Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7f1f3909-934d-32ab-bd49-5209ad0fade0.roa
File:                     7f1f3909-934d-32ab-bd49-5209ad0fade0.roa (raw, json)
Hash identifier:          Lfg4P03FvgaX8v+EEnQBAZwpg+g75Ko7VsNl3e31KL0=
Subject key identifier:   01:77:E9:A9:51:71:9F:B0:D2:56:6B:46:65:C2:A2:D3:C5:23:42:27
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584961B9993CD5214EAF04950020
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7f1f3909-934d-32ab-bd49-5209ad0fade0.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     271
IP address blocks:        209.87.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:99:3c:d5:21:4e:af:04:95:00:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=86781636-b939-4180-bae5-670afe15e414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:60:67:46:b5:1b:6d:b8:34:9c:c0:0f:42:
                    89:40:cc:d7:19:ec:e9:39:7f:ef:5d:87:18:ee:6e:
                    17:8d:b2:55:bb:52:f9:5b:85:9d:dc:9a:b8:43:aa:
                    46:8d:f2:81:9f:23:21:43:1f:b2:0b:59:6c:f5:a4:
                    0f:3f:a6:cf:6b:64:14:5e:58:c7:66:a5:73:53:6b:
                    7f:9b:b3:74:d3:96:6a:5f:66:32:67:fc:6f:c3:da:
                    90:5d:84:e2:5d:84:aa:1d:9f:9b:cd:0d:e6:75:3c:
                    9f:78:9b:77:5f:11:66:8e:4f:4d:3c:27:3b:f1:41:
                    ef:41:fb:ab:bc:3d:a6:62:39:3a:6b:0f:41:22:48:
                    2c:87:1d:f9:33:1c:a0:89:48:11:1d:94:75:a7:84:
                    3b:c2:2f:fa:14:d9:a7:66:cb:b6:4c:2b:72:fd:32:
                    73:c9:4c:8d:70:2a:d7:f9:b3:38:fd:46:6d:12:1a:
                    a8:51:14:3f:5f:3b:07:99:95:cb:ed:0d:8f:32:35:
                    b8:18:c5:82:52:a4:ba:99:c5:a4:f7:03:4a:1f:37:
                    89:12:1f:ba:83:66:db:78:1a:cd:7f:31:c3:04:0f:
                    89:56:ab:c9:fd:ba:33:c8:60:3f:5f:b4:92:3b:67:
                    33:4b:0f:67:15:e0:72:17:fe:78:69:91:fb:ea:69:
                    f7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:77:E9:A9:51:71:9F:B0:D2:56:6B:46:65:C2:A2:D3:C5:23:42:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7f1f3909-934d-32ab-bd49-5209ad0fade0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:72:7d:a4:30:50:83:9a:db:04:65:d7:e4:8a:8b:09:11:4e:
         7c:9c:e8:8e:b7:8b:34:9a:d8:02:86:f7:f8:79:74:e3:a2:c0:
         75:19:1c:e5:0b:54:cf:ff:1e:34:c4:89:28:98:92:ef:91:61:
         68:43:48:67:b3:0a:80:02:7d:2f:ae:89:4d:3f:78:f8:57:7e:
         3d:bf:d7:e6:58:31:49:61:91:db:ba:a4:d8:3a:11:7c:ac:48:
         63:6c:60:5d:68:f0:9a:1a:6b:90:7e:23:67:88:ad:08:2b:79:
         4f:df:c7:57:1b:87:d2:96:5e:da:91:34:4f:94:d5:72:53:cc:
         c1:f9:3f:88:3d:c1:7c:03:5d:67:79:04:d3:c9:18:bb:93:8d:
         20:0d:8a:e8:ca:5f:e4:98:fb:1d:5e:6d:2e:12:48:93:af:6c:
         b4:0e:19:c5:15:d9:52:61:f4:c4:ee:58:5c:14:2d:f0:4a:2e:
         98:eb:47:25:f9:73:5a:e0:98:2c:2c:e3:07:ff:15:5b:51:7c:
         86:ad:fa:da:dd:78:c3:4b:32:e6:52:05:dd:ae:00:2b:95:37:
         8a:26:70:bc:d8:cd:22:91:b3:3e:47:b9:35:54:59:94:80:5d:
         96:93:37:e3:c2:1d:da:56:7f:4d:a7:f7:4c:02:34:60:94:6c:
         a0:2f:fa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:21 2025 by rpki-client