Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91c1a825-c546-4358-bf02-8458d881147a/f0d40cbb-7940-3f0b-a7f9-219ea77617f3.roa
File:                     f0d40cbb-7940-3f0b-a7f9-219ea77617f3.roa (raw, json)
Hash identifier:          NQIMTKDbaN5rpxPnN7TqZAio3leOJTq0yXgWXMy+TRo=
Subject key identifier:   D2:8D:98:02:5C:AB:CF:05:34:78:F2:4E:8B:DB:39:7B:92:7D:71:D5
Certificate issuer:       /CN=91c1a825-c546-4358-bf02-8458d881147a
Certificate serial:       010D0C9F43285848F65BE6676A39F847F1488A28
Authority key identifier: 29:8E:E1:FE:D0:44:00:33:47:9D:60:61:E3:1C:07:BA:AE:CD:0C:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91c1a825-c546-4358-bf02-8458d881147a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91c1a825-c546-4358-bf02-8458d881147a/f0d40cbb-7940-3f0b-a7f9-219ea77617f3.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     26383
IP address blocks:        207.174.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91c1a825-c546-4358-bf02-8458d881147a/91c1a825-c546-4358-bf02-8458d881147a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91c1a825-c546-4358-bf02-8458d881147a/91c1a825-c546-4358-bf02-8458d881147a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91c1a825-c546-4358-bf02-8458d881147a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:e6:67:6a:39:f8:47:f1:48:8a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c1a825-c546-4358-bf02-8458d881147a
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=f8f9b827-7e2e-4e2e-ab05-9398e3c6882b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c7:35:da:f9:d0:0f:3f:ed:59:03:45:16:1c:
                    f6:ce:db:92:27:3f:1e:a8:37:67:d4:27:f9:c5:70:
                    bf:b1:f5:3d:55:ea:3a:a1:8c:8c:03:7d:6e:6b:7b:
                    f8:ae:1c:04:4e:ee:1a:21:ec:25:4e:40:a8:f8:5a:
                    d9:b8:91:8e:7c:8e:39:2b:f2:89:9f:f3:9b:b0:a5:
                    42:12:0f:5a:95:56:07:c2:8c:be:46:2a:4d:44:b4:
                    75:f6:89:ba:57:ad:99:a4:8c:e1:76:19:7a:04:71:
                    37:72:f9:56:a9:38:fe:3a:ae:11:c7:00:81:20:8c:
                    88:a3:9f:9e:b9:a4:d9:9d:24:3e:4c:fb:ce:d6:04:
                    63:25:43:86:92:4a:bc:86:a8:a0:1e:d8:73:7a:8c:
                    64:f2:7e:85:45:54:79:76:95:9a:f2:7a:98:42:f8:
                    71:12:36:fa:b7:e8:aa:89:c1:e3:76:2d:78:ba:95:
                    f1:7d:47:0e:69:ac:a0:d2:f1:1a:11:b8:ef:23:a2:
                    5a:ab:0b:fe:39:37:49:4d:72:76:85:c7:2a:d6:0b:
                    29:93:e5:d4:c0:d9:53:59:a8:89:96:e0:82:cd:4b:
                    83:0a:d5:52:0c:2a:3f:35:84:c5:d9:60:fb:4c:78:
                    7e:28:c8:51:76:6b:58:64:09:ad:4c:c0:b8:c8:1e:
                    2f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8D:98:02:5C:AB:CF:05:34:78:F2:4E:8B:DB:39:7B:92:7D:71:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91c1a825-c546-4358-bf02-8458d881147a/f0d40cbb-7940-3f0b-a7f9-219ea77617f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91c1a825-c546-4358-bf02-8458d881147a/91c1a825-c546-4358-bf02-8458d881147a.crl

            X509v3 Authority Key Identifier:
                keyid:29:8E:E1:FE:D0:44:00:33:47:9D:60:61:E3:1C:07:BA:AE:CD:0C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91c1a825-c546-4358-bf02-8458d881147a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:55:56:c7:6c:35:4e:2d:b9:3c:7d:e9:e6:a1:b7:02:86:ba:
         d1:f6:d6:77:5b:f8:bd:6f:3f:28:f6:b4:df:b5:3a:e2:48:4f:
         07:2c:ed:db:21:f0:0a:ca:4d:d4:9d:64:89:a8:49:94:73:21:
         3c:0a:44:fb:0a:2d:34:55:fd:32:ab:b6:8a:06:90:ac:b9:4c:
         42:99:8a:e3:d2:9b:fc:ae:42:88:45:cc:17:7a:d3:0d:a4:e6:
         14:f6:76:30:8a:95:ac:e2:02:51:b8:a9:a3:82:15:08:b9:92:
         0f:02:4d:9a:f8:7a:75:66:92:2d:a8:f2:20:eb:81:f8:f1:12:
         6e:63:69:cd:65:71:b0:c8:6f:ec:a9:cc:b3:35:50:d7:dd:96:
         8c:d9:f6:80:c5:69:30:49:e4:b2:59:87:7a:96:81:be:18:18:
         d6:51:10:d3:39:7f:ba:b1:20:5a:04:8b:cf:dd:56:c5:9e:70:
         38:03:23:31:5f:1b:f9:61:e6:28:2d:c4:11:a2:9e:0e:c5:61:
         1f:18:4c:d7:60:94:ad:90:50:47:ba:c2:df:b9:b6:8f:89:70:
         36:6f:c4:6d:95:ee:cf:f4:a3:05:cd:b1:e0:45:3b:40:39:13:
         a0:98:ae:ae:57:17:a1:fc:8f:79:74:50:d2:92:34:ee:4d:d7:
         3c:10:80:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 07:51:54 2025 by rpki-client