Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ca34aa1c-f17e-32f0-b867-7983c54f8cf0.roa
File:                     ca34aa1c-f17e-32f0-b867-7983c54f8cf0.roa (raw, json)
Hash identifier:          e/bTjEfhYHNiVOsNZhH+qhtTBZDtbg5MVImMVrHh9a4=
Subject key identifier:   69:8B:D8:B3:9A:55:1A:E2:DC:61:68:B6:B8:4D:4D:F1:0A:09:0E:CE
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F4328584A00DABF0F1EA108A5647DAC80
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ca34aa1c-f17e-32f0-b867-7983c54f8cf0.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     11300
IP address blocks:        207.241.170.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:bf:0f:1e:a1:08:a5:64:7d:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=c0fa5262-7641-4d99-9adb-fe1950dbd23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:a0:15:27:02:ee:73:d4:c2:9e:49:73:ae:
                    98:b7:ab:55:a3:28:3d:ee:03:d0:3b:32:dc:1f:19:
                    52:b6:70:be:78:6c:1f:05:95:05:4a:8e:ca:51:2c:
                    17:1b:8e:94:81:9a:8e:3d:1a:86:48:e1:b0:2b:33:
                    b2:e3:fd:18:20:37:72:63:69:c1:94:45:4f:af:65:
                    5f:ec:e2:22:9c:f0:ba:79:90:5d:61:15:ca:f5:eb:
                    9f:92:ce:53:49:aa:0f:9a:b8:9f:2c:25:6c:73:a6:
                    af:41:db:e9:3e:65:a4:23:a6:04:6f:88:70:47:09:
                    68:14:ef:14:98:85:15:aa:85:b5:46:c2:08:ee:d4:
                    41:7d:b5:9c:2b:22:19:9a:af:38:e1:3d:e1:5e:e8:
                    99:bc:da:d6:c7:31:4b:06:fe:3e:86:8f:f8:34:55:
                    95:59:ee:4f:b5:ad:70:0a:80:1b:e5:a3:bc:86:f0:
                    e8:96:cb:d8:1d:39:96:d0:2d:73:5b:cf:f9:cf:5b:
                    3e:bd:93:0b:0f:fc:b4:ce:90:ea:25:3a:e5:5e:d1:
                    ff:ae:9a:7b:ff:d2:20:7f:3d:6f:d6:f3:78:9d:84:
                    55:e9:00:62:db:cd:c5:85:5a:f3:73:e9:69:eb:8a:
                    59:26:1c:b5:b9:c8:d0:85:92:28:0f:1f:7c:8b:4a:
                    81:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8B:D8:B3:9A:55:1A:E2:DC:61:68:B6:B8:4D:4D:F1:0A:09:0E:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ca34aa1c-f17e-32f0-b867-7983c54f8cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:6a:66:d3:bc:43:c0:56:2c:f2:0d:66:41:c9:18:2f:c2:e5:
         ef:96:c8:41:8d:cf:92:c4:7d:5f:42:74:bf:46:5f:6e:aa:ba:
         3a:6f:6b:fd:ec:61:2c:a4:fe:b2:ec:d2:3d:ad:06:9d:29:48:
         47:bd:81:ff:67:09:38:01:1e:cb:0a:7d:40:47:43:56:3c:6a:
         e8:ac:c0:22:cc:17:4b:a8:bc:18:8e:e2:e7:a6:12:f5:df:44:
         7a:16:97:85:c0:32:b6:62:00:fc:39:e5:ff:69:f2:5b:29:2f:
         64:4d:ae:dc:6d:7d:02:ed:10:95:f4:39:69:90:13:aa:67:0b:
         57:f4:75:4a:55:88:fb:40:40:68:0c:a3:9f:ee:ff:20:02:a1:
         dd:52:c7:4b:09:38:c9:6f:ec:ef:4b:ed:5a:49:61:88:98:eb:
         ff:41:dd:7b:9a:14:ad:e9:4d:99:d4:7a:8e:25:d7:44:1b:43:
         5e:50:73:a4:1e:69:5f:b7:43:18:b4:f0:61:28:3c:82:8d:df:
         8c:62:b0:8d:1a:38:92:4b:af:e5:9f:26:b1:ff:07:8d:d0:e7:
         16:49:ef:9d:9c:04:ee:70:58:fa:96:97:de:f8:b6:80:ca:14:
         d6:6e:e1:92:c9:93:fb:00:aa:27:14:eb:da:8e:ec:8c:06:68:
         bc:81:02:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:19:41 2025 by rpki-client