:5f:c0:33:f8:42:fa:d8:41:9f:
         36:c9:86:cf:2a:85:d6:ba:a0:2f:57:a5:0a:a2:2d:25:be:19:
         42:81:9d:75:dc:8a:c2:1d:6d:60:cb:bd:e4:5c:c5:ad:b4:47:
         97:50:e5:54:8a:c1:5c:7e:5e:63:4f:22:a6:d1:4c:ae:2f:e1:
         0e:a6:28:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:14:03 2025 by rpki-client