Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/a3bd187b-c732-37f7-8b54-b2393d5b43d4.roa
File:                     a3bd187b-c732-37f7-8b54-b2393d5b43d4.roa (raw, json)
Hash identifier:          wDuICN5eEiVun8gOuKcC4xHQh0M75FTrpT/DDtKNFZE=
Subject key identifier:   C8:71:F0:BA:97:13:76:3F:D4:78:4D:44:1F:F9:A7:85:13:77:72:0C
Certificate issuer:       /CN=564c92f5-eb04-448d-8939-379434b228b3
Certificate serial:       010D0C9F43285848FD56B3C06A6DF9CDDE3B3000
Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/a3bd187b-c732-37f7-8b54-b2393d5b43d4.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     397320
IP address blocks:        207.195.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:b3:c0:6a:6d:f9:cd:de:3b:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=c29707a0-926b-40bd-ba47-4109e1164dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:90:cd:68:4c:f1:9f:0d:43:a5:cc:37:98:25:
                    c1:6e:d9:27:0b:a3:4d:e9:60:ba:8f:0d:aa:a5:dd:
                    3e:dd:cb:5f:5c:0b:99:3b:ca:4e:86:2c:32:ad:fa:
                    0c:90:ef:a3:98:03:1e:ad:bc:83:c0:a8:22:dc:30:
                    74:53:bb:c1:87:d3:b1:2f:da:69:c9:7c:ee:b4:17:
                    2e:98:81:ed:d4:d1:23:a5:d3:9c:46:9d:a5:5b:4d:
                    30:35:96:d0:df:86:b1:81:10:a0:ee:8f:c9:24:fe:
                    fe:eb:ce:e3:a0:66:a3:b4:1a:b9:15:30:2d:de:f9:
                    18:d9:b8:d0:4a:e4:87:5a:93:c0:d3:cf:20:75:5e:
                    ac:f8:44:97:5e:4f:94:07:ab:65:51:8c:7f:f4:3e:
                    7a:51:bf:71:e0:9f:7b:20:ff:4f:ea:07:a0:18:2f:
                    57:70:ce:92:1d:df:9a:29:b1:e4:df:0e:3b:54:1d:
                    c3:f5:89:ec:89:a4:6b:62:15:f6:5a:e2:54:4c:44:
                    1d:23:64:cb:a1:d8:ed:35:52:41:b7:8b:a0:bb:3e:
                    f5:b5:a6:d9:9c:ba:f7:cb:e9:bd:6f:5f:f4:c3:1c:
                    46:24:c9:cc:17:e3:da:7c:5d:32:e9:37:a8:76:d0:
                    58:46:6d:94:65:45:52:5e:84:a1:ec:2a:32:5c:98:
                    5f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:71:F0:BA:97:13:76:3F:D4:78:4D:44:1F:F9:A7:85:13:77:72:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/a3bd187b-c732-37f7-8b54-b2393d5b43d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.195.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:fd:94:ea:e2:2f:52:92:c4:97:4f:82:15:ab:5b:17:d6:8c:
         58:7d:7e:2a:ab:d2:81:d7:6f:b2:70:31:9b:99:94:5f:30:de:
         7c:37:50:92:07:21:24:92:59:da:2b:57:52:49:9e:c1:e0:9e:
         5a:68:d5:90:b6:9f:2a:a1:d8:bd:3d:5a:ab:46:f9:2f:68:74:
         83:01:c4:14:2c:9f:f4:df:ad:f3:6c:bc:9f:51:fb:48:1a:87:
         20:73:88:01:42:e9:46:ae:00:24:27:81:06:9f:45:3f:26:8c:
         b0:8b:d9:9a:a0:be:e6:86:3f:56:ea:1d:93:40:4f:cf:1e:c2:
         ba:a8:1d:9a:16:75:32:93:34:8d:62:db:0e:79:4b:a7:b8:42:
         ec:56:40:dc:b6:13:7c:66:76:ea:d0:75:6b:6a:0e:fd:94:60:
         1b:14:bf:23:84:b2:23:d1:7c:24:be:ad:af:d7:19:0d:c7:af:
         e3:83:86:36:c0:ea:73:27:ae:25:59:2a:72:5c:bc:64:ac:a6:
         0c:60:64:d2:63:e3:53:db:6c:0a:db:4b:53:26:69:f2:c4:9a:
         e7:84:f4:e2:ad:11:1e:ae:3b:23:6a:92:d2:5e:02:a4:cc:a7:
         d4:9b:f9:7b:47:26:95:cc:8a:ff:f1:be:07:5c:eb:a0:ef:7b:
         6d:70:9e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:39:05 2025 by rpki-client