Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/ee487003-22e1-3f81-8442-e593a1c8d6e0.roa
File:                     ee487003-22e1-3f81-8442-e593a1c8d6e0.roa (raw, json)
Hash identifier:          dJna4MKP3pgFidYOBlkmhWpNNQe/Ajnm6ZXDJ/OfeAc=
Subject key identifier:   99:A5:B2:FC:A9:4F:69:9B:C3:CD:69:43:CA:EE:51:BD:A4:E0:CB:DA
Certificate issuer:       /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial:       010D0C9F43285849071BEB20A07C5A0B7EDB70C0
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/ee487003-22e1-3f81-8442-e593a1c8d6e0.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     16550
IP address blocks:        151.207.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:eb:20:a0:7c:5a:0b:7e:db:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=ecb80bf4-1795-49e7-b55b-5c65b0ddd85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:91:40:2e:1e:d7:91:36:c9:57:c4:52:c8:eb:
                    69:3e:3c:00:56:37:80:4a:63:d9:dd:08:50:ca:08:
                    fa:12:41:8d:11:b5:70:9e:6d:b6:2f:95:26:7f:80:
                    dd:7a:6b:38:41:6a:1d:61:33:3a:8a:ec:9e:58:61:
                    54:aa:bf:72:03:94:ff:67:58:0c:38:9b:ff:71:73:
                    92:e9:0f:b4:ba:35:20:4e:c7:5c:70:3d:84:bb:92:
                    6d:af:c1:71:c9:b6:63:be:ff:f5:1f:79:83:e6:ed:
                    93:06:94:b3:89:94:4a:da:9c:00:b5:f5:1d:15:6c:
                    1c:b6:5d:82:3d:af:54:c7:2b:be:bf:22:4c:87:74:
                    c7:c4:a6:6f:6d:63:19:5f:21:fe:e4:76:98:12:a5:
                    bc:37:d0:3f:de:d8:a4:ba:e8:62:52:1b:26:da:de:
                    18:08:0e:91:3c:2b:2c:56:fd:b9:f1:2f:5c:bb:9e:
                    6d:5d:49:f6:b7:79:35:7d:89:89:4e:9e:9f:a1:19:
                    ba:97:1e:87:04:a7:69:92:32:51:ba:5e:8a:d0:15:
                    c8:d7:05:29:30:6b:6c:58:b2:3a:4e:62:c3:c0:24:
                    16:e8:82:b6:7d:fa:92:13:29:33:a8:3a:7b:43:a5:
                    7e:6c:d8:db:1d:94:08:c9:a3:c9:94:2c:29:84:6a:
                    47:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A5:B2:FC:A9:4F:69:9B:C3:CD:69:43:CA:EE:51:BD:A4:E0:CB:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/ee487003-22e1-3f81-8442-e593a1c8d6e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl

            X509v3 Authority Key Identifier:
                keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.207.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:69:fc:ae:e3:ae:2d:cd:13:cb:8f:dd:a1:ba:7b:44:e1:2d:
         0d:ef:79:fb:c3:fd:54:fc:ea:ca:06:83:c1:b3:33:e1:14:30:
         f6:a0:d8:d2:a0:af:87:c4:95:45:85:ea:cf:02:f1:3e:5f:50:
         5c:7b:40:35:a4:31:05:83:c9:37:bb:ed:34:2d:46:02:b2:ac:
         db:2e:bb:d8:ad:e3:66:0a:07:7a:15:c0:37:b9:96:6f:ca:28:
         db:e5:44:fc:e5:cc:26:9b:bb:4b:27:cb:80:ec:7a:d6:03:fa:
         f2:bf:3b:85:32:a9:bf:67:ae:e9:65:f2:9b:36:fd:49:fc:75:
         45:78:06:11:38:9d:92:4d:16:c7:89:b4:7e:9d:4f:9e:ae:ba:
         de:7f:92:a3:43:de:15:5b:0e:88:0a:c5:fc:aa:f2:29:0d:08:
         7f:a0:23:be:9d:22:26:20:dc:75:89:11:61:f2:f9:2a:25:df:
         31:a0:bc:2a:79:d7:db:92:dc:10:d3:c9:55:e9:95:e8:55:58:
         4b:f3:e9:36:97:4b:44:18:c7:59:55:32:d9:59:ca:9a:24:7a:
         cd:64:20:db:e6:c6:8c:e5:cc:bc:da:78:c6:55:3a:07:14:2e:
         73:51:65:95:fe:36:6a:52:85:f5:43:a9:b0:4a:52:55:e0:b2:
         bd:b1:30:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:02:30 2025 by rpki-client