Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/6910e57a-19e1-35c1-a202-faf2127b1fe1.roa
File:                     6910e57a-19e1-35c1-a202-faf2127b1fe1.roa (raw, json)
Hash identifier:          Q8yE3+PLl0M+qHBaBlfRFVJF7oS+zRNu017tqgOck5Y=
Subject key identifier:   71:A5:5B:E8:B8:2C:9B:09:A4:B0:6A:7A:C2:CE:78:A0:F7:97:51:CC
Certificate issuer:       /CN=8ad56193-8e33-4786-9a64-949338fc325a
Certificate serial:       010D0C9F432858494733E5A64CDD61262D6BEF00
Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/6910e57a-19e1-35c1-a202-faf2127b1fe1.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        209.114.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:e5:a6:4c:dd:61:26:2d:6b:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=ef7bf7ef-78b6-4fb7-9e9e-31fbe584e68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b2:8a:78:d3:d4:d4:10:93:bb:88:54:f4:e9:
                    0b:42:c5:8a:76:2e:05:ac:74:e6:6b:76:72:32:a4:
                    f8:93:4e:c9:38:14:9b:06:28:66:1a:d1:a6:5c:f6:
                    85:99:99:ce:e1:d5:ff:c4:5f:84:30:cf:57:50:91:
                    be:ca:1b:4e:ff:f4:01:b2:9c:07:61:1e:68:2c:d0:
                    a6:f6:c6:e1:44:31:56:cd:f1:04:00:25:93:15:f3:
                    5f:19:b2:48:07:ed:89:09:ef:1c:46:86:a6:f9:0a:
                    27:5a:ce:ce:ea:65:02:a0:98:36:b1:63:7b:db:c4:
                    7b:cf:de:c4:84:2e:18:d5:33:83:a8:89:1a:b8:e9:
                    2a:58:85:78:f2:0e:c6:68:3a:68:4f:fb:58:1e:b9:
                    6f:f8:e3:d4:2b:7a:75:82:4c:f2:97:fd:0c:82:49:
                    43:5d:3a:fe:d6:a8:7d:f3:10:6a:de:62:82:58:e9:
                    4c:b0:4a:55:36:49:4b:d9:3f:98:5b:62:7b:61:8d:
                    ac:02:96:f7:3d:06:98:d9:fe:67:da:03:f7:01:94:
                    97:0b:cd:b5:59:3d:dc:04:29:f6:8b:54:b9:1d:e1:
                    d7:13:4f:9f:b5:42:e5:a4:54:42:1b:18:18:17:0a:
                    d5:66:64:b6:92:59:d3:ef:c9:97:82:31:80:6b:1b:
                    2a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A5:5B:E8:B8:2C:9B:09:A4:B0:6A:7A:C2:CE:78:A0:F7:97:51:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/6910e57a-19e1-35c1-a202-faf2127b1fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl

            X509v3 Authority Key Identifier:
                keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.114.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:56:95:81:ad:22:07:a0:9b:5c:6b:af:b5:8f:c8:6c:ef:e9:
         b4:bb:bd:85:1e:88:c5:40:a0:b6:65:3c:8a:69:77:f9:06:b3:
         27:87:e7:aa:33:c1:50:55:1b:18:78:8d:7d:31:6f:11:8e:89:
         11:be:50:bd:b2:71:c3:6b:82:a8:26:f7:f7:8a:56:c3:c8:a2:
         c3:55:c5:b0:d1:d4:41:2e:a3:8e:46:bf:2a:f4:fc:d6:37:bc:
         af:41:02:99:41:0e:01:b4:6b:67:0b:da:03:ae:c2:af:89:2e:
         83:8b:e5:06:74:31:ec:b6:88:0d:31:fe:6e:fa:18:6f:43:40:
         a3:66:46:f7:5b:f8:34:65:4f:0e:2b:95:fb:69:02:1a:5f:e0:
         30:76:0f:a0:ee:d5:71:f4:10:74:fd:c5:78:f1:2c:74:66:da:
         97:b2:56:d9:7c:a3:0a:25:96:36:c8:c4:b0:9c:68:12:ed:53:
         23:3b:1d:f7:85:cd:b3:0c:ab:33:79:c6:4f:25:e1:b5:93:9b:
         91:7e:f5:2c:6d:ea:ad:b5:a8:05:cc:86:9f:35:34:b6:3b:fc:
         0b:f8:db:ee:df:c5:20:54:4a:da:cf:46:b6:d9:e2:d0:74:29:
         ff:ec:09:f0:4c:5f:e8:44:68:01:01:89:60:4b:c5:5f:70:eb:
         6a:e4:ce:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:52:45 2025 by rpki-client