Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/991a2557-3597-3230-a233-82f945d484fd.roa
File:                     991a2557-3597-3230-a233-82f945d484fd.roa (raw, json)
Hash identifier:          eNqCLs+KkzcV/K46RxZAh25rgxeB3k0+c0DjtxMcJyA=
Subject key identifier:   96:CC:1F:29:44:6D:D2:FD:9F:8B:8A:D1:E0:4F:67:0F:A0:3B:D0:1D
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F4328584A03A54A884F11252E3E3B8500
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/991a2557-3597-3230-a233-82f945d484fd.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     11300
IP address blocks:        207.241.168.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:4a:88:4f:11:25:2e:3e:3b:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=f0060861-3ca7-452f-9df5-e75e629e6f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:25:0c:12:95:d2:7e:d9:69:e7:4b:0e:aa:0d:
                    59:cc:fd:c7:c7:8f:a8:77:f6:f5:48:26:09:02:ac:
                    a4:32:c3:dc:07:d2:3e:7d:74:56:b2:d2:ee:e0:31:
                    cf:1c:4a:bb:29:84:6e:fb:ba:51:7f:9c:24:1c:61:
                    a4:c6:0c:86:62:bd:23:4d:38:d3:5b:5c:5b:f8:71:
                    14:86:e7:bf:6d:bb:11:a8:3c:30:f4:e5:34:e9:8f:
                    5d:95:88:b7:14:69:ea:fb:5a:7d:83:96:b9:d9:50:
                    31:4a:68:9f:97:cb:15:6c:98:1e:19:1a:83:e6:27:
                    6d:52:1c:9c:63:99:0c:5c:d6:77:8c:17:17:c9:e1:
                    28:02:a5:63:61:bc:fe:46:4a:d8:b5:79:71:87:f3:
                    35:f2:18:18:ad:b3:9d:4c:6c:90:cf:26:2d:60:d2:
                    85:02:61:d5:10:a6:75:91:c1:a3:96:b2:70:7d:e9:
                    72:e7:16:36:23:11:df:19:75:1d:83:c2:7e:19:67:
                    8c:5c:6b:82:77:1b:1e:ed:e0:06:0e:1c:2d:db:8a:
                    a9:db:14:2b:93:f9:21:f5:22:04:8b:45:42:19:42:
                    e4:0d:b9:18:0d:ab:6c:05:5b:4d:7f:c6:09:f2:d4:
                    9f:27:29:d1:87:a3:69:29:e2:07:c0:52:4f:ab:5a:
                    5d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CC:1F:29:44:6D:D2:FD:9F:8B:8A:D1:E0:4F:67:0F:A0:3B:D0:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/991a2557-3597-3230-a233-82f945d484fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:78:ff:d7:63:64:45:93:62:46:e8:41:c4:4d:b7:00:a6:9f:
         b0:b1:92:87:68:37:76:53:25:f0:94:81:81:d3:89:82:54:cb:
         7a:64:f2:95:7f:0d:4c:41:34:f4:b7:45:72:a1:fd:33:66:82:
         65:06:58:bd:c6:5a:dc:d1:9e:dc:74:fe:d8:1e:c5:55:b7:58:
         3a:eb:b1:73:51:9c:8e:7a:19:7c:96:c1:84:4e:bc:68:db:9b:
         13:84:f0:af:53:04:40:35:c3:c2:ec:37:72:a6:c1:cf:98:39:
         0f:ce:3e:49:d1:8c:45:de:41:d4:a0:f3:08:e1:1d:1f:05:24:
         11:2d:64:96:58:1d:88:59:aa:f9:a8:e1:66:c3:d8:5a:e2:06:
         a4:81:d5:a7:a9:a6:8b:7c:c2:0a:6b:e2:b2:e1:de:a2:3d:0e:
         26:d3:1f:f7:64:d4:f3:39:ac:3e:4c:30:92:43:cb:e0:c0:1b:
         6d:b1:13:57:d7:db:25:5e:d0:d2:0d:03:16:39:42:8f:f9:9e:
         fb:1d:f9:b7:f3:08:7f:96:cd:aa:b8:d3:8f:e5:4e:f9:f0:41:
         31:14:1a:2b:3e:bb:bf:a9:9d:8e:4e:97:36:e0:49:70:ad:a2:
         f2:53:ef:9b:2d:0e:f3:04:8a:b9:6e:3b:22:cd:98:c8:6f:a3:
         e5:c3:d6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:47:31 2025 by rpki-client