Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ed1e1542-18a5-3490-9ff4-59f63b39eb9f.roa
File:                     ed1e1542-18a5-3490-9ff4-59f63b39eb9f.roa (raw, json)
Hash identifier:          JJyjrEN7rJUYCsuPUGvAf8TOWocXj+oysu7D3c2vCr8=
Subject key identifier:   AD:65:9A:81:5E:58:04:1C:CB:FD:B5:84:6D:53:29:B4:34:72:0B:42
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285848C582186C71742635D123BA00
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ed1e1542-18a5-3490-9ff4-59f63b39eb9f.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        209.107.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:18:6c:71:74:26:35:d1:23:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=a6837817-366d-45bf-8cb6-b944677a88f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a3:68:18:43:13:27:8f:72:d2:52:cc:dd:84:
                    ba:83:3f:af:01:c0:9c:d8:68:6f:a4:ca:d8:f7:89:
                    dd:43:b5:d4:cb:2d:82:4d:e3:68:52:c4:dd:c9:b8:
                    9b:1a:b4:e8:81:21:c3:3e:31:78:60:8c:89:da:13:
                    6c:a6:23:f9:c8:b9:e8:4e:ba:88:ff:82:89:bb:19:
                    a8:f8:a9:15:e2:10:e5:26:12:7b:ae:68:7c:be:af:
                    fb:3c:0b:be:47:2c:47:ea:f1:94:42:f8:8c:d1:1a:
                    35:6c:fb:03:6c:40:c7:b1:31:16:9a:69:99:e4:22:
                    ad:be:d2:d9:1b:7c:ab:3d:ca:82:5e:4d:68:5c:4c:
                    bc:b8:8f:a3:9b:7c:29:39:02:62:f5:1e:8a:94:f9:
                    8e:ed:0d:5f:f3:c7:5f:ca:b2:8d:68:a9:57:f3:20:
                    5e:9b:ba:2f:9b:df:17:a1:c2:85:6f:2f:e3:0e:51:
                    fa:77:84:57:92:ed:29:88:5d:8c:fd:8d:4d:b8:30:
                    3b:94:6a:c3:d1:a6:8c:04:d1:f4:2a:3d:42:cf:70:
                    69:ce:53:06:e2:59:4f:76:31:b6:cc:dc:a2:64:03:
                    36:21:de:fd:1a:ad:cf:7a:4b:ff:31:51:e7:d6:66:
                    8b:b9:4f:40:c0:b7:ed:12:99:4c:a1:53:25:ec:da:
                    51:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:65:9A:81:5E:58:04:1C:CB:FD:B5:84:6D:53:29:B4:34:72:0B:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ed1e1542-18a5-3490-9ff4-59f63b39eb9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:c4:d8:ec:ee:b5:db:bc:93:6e:fb:c3:f9:30:18:21:81:e8:
         51:9c:63:b4:13:6f:b2:19:1c:ad:41:dc:d9:fe:72:51:08:7c:
         93:1c:2e:55:5f:e2:d7:1d:bf:58:f3:07:59:6a:be:aa:c2:53:
         ed:2c:89:dd:02:e1:b0:7c:d8:09:c5:f4:91:5e:83:14:7a:8b:
         0f:45:6a:4f:4c:ac:00:69:9d:d7:44:57:6c:d8:60:38:8f:17:
         17:3e:ff:96:a9:21:be:19:a8:69:f6:b3:3a:56:9c:1a:5d:9f:
         51:41:4e:58:23:30:ce:21:5b:9d:89:62:00:85:15:49:03:ed:
         5d:60:6e:2d:4f:a7:52:a7:f7:de:9b:27:01:2a:ea:e4:fe:dc:
         0b:1e:26:2c:0b:ab:36:42:56:fb:a7:90:ec:aa:9d:26:78:37:
         2a:de:3c:7b:e8:ca:37:f9:e4:5f:f1:74:7a:a8:62:63:72:fa:
         bf:77:c6:a7:22:be:c1:a8:1a:64:0f:fd:fa:8c:8c:d7:c4:60:
         50:fa:ad:4b:3d:1b:c9:26:06:fb:b8:a6:86:0f:11:49:2e:f0:
         1e:a2:17:41:bb:b5:5c:9d:2b:a0:4b:db:ba:12:ab:ba:dc:ff:
         65:b2:d5:e2:70:35:ed:4b:da:8b:64:69:bd:1c:a0:da:6f:52:
         2d:03:8c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:00 2025 by rpki-client