Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07a0d0bf-11c6-38bf-8cd0-2d8a56668f5b.roa
File:                     07a0d0bf-11c6-38bf-8cd0-2d8a56668f5b.roa (raw, json)
Hash identifier:          R2z6LEbfgOT8sThxpUwhwygeN+atiWeAVtX+u6Hmhvs=
Subject key identifier:   C3:CD:7F:85:B0:66:08:12:82:E8:60:64:0A:23:98:24:8D:C9:CC:3E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848EF614A2F3B68D6F828692F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07a0d0bf-11c6-38bf-8cd0-2d8a56668f5b.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     36183
IP address blocks:        172.226.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:4a:2f:3b:68:d6:f8:28:69:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=c6cc7797-34f0-4f29-aafc-016d720c627e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d6:30:fe:74:5b:15:5b:50:cc:14:a1:7e:ff:
                    80:12:69:8f:b6:aa:52:f5:08:d4:f8:e7:d2:4f:42:
                    6e:b0:78:5b:9e:47:05:32:6d:2c:ba:82:1b:79:72:
                    07:70:23:34:e9:56:52:6d:c1:f4:0b:9c:ae:6e:ff:
                    8b:28:c9:01:93:6d:94:73:d0:58:85:50:85:a1:4f:
                    47:7a:40:a1:70:27:6a:d0:43:ed:32:96:71:e0:8b:
                    1c:19:95:05:45:93:2d:36:d3:0a:39:58:7a:da:69:
                    d4:85:42:e8:f4:b5:4a:6e:c1:9b:8f:5f:0a:6b:93:
                    a7:02:72:0e:af:4a:94:da:54:b0:d1:61:3a:2f:de:
                    9e:f9:97:89:7f:90:72:3c:42:d8:e0:a5:b4:92:77:
                    bc:34:1b:8b:3e:a7:01:6d:dd:7d:ad:06:9b:33:da:
                    46:bd:b1:a4:c7:09:44:c0:46:a9:50:16:a7:00:cb:
                    a2:4a:79:de:f8:aa:62:14:9b:12:22:5e:6e:52:03:
                    33:53:d4:fc:b8:ea:cc:33:1d:25:08:1d:a0:fe:76:
                    d7:9e:2d:be:fa:46:27:3c:9c:3f:54:f2:87:21:a9:
                    dd:3a:c2:98:08:b3:f9:25:7c:47:95:c6:25:ff:c1:
                    80:b3:12:9b:0e:b5:48:a4:32:f8:fd:51:75:3e:f0:
                    03:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CD:7F:85:B0:66:08:12:82:E8:60:64:0A:23:98:24:8D:C9:CC:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07a0d0bf-11c6-38bf-8cd0-2d8a56668f5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:6f:38:93:95:38:13:31:ef:1c:e3:d3:78:2d:fe:b6:38:1f:
         e8:92:3e:70:dc:e7:0d:fc:34:91:10:09:24:35:3f:6a:02:09:
         c7:94:ca:fc:27:58:ea:36:1b:01:d7:4d:aa:24:80:da:82:a7:
         96:eb:ec:99:21:43:ee:c9:3e:09:a0:45:92:32:99:0f:2a:f9:
         78:cd:61:3e:16:1a:ed:b7:50:e4:46:20:33:b6:a9:f0:27:e7:
         e8:46:11:b9:7e:13:11:6a:0e:13:ae:fe:61:f8:3e:aa:6f:72:
         25:83:c7:e4:70:ee:23:4a:6c:28:26:b9:7a:24:0b:e9:aa:17:
         53:0c:c6:7f:b3:da:1d:0a:ca:1d:e0:b7:99:7d:b4:7e:6f:b4:
         33:87:6a:be:c0:cb:60:a5:1c:89:fc:28:07:95:57:6a:82:06:
         2b:91:d7:a5:b4:4c:69:2b:6e:e8:65:be:75:53:5d:f2:10:67:
         d0:43:e2:8b:2d:fd:50:0f:12:e6:be:17:12:ba:a1:83:34:1f:
         d1:3d:43:79:ff:2d:68:3f:de:35:19:5c:41:b0:b8:eb:c9:15:
         68:b8:99:71:4b:fb:ce:8f:47:12:44:be:bb:37:f5:77:9b:89:
         11:f9:e2:c8:e7:8d:86:fb:10:26:fe:ef:b0:79:77:7b:bf:0e:
         27:c1:2b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:14 2025 by rpki-client