Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/3fd10732-1eb0-3925-8159-321291b44229.roa
File:                     3fd10732-1eb0-3925-8159-321291b44229.roa (raw, json)
Hash identifier:          bu4ak2Mthxz2o8i3o9/+H9JTRhvfPA9oi9LvLNpETjM=
Subject key identifier:   3E:F6:42:84:B8:61:4B:32:D2:CF:E6:D2:A8:06:BB:09:81:E2:12:A4
Certificate issuer:       /CN=879f8f15-9dc9-4663-aff8-bf62864b859c
Certificate serial:       010D0C9F4328584965E96F447EE2882C83341600
Authority key identifier: 86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/3fd10732-1eb0-3925-8159-321291b44229.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     398296
IP address blocks:        192.207.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:6f:44:7e:e2:88:2c:83:34:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879f8f15-9dc9-4663-aff8-bf62864b859c
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=f5b87ade-09ef-4c6c-8aa6-fca58bc4d569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:92:b1:a7:9e:aa:23:c2:6c:bb:ce:5f:d5:21:
                    75:51:74:b2:be:ad:4e:64:d0:25:8e:3d:d6:aa:44:
                    00:78:85:96:c9:1e:05:7c:59:56:7e:8c:77:8f:38:
                    8d:d2:12:d0:b6:af:54:2e:20:89:f7:b9:d7:6b:8e:
                    cf:b5:ab:ff:a0:ee:ad:6e:0e:90:39:de:c9:73:8d:
                    47:e8:57:d6:8b:9a:c6:7f:72:a1:6f:4f:5e:a8:bc:
                    5b:b7:d9:6b:10:36:32:7f:74:45:e9:14:8c:79:bd:
                    fe:c2:8d:95:05:51:31:46:3b:e2:f7:6a:90:d8:a6:
                    d9:c7:e9:bf:a7:74:c9:71:a7:fe:9d:98:b1:7b:e5:
                    d9:dd:58:4c:66:31:74:54:55:a9:bf:6b:33:4e:24:
                    38:8e:da:3c:b7:33:51:a5:95:f8:c0:8e:3b:c4:54:
                    40:6b:b6:ea:7a:66:75:c7:76:38:99:d2:05:c9:8a:
                    72:24:32:67:48:04:b6:54:47:43:5d:ba:48:0a:9d:
                    b2:9f:d7:98:a1:a8:62:b4:01:89:07:ce:9d:30:13:
                    47:c9:f1:2e:1d:62:bc:57:f6:68:56:21:fe:60:ae:
                    11:14:42:c1:91:d4:a8:e4:bc:6c:d1:e5:f4:8b:0d:
                    02:1e:82:e7:3d:22:b8:06:87:a0:e1:5f:b4:4b:a7:
                    40:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F6:42:84:B8:61:4B:32:D2:CF:E6:D2:A8:06:BB:09:81:E2:12:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/3fd10732-1eb0-3925-8159-321291b44229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl

            X509v3 Authority Key Identifier:
                keyid:86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b0:1d:f4:85:0f:3a:f7:30:77:81:ba:c8:f2:58:a7:88:1e:
         da:37:6d:31:f8:fa:37:b7:57:2b:99:91:50:42:49:01:b8:2b:
         31:3d:25:b9:3d:21:07:c8:22:67:53:3b:06:26:a2:c1:df:66:
         23:11:1b:79:54:ac:3d:b4:b1:03:fc:20:05:a1:7a:c9:5b:40:
         1b:0a:94:2e:0a:de:5b:bd:b3:94:88:fb:cc:11:4f:3b:44:fc:
         fd:9b:7d:a2:6c:0b:f4:60:18:7c:c7:12:6a:3f:84:cb:e8:d4:
         67:21:43:a7:36:be:70:97:f4:58:17:23:ec:9f:d9:50:45:03:
         6c:64:55:5b:2d:34:72:4a:b2:26:c0:87:90:3a:0c:e6:25:f1:
         0c:bf:2b:b8:a1:a2:fe:06:b5:cc:05:47:6b:8a:c4:76:44:c5:
         16:77:8d:a7:48:31:51:de:be:66:ea:27:7c:fc:88:60:71:4b:
         db:5d:b3:29:fa:03:45:5e:4c:ba:31:f3:7d:c1:a1:95:35:e4:
         d4:f1:f0:b7:2f:34:34:bf:5e:84:79:b8:a6:77:a9:05:f7:e7:
         05:68:43:60:e1:5f:74:14:1a:d4:e2:5e:1b:ec:b1:d4:ec:e0:
         6a:ea:2c:8a:a2:e9:22:ed:3f:ff:d0:4f:93:3d:90:a7:ab:f1:
         b8:27:6a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:31:24 2025 by rpki-client