Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/ea922093-a05f-31ac-a654-8250a80f07d4.roa
File:                     ea922093-a05f-31ac-a654-8250a80f07d4.roa (raw, json)
Hash identifier:          rS+gNs+T3AWHD8YMA8E1ZhIn7sfP4UqC503o16NI57E=
Subject key identifier:   B6:FA:6E:8F:42:0D:7C:3E:92:32:AB:B9:87:58:9F:2D:E1:60:A0:19
Certificate issuer:       /CN=e5c2b906-947b-452e-a546-6011e1a0e535
Certificate serial:       010D0C9F43285848F65BF5154F13F84A5D695F80
Authority key identifier: 07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/ea922093-a05f-31ac-a654-8250a80f07d4.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     39941
IP address blocks:        207.231.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:f5:15:4f:13:f8:4a:5d:69:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c2b906-947b-452e-a546-6011e1a0e535
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=7dc5ee1b-834a-4bbd-8600-d31aa8224f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:19:bd:80:bd:9b:77:f9:23:01:cd:18:e6:
                    b1:67:8d:22:75:51:65:56:62:e0:98:e7:4d:f5:14:
                    85:3e:f2:c8:a1:16:e7:08:50:09:ab:49:67:93:cd:
                    71:f7:c2:34:cb:ec:b3:ac:42:8f:f8:f6:a6:b1:cf:
                    37:2b:f6:4c:5e:5b:e8:ef:81:5d:5e:77:9e:82:f9:
                    55:06:2d:b7:a4:12:14:4b:0c:74:7a:82:2a:a1:59:
                    fa:d5:19:ac:de:b5:1d:bb:31:a7:fa:07:d2:6e:96:
                    bc:c3:34:d8:07:ad:c1:47:a4:ed:47:d2:ed:43:55:
                    57:89:ae:96:b3:27:4d:be:7e:4f:fa:e6:58:5a:67:
                    b8:96:50:d0:9f:22:10:4d:fd:b9:4f:8d:0a:11:06:
                    17:94:73:99:9d:84:7c:e5:eb:f2:63:c2:5c:f8:88:
                    70:ba:53:9b:f5:dc:6c:7e:16:b4:41:29:11:6c:97:
                    b2:d4:f3:83:f6:71:43:b7:39:dc:f9:0b:df:16:ef:
                    32:f9:24:fa:23:ba:dc:a4:99:aa:27:e0:31:1d:c1:
                    4b:f7:87:a4:06:5a:02:ba:d0:38:89:cd:53:d2:86:
                    cb:1e:be:00:24:4e:97:b9:9b:a1:9f:60:cd:4e:f3:
                    f7:db:7d:c6:fd:8b:73:aa:d4:ec:be:76:83:1e:e7:
                    b6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FA:6E:8F:42:0D:7C:3E:92:32:AB:B9:87:58:9F:2D:E1:60:A0:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/ea922093-a05f-31ac-a654-8250a80f07d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl

            X509v3 Authority Key Identifier:
                keyid:07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.231.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:42:35:24:30:8b:03:3a:ce:b9:03:34:70:d5:7b:da:4b:ec:
         83:52:de:08:23:31:64:90:0d:42:bc:37:95:6e:dd:ad:d7:6d:
         e3:8c:c3:64:1e:8f:f0:21:7a:ae:03:c1:b3:30:a3:56:9b:5d:
         60:29:38:ad:e8:fd:de:b1:f1:98:3e:a1:ea:f5:87:68:82:77:
         72:1e:e1:aa:a6:7c:97:e9:00:45:52:8b:9b:6f:cc:db:81:0c:
         b1:d7:c4:3a:ae:9f:81:05:c6:ba:f5:12:01:3a:92:1b:6e:50:
         4b:97:37:57:b7:79:3a:20:94:20:be:b3:f9:48:a2:4a:c5:61:
         24:e6:96:7a:ed:ac:9c:31:c1:7a:3d:f1:7e:84:61:f5:db:81:
         af:13:c5:2d:33:5e:55:95:61:2d:ac:c5:6a:7f:e7:1d:f4:3e:
         ea:0f:02:c6:5a:72:99:d6:05:9a:87:50:90:82:52:17:9f:30:
         85:6d:2c:d6:94:6e:fb:a3:60:f6:d6:91:97:ad:e2:80:34:86:
         39:59:fc:46:4a:c1:f6:2c:79:99:81:57:8d:33:30:bb:f8:a7:
         45:32:1c:dd:ad:1e:b5:62:d8:35:59:48:3c:54:d1:5e:66:20:
         af:9a:6b:66:cc:f3:05:e5:d3:3a:4d:9c:ec:a2:e2:86:33:b3:
         d1:3c:30:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:42:13 2025 by rpki-client