Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0c95cc7e-347c-343b-9a60-43effbd437ce.roa
File:                     0c95cc7e-347c-343b-9a60-43effbd437ce.roa (raw, json)
Hash identifier:          HZOq37jbwA1qxf1gIObv20bLdntCKVuqUKhGxs6Mpm0=
Subject key identifier:   40:17:A3:97:2E:44:16:99:9C:9A:A9:A8:21:7E:A5:DB:BC:F9:5F:2D
Certificate issuer:       /CN=0afa673e-ceeb-4048-b2ab-93cad45814ac
Certificate serial:       010D0C9F43285848A1361CD8196F51062CB834C0
Authority key identifier: BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0c95cc7e-347c-343b-9a60-43effbd437ce.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     8075
IP address blocks:        206.209.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:1c:d8:19:6f:51:06:2c:b8:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0afa673e-ceeb-4048-b2ab-93cad45814ac
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=c7be42a1-92a4-4c1d-8d13-b018259c3573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bf:dc:0d:42:53:e2:1f:db:87:e4:20:f3:9c:
                    b9:e9:b0:af:7e:54:41:2d:f0:a0:f7:bb:a8:1f:08:
                    94:dd:08:0a:fd:aa:e5:3e:69:1b:9e:90:8e:7a:47:
                    f4:09:5c:e4:19:25:7d:7a:1a:f9:84:ae:96:4a:44:
                    a8:ac:ce:62:e8:b1:98:53:18:bb:3a:95:dd:48:ea:
                    be:16:a8:12:7f:5e:cb:62:02:da:90:9f:74:58:a0:
                    12:c5:e5:a3:f5:7e:1b:33:df:00:54:dd:e2:f5:71:
                    28:6a:b7:23:6f:5f:ef:2f:f8:9a:43:55:2d:7d:83:
                    50:90:f2:76:d4:ed:f1:03:16:54:60:3d:9c:a4:c8:
                    5a:74:2e:bc:f3:08:d2:8e:d5:91:dd:c2:20:ea:70:
                    76:b4:84:a8:b2:67:4a:27:6b:dc:62:34:7b:00:95:
                    b8:18:4e:f0:28:fb:74:d9:1b:02:3f:d3:ca:76:00:
                    43:33:9e:7a:9f:67:09:cb:c1:2b:16:a1:23:c7:bc:
                    25:3c:03:88:56:0b:82:f5:20:a1:dd:72:cc:d3:bb:
                    3b:df:eb:01:9d:0f:5b:60:40:c0:b1:c6:53:35:d3:
                    d7:ee:52:3b:ac:09:2e:62:37:58:87:4e:ff:92:df:
                    93:58:f7:f0:35:34:8a:23:60:68:35:fc:fa:88:2b:
                    c0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:17:A3:97:2E:44:16:99:9C:9A:A9:A8:21:7E:A5:DB:BC:F9:5F:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0c95cc7e-347c-343b-9a60-43effbd437ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl

            X509v3 Authority Key Identifier:
                keyid:BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.209.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:65:05:f9:eb:69:2f:38:57:e9:63:e6:08:bd:11:82:3d:ae:
         f1:91:7f:2b:6f:64:42:d5:b0:a2:02:fc:ac:81:e6:df:ce:0d:
         6b:3f:68:1b:81:29:fa:96:b3:e6:57:f3:cd:e8:af:d7:8a:d9:
         a8:09:cc:e6:7a:73:cf:49:a5:c4:7e:83:b1:8a:fb:73:a1:6e:
         51:d6:6d:35:f1:0c:e0:b4:69:8f:ac:31:b3:bc:dd:ca:1d:23:
         fb:26:bb:b5:6e:3b:65:f6:cf:64:62:21:df:a5:85:c2:07:6b:
         61:b8:5d:92:fe:34:33:4d:ac:f2:25:6c:44:52:e4:32:f8:72:
         ce:09:bd:c2:fa:40:03:82:ef:fd:2b:c7:f1:28:79:97:b8:82:
         be:08:a4:ed:4c:22:d4:c5:58:4c:cf:a3:90:8e:41:d1:5b:40:
         55:34:38:a6:29:52:4a:4c:f1:95:44:5c:18:f3:70:cc:e2:f7:
         6f:b4:09:4a:d3:b9:1d:47:22:40:23:eb:3c:51:5d:27:90:c3:
         4f:78:47:0e:9c:96:10:e1:d5:97:2d:a6:8c:73:47:c7:f0:da:
         2d:d1:60:ba:5b:5b:40:09:58:24:12:71:37:73:35:3d:84:b7:
         33:dc:78:dc:f9:fb:bb:5f:2f:b6:5d:e7:42:f6:00:a5:eb:9f:
         88:7e:32:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:25:43 2025 by rpki-client