Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/32f48392-9704-3164-bbdf-7267e0cda60f.roa
File:                     32f48392-9704-3164-bbdf-7267e0cda60f.roa (raw, json)
Hash identifier:          COdmhM+inRoLK1KtMmfFcwe79jkkOshguTY/TtXQ/R8=
Subject key identifier:   F4:99:61:72:EA:4A:68:06:04:B6:71:24:26:2E:13:BD:10:6D:9E:62
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285848C58171415A667EF161585F00
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/32f48392-9704-3164-bbdf-7267e0cda60f.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        209.107.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:71:41:5a:66:7e:f1:61:58:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=92d7e5c7-b35c-4992-aa5e-9f39f427dd66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:9c:b6:d4:06:5b:26:50:de:b8:87:80:34:
                    6a:9c:f1:29:43:af:09:a1:0b:d0:95:e4:47:f6:38:
                    a1:c4:c9:31:d8:e0:07:86:51:6c:49:45:ee:e1:28:
                    e6:62:aa:7f:de:ed:c9:94:b8:fc:b5:f8:c3:73:1a:
                    b5:e0:83:25:31:16:50:d4:4c:f3:65:0b:02:31:fa:
                    74:35:00:d0:0e:16:26:3e:f0:b8:31:2b:01:2e:b9:
                    8b:22:cd:5a:bb:2f:b4:16:bb:45:43:66:87:69:41:
                    71:a3:71:62:e8:2d:04:fe:c2:40:2e:b6:ae:a3:52:
                    8a:0a:74:26:85:7b:ec:d0:0d:1f:3f:9f:40:ac:c8:
                    56:d1:58:18:85:74:70:b4:7f:8b:93:07:f5:08:3c:
                    fa:f5:3e:bb:4b:ef:af:56:3e:2c:5f:30:86:4e:54:
                    5f:fd:9f:ac:93:14:c5:38:40:a9:77:b0:93:23:29:
                    95:cb:cb:cd:a2:06:8d:41:f4:cc:cf:42:a5:2e:64:
                    a8:51:61:87:6e:92:b3:45:d6:bf:76:df:cd:34:e3:
                    32:f2:c2:c9:cc:bf:75:62:17:9c:41:94:29:c3:e6:
                    16:e9:9d:22:f4:16:9a:9b:d2:f9:e3:cc:c5:d0:5d:
                    96:d0:49:5a:2c:7f:31:9d:61:c5:c3:7a:fa:9d:cf:
                    1d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:99:61:72:EA:4A:68:06:04:B6:71:24:26:2E:13:BD:10:6D:9E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/32f48392-9704-3164-bbdf-7267e0cda60f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d8:63:01:ec:3c:18:d0:c3:11:9f:74:2f:92:66:97:2d:77:
         92:0e:4e:e1:4f:9d:49:ed:d5:80:f0:ae:a5:e7:a8:5e:29:9d:
         71:d7:60:69:ea:a2:47:7c:93:33:15:76:c0:a3:1d:f2:55:e2:
         9b:60:85:f4:aa:b7:c5:2f:ae:ec:03:3e:ce:c5:ae:ee:bf:24:
         a0:4e:c0:94:fa:a5:4c:9f:80:e4:23:ab:ab:c6:d7:2d:2b:43:
         00:c2:28:0a:99:df:89:53:06:bb:5c:8e:75:c4:0a:3d:b6:4b:
         ba:3e:5b:58:ec:55:27:73:e7:fd:33:78:40:dc:8a:c3:6a:fc:
         0b:44:9e:e1:7f:88:64:d5:dd:de:28:02:12:ff:64:74:89:3b:
         c4:5c:ed:a2:ff:66:91:df:07:2e:fa:a8:db:8a:64:95:f2:f6:
         13:cb:64:b3:df:72:f0:7c:2c:59:0e:c2:0e:aa:76:6f:34:c3:
         73:04:51:28:e7:cd:f4:87:4b:44:a4:75:6d:ac:23:fb:fa:9d:
         a3:64:e2:b1:fa:d4:b9:44:7f:8f:fb:ac:7d:63:e5:2d:ca:5f:
         4b:ac:97:4e:6f:1a:70:d7:8c:a1:97:7f:82:de:98:08:9a:f6:
         bf:56:72:4d:bf:cd:11:42:89:e9:78:17:23:17:10:9f:01:3f:
         4d:ca:0f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:39 2025 by rpki-client