Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/46a5b659-695f-3881-aad8-add0a40b1cd6.roa
File:                     46a5b659-695f-3881-aad8-add0a40b1cd6.roa (raw, json)
Hash identifier:          XOCZou1+ROavsoV7YNMXiJZv0ap0y8k2znIeFPoiGZo=
Subject key identifier:   1F:97:76:DB:D6:63:B8:F8:DE:8F:BA:0E:8F:4C:8A:28:3F:DD:80:60
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F43285849203C129D1101F4107A3193C0
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/46a5b659-695f-3881-aad8-add0a40b1cd6.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     400238
IP address blocks:        207.244.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:12:9d:11:01:f4:10:7a:31:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=ddd9f618-10dd-4f64-9418-6d5b46e83575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f6:24:16:d6:6d:aa:c1:b8:b9:54:8f:e5:4a:
                    e8:e9:4d:7c:9c:2a:0f:7c:31:b7:11:61:77:47:5e:
                    1f:6c:c0:34:70:6d:68:7a:db:a6:7f:fd:df:76:90:
                    44:54:ba:d4:8e:4c:17:4a:19:0e:0d:ff:c8:f9:71:
                    a4:0d:79:10:d5:d6:37:94:c8:fa:e5:3e:8d:0e:24:
                    44:c0:8b:7c:40:5d:11:27:ef:8d:b3:8d:0b:61:b8:
                    1c:65:4c:e1:55:30:fa:ec:cb:9d:1a:68:e5:d3:c6:
                    a9:4c:eb:6b:7f:5f:20:30:3c:36:43:9d:8c:e7:b1:
                    8b:b7:8c:a1:12:53:1a:96:ef:6f:c2:20:81:64:46:
                    7b:0f:27:49:d0:81:27:1c:f6:4f:62:cd:dc:ea:da:
                    c6:7d:09:58:65:6c:63:2b:38:0b:4c:7e:f9:36:9d:
                    8d:bb:4b:9d:be:39:0e:e0:6f:f4:b8:b0:dd:b5:44:
                    5b:d8:a7:87:78:75:fe:df:a3:40:f8:57:a6:27:f6:
                    b1:e7:f2:fa:6b:1c:37:24:f9:3e:4b:98:b0:e5:ef:
                    b4:1f:60:37:56:c2:77:21:80:7b:75:53:1e:ed:1b:
                    8d:de:89:93:6e:b8:77:a4:51:bf:60:1c:1c:63:a7:
                    f3:8a:b9:0c:0e:4b:2a:e6:cc:7a:d0:1c:86:8d:76:
                    2a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:97:76:DB:D6:63:B8:F8:DE:8F:BA:0E:8F:4C:8A:28:3F:DD:80:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/46a5b659-695f-3881-aad8-add0a40b1cd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.244.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:29:dc:36:ec:4c:28:2e:48:5f:3e:74:e7:4c:2a:db:15:54:
         a8:c5:3e:a2:b3:9c:f6:af:d6:4b:62:65:56:6c:d3:bf:fb:ce:
         9b:1f:41:19:aa:99:39:25:a9:5b:e1:7a:cd:42:ef:76:93:e9:
         84:8f:bf:87:ed:7c:0f:f5:12:e8:dc:52:26:cd:8b:3b:18:8d:
         97:8b:32:fd:83:8e:df:91:12:cd:05:c1:0f:86:79:83:7f:ab:
         c1:1d:2c:37:28:80:09:f1:2e:7a:d4:4f:fb:c5:5b:35:04:18:
         7d:bb:f0:cf:2c:77:a7:77:95:dd:4a:4a:d6:7b:c9:d7:8f:de:
         10:d0:a7:14:de:ce:8f:04:92:0c:c8:9f:36:be:a9:a3:94:10:
         81:63:4f:67:28:b9:ea:0c:4a:28:db:18:96:54:cd:5b:30:30:
         8c:1b:60:b8:60:60:f4:51:88:68:66:1b:f1:7f:2d:f0:81:9d:
         cf:0d:bd:b6:4b:ca:98:f2:99:33:e3:c6:70:40:7a:97:fd:f4:
         57:76:7e:e2:90:59:23:8a:17:20:c7:43:8b:25:87:a2:cc:fe:
         46:0d:a0:c2:aa:f0:0e:06:23:43:15:37:0f:cf:2d:1f:6e:83:
         5f:12:98:a3:c0:59:d2:5f:53:da:a0:6a:03:9c:39:94:dd:f7:
         23:2f:2d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:29:20 2025 by rpki-client