Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/9e909751-10e2-3b7e-8b9c-5217a8484d0d.roa
File:                     9e909751-10e2-3b7e-8b9c-5217a8484d0d.roa (raw, json)
Hash identifier:          oPcOUtADdi0Drt5+5web60OVLX46DHDzJOVMQYUeuGQ=
Subject key identifier:   10:F2:A0:55:92:FE:F4:5C:7C:EE:28:E0:FC:9D:8B:1D:CB:69:98:3C
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F432858492183FFE69736B986E4DE2EA0
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/9e909751-10e2-3b7e-8b9c-5217a8484d0d.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     11300
IP address blocks:        207.241.162.0/24 maxlen: 25
                          207.241.172.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:ff:e6:97:36:b9:86:e4:de:2e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=89e66ded-a2ba-436d-a4a3-3c261e553447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:71:ea:d9:23:b2:5e:2c:8d:08:a3:65:1b:
                    0f:14:1e:b3:c0:5b:c9:da:35:3d:48:b7:6f:69:85:
                    ef:15:3e:4d:fa:90:03:26:c1:f0:23:75:ff:6f:ec:
                    da:31:9d:ad:68:97:74:df:d7:3b:3f:80:2b:94:a1:
                    f0:ce:c5:b3:35:73:ca:d2:0f:ab:de:55:26:b0:57:
                    fd:b8:a7:e8:bf:f8:ca:e3:51:0a:f1:0b:da:f7:6d:
                    83:69:96:97:94:7d:0a:28:a1:f4:6b:45:2d:62:61:
                    76:50:71:1d:1d:f7:1f:84:e2:a7:04:c4:51:67:bb:
                    0c:69:dc:98:bd:3e:96:04:64:9d:6a:e4:07:29:10:
                    14:31:44:49:b6:82:08:22:37:62:2a:4f:4c:30:1f:
                    58:78:fa:f3:45:8c:8e:24:6f:41:9f:91:1f:aa:8d:
                    54:27:78:be:77:06:37:42:5d:64:1c:1e:34:f8:30:
                    a0:65:c4:11:f6:eb:43:c6:79:6b:9f:ce:90:ba:17:
                    fc:8f:b3:2f:15:0c:73:16:0f:b2:d0:bb:f9:6a:07:
                    0e:d5:95:a7:37:b4:73:74:73:b3:f2:ac:cd:55:3e:
                    5a:58:6f:e9:69:61:e2:f1:b0:0d:1b:cd:df:95:55:
                    45:3e:e2:bf:3e:ac:a2:54:3e:5d:64:c6:df:81:4e:
                    3c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F2:A0:55:92:FE:F4:5C:7C:EE:28:E0:FC:9D:8B:1D:CB:69:98:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/9e909751-10e2-3b7e-8b9c-5217a8484d0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.162.0/24
                  207.241.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:2f:bb:be:2a:ed:2e:89:b2:be:e3:a0:06:a8:6f:85:b1:ef:
         0d:f9:b7:46:fc:f4:1e:2b:0b:56:80:97:ce:ed:ec:88:47:d9:
         ce:33:68:8c:8d:1b:8e:f1:90:55:2b:50:3b:5f:6d:af:9c:2e:
         60:26:e9:f7:4c:b5:16:f7:45:e7:69:0e:8d:ed:87:7e:5f:64:
         d3:85:28:21:7d:a5:24:ae:12:cf:4e:11:9d:27:e0:62:fa:c8:
         8a:9d:1d:f5:9e:37:2a:d4:a1:b6:64:c2:56:f7:c3:c5:ba:20:
         c4:5d:b9:01:ea:82:cf:1a:67:06:36:29:1a:fe:e3:46:57:f6:
         63:9c:2f:ba:90:ba:07:eb:22:28:57:83:03:6b:77:f6:24:d7:
         33:83:44:aa:54:23:fd:7a:dd:6a:35:ce:e1:8b:4f:d4:37:1c:
         6e:f8:01:0b:85:da:b2:f4:e6:bd:d3:42:59:f5:58:e5:24:5c:
         b5:93:08:78:3b:e1:41:66:80:3b:c4:be:fe:c1:7b:d6:34:48:
         02:66:96:79:0e:53:9f:56:ac:58:e9:93:0d:09:e8:95:b5:4e:
         59:f4:7a:b2:27:98:ea:67:fb:e4:9a:9c:e6:d4:94:ba:1f:ec:
         bb:ed:bb:81:00:17:42:05:14:41:2e:bf:2f:05:9a:a8:1b:82:
         5b:eb:e0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:47:27 2025 by rpki-client