Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/90d6e3e8-8976-3a11-89ab-7dc98f3531bc.roa
File:                     90d6e3e8-8976-3a11-89ab-7dc98f3531bc.roa (raw, json)
Hash identifier:          t0Fg07jlg/Fj5Lrd9/WPPoJ4KV2Lq+oj5csMo7ZevWo=
Subject key identifier:   7E:21:D1:5A:A2:A3:86:1D:03:83:1F:4F:80:5F:DE:13:EC:FE:FC:E5
Certificate issuer:       /CN=2cdc7434-e1cd-4dee-b0fa-1d7097306b9c
Certificate serial:       010D0C9F432858498769ABD97B260289EFB7C310
Authority key identifier: 6F:CA:99:28:29:8E:36:15:9A:84:B9:A9:0D:76:8C:07:40:F1:F7:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/90d6e3e8-8976-3a11-89ab-7dc98f3531bc.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     8075
IP address blocks:        167.92.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:ab:d9:7b:26:02:89:ef:b7:c3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cdc7434-e1cd-4dee-b0fa-1d7097306b9c
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=66869d33-9ece-427d-bcaf-c395653948cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:1a:8b:11:81:1c:95:57:52:14:a3:cc:5b:
                    d2:62:4b:84:82:c0:7f:e7:c4:91:3d:21:af:1c:fe:
                    ea:2f:01:3e:16:46:e5:43:bf:ae:c5:4b:03:7f:47:
                    9c:bc:0c:bb:20:b6:da:f4:ce:6a:bb:b4:5b:e3:f4:
                    3f:9d:19:be:1e:7b:3a:c8:b7:7c:86:5f:3e:0f:fc:
                    d9:de:f8:f2:1f:42:89:7b:b0:c3:eb:10:a2:31:53:
                    67:b1:4d:4a:66:d0:72:fb:0f:87:f4:e4:d4:c5:ce:
                    56:e8:03:aa:25:3d:59:0b:fd:35:07:68:0a:a4:7c:
                    5a:e8:68:e2:20:08:25:4b:b5:aa:ef:91:23:e4:ce:
                    79:c2:96:15:67:11:67:74:87:7e:53:99:cf:70:f1:
                    15:63:d4:d9:71:38:10:f4:bb:22:50:c5:70:3d:a4:
                    69:2e:cb:b8:8a:b4:3b:46:af:cb:9f:f2:90:92:23:
                    9f:dc:46:8a:e4:85:20:c6:ca:02:40:30:e5:bd:c1:
                    c9:8a:93:87:c0:d3:ae:2a:85:44:a4:0f:08:1a:ad:
                    87:f0:7b:95:c6:d6:ca:98:24:bc:ed:fd:b8:51:50:
                    40:73:76:54:a8:4a:1d:f5:1a:c1:e0:9b:0b:df:15:
                    40:a2:a3:30:45:34:cb:55:19:5a:4a:ae:97:d7:4e:
                    b9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:21:D1:5A:A2:A3:86:1D:03:83:1F:4F:80:5F:DE:13:EC:FE:FC:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/90d6e3e8-8976-3a11-89ab-7dc98f3531bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.crl

            X509v3 Authority Key Identifier:
                keyid:6F:CA:99:28:29:8E:36:15:9A:84:B9:A9:0D:76:8C:07:40:F1:F7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.92.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:70:dd:b0:bf:af:50:18:53:5f:bf:b7:43:8e:6e:10:da:63:
         5e:95:77:33:e7:9a:db:0e:d2:16:20:34:73:60:6a:a4:c9:8f:
         f4:d5:76:03:55:f0:48:a8:8b:c0:0a:06:f4:da:6c:f8:c3:53:
         41:7e:ce:78:40:1a:3e:b2:37:56:8d:7b:ce:1c:16:cf:37:4b:
         45:56:a2:85:50:15:5f:f0:16:7b:a6:1a:fc:ad:bf:c7:66:63:
         02:cb:55:66:b7:01:db:1c:83:be:75:14:1d:fb:1e:de:5b:b7:
         a7:6a:27:79:9d:5e:63:ba:0a:19:45:e3:0e:07:72:03:d6:8b:
         5d:89:87:fd:c5:66:0c:60:ec:a0:82:0a:34:a0:60:40:e6:18:
         67:89:71:1f:e7:61:8c:e7:af:83:ff:ab:04:3c:0b:a6:37:87:
         b2:ea:a5:1e:f7:be:bc:a8:b0:a5:f1:1c:7d:17:60:93:46:96:
         a7:9e:b9:45:e5:fb:31:7d:a6:1f:04:52:13:59:32:bd:0e:98:
         16:64:c4:b9:f4:7d:14:60:c6:d2:55:d6:df:d8:6a:8d:27:4b:
         b6:a3:34:01:3b:89:8f:f2:ee:87:0f:e0:12:8f:00:e0:09:fa:
         7e:da:40:ec:c9:41:49:b7:7b:70:55:91:a2:0b:89:9f:d4:92:
         f6:90:c3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:57:11 2025 by rpki-client