Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/039fd89c-4ecc-315a-a0ee-26d976cd3de2.roa
File:                     039fd89c-4ecc-315a-a0ee-26d976cd3de2.roa (raw, json)
Hash identifier:          ce6n5TZAKNF8FZxDpYUchUrj8Jf6+m0Tvk32WBgIATk=
Subject key identifier:   F4:0E:F4:53:BF:80:D7:59:9C:A6:75:D8:3A:27:6A:9B:07:A0:A1:FD
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F43285849849EFB39271EE444D801F580
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/039fd89c-4ecc-315a-a0ee-26d976cd3de2.roa
Signing time:             Mon 14 Apr 2025 01:00:43 +0000
ROA not before:           Mon 14 Apr 2025 01:00:43 +0000
ROA not after:            Sun 13 Jul 2025 01:00:43 +0000
asID:                     40934
IP address blocks:        209.40.113.0/24 maxlen: 24
                          209.40.114.0/24 maxlen: 24
                          209.40.115.0/24 maxlen: 24
                          209.40.121.0/24 maxlen: 24
                          209.40.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:84:9e:fb:39:27:1e:e4:44:d8:01:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Apr 14 01:00:43 2025 GMT
            Not After : Jul 13 01:00:43 2025 GMT
        Subject: CN=247d7919-de6d-4ea2-9d20-d426258ae035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8f:d7:37:81:4f:d9:77:36:af:79:43:5e:ab:
                    22:1f:e2:6d:24:8d:1b:74:e8:ef:23:ff:03:57:a5:
                    63:9f:eb:eb:48:31:6d:35:66:49:ef:f1:33:ef:fa:
                    b1:e2:1d:c2:ce:30:1f:03:96:3b:8a:d7:85:2d:73:
                    2e:78:cb:08:a5:a6:38:1a:43:ee:fe:b5:46:bd:97:
                    20:3d:72:94:62:4f:22:51:79:9e:27:87:24:b6:0c:
                    bd:e0:89:8d:75:fe:5f:67:be:7e:c6:bc:e9:84:fa:
                    ca:c7:ae:cf:2e:73:84:f9:90:6b:08:67:ac:80:77:
                    1b:69:d7:87:00:84:79:9b:0e:00:ab:d2:aa:bd:b8:
                    c3:b2:1b:be:1d:cf:8b:16:10:0e:d9:31:78:2e:1c:
                    9e:40:ed:49:a3:48:5b:d7:ee:09:53:5b:23:6a:03:
                    9b:c9:51:0a:b1:13:d6:37:ff:a6:33:da:d8:56:84:
                    71:7b:08:61:27:76:2d:0a:6a:cd:78:48:46:18:ce:
                    d5:cf:be:a6:6d:23:71:72:e0:fe:f4:90:5b:42:e1:
                    e7:6f:46:e4:d0:99:eb:59:4d:88:02:e2:ca:17:dd:
                    00:b5:e8:33:7c:62:3c:f9:57:9d:91:d8:3d:78:dd:
                    e9:58:3e:93:e5:74:0a:fd:5a:07:1c:0e:60:4d:ca:
                    c1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0E:F4:53:BF:80:D7:59:9C:A6:75:D8:3A:27:6A:9B:07:A0:A1:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/039fd89c-4ecc-315a-a0ee-26d976cd3de2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.40.113.0-209.40.115.255
                  209.40.121.0-209.40.122.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:49:06:d6:ee:36:5b:b4:ae:09:02:a8:bd:49:cd:58:58:fe:
         dd:5c:c8:29:22:d0:37:ac:b3:80:6f:b4:80:88:fb:6c:b0:3e:
         1f:51:f7:51:62:44:68:85:e7:71:30:27:cf:50:13:03:cc:ab:
         c6:8d:de:8d:d6:5a:f5:30:1e:31:78:0d:5e:ad:9f:02:0e:90:
         3b:dc:52:6d:fc:44:fa:9d:5d:38:bd:e0:f6:5b:0f:ed:8d:98:
         bc:af:5d:bb:99:76:25:78:8f:ad:06:07:12:77:27:c9:96:47:
         18:b4:77:8b:62:a9:8b:fd:78:40:b8:7f:69:e1:86:43:e9:c1:
         ed:9d:e9:b2:11:d3:d9:d8:e5:30:9b:b6:9d:9b:ae:69:ae:8a:
         dc:67:fc:f0:ce:38:91:1c:bc:9e:1b:08:d0:88:f3:c6:bb:6b:
         c4:29:65:41:8f:4a:fc:4d:78:7b:49:56:bd:d4:f0:9a:4b:93:
         19:bb:33:9c:ba:85:fb:20:14:54:f5:1b:c3:17:f2:a1:e5:47:
         2f:1b:16:8f:86:fb:50:b9:0e:ae:b5:49:99:90:7e:09:04:e7:
         99:61:57:92:86:e6:e1:dd:b7:8e:eb:60:a4:db:71:8a:17:ec:
         02:bf:2e:d4:d1:bc:37:e7:6f:48:9f:96:5b:50:98:ab:37:33:
         7a:ff:18:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:12:55 2025 by rpki-client