Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c01d2775-4ee1-3997-97b7-6fc4e2f34c7a.roa
File:                     c01d2775-4ee1-3997-97b7-6fc4e2f34c7a.roa (raw, json)
Hash identifier:          xtVtXBaUvUqy50KiIxNPK+0nDXbTfChcerV0gRpuBrY=
Subject key identifier:   8F:5B:F0:BF:9E:BC:58:33:ED:BB:E5:8E:AA:A7:20:1E:4D:D3:34:6E
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285849A61F42D936F8ECCE55A804C0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c01d2775-4ee1-3997-97b7-6fc4e2f34c7a.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     3561
IP address blocks:        208.159.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:42:d9:36:f8:ec:ce:55:a8:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=7554d945-aa4e-4b23-b699-8d2e8d1bc6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:a7:5a:04:56:99:c5:0f:dc:15:05:9a:10:
                    89:70:a9:d7:72:72:f5:d4:f9:79:dd:d5:50:44:b4:
                    f2:26:2a:5f:f9:42:16:45:51:af:e5:ba:1b:fc:9b:
                    04:ec:1b:ba:7a:94:45:70:a9:52:32:c2:64:6b:e0:
                    cb:54:ac:e7:53:0b:92:8b:df:fc:8d:35:d7:d8:17:
                    18:63:d2:53:2a:7c:2d:8b:93:f5:1e:d8:4f:a8:4b:
                    91:80:38:11:10:f3:b7:e3:f2:f9:5f:98:e4:e2:00:
                    13:68:cd:a7:b6:b9:9f:1f:a5:18:5f:ef:33:02:6e:
                    f8:93:a0:5e:73:34:f3:17:b9:30:0b:ef:d1:f2:df:
                    fe:74:1d:94:07:df:cc:42:3f:36:08:74:08:79:d8:
                    59:4f:50:72:52:c7:86:66:85:a5:d8:e2:05:50:84:
                    0d:80:83:19:4b:19:b2:96:bb:f8:87:64:9c:b3:88:
                    8b:4f:3d:d2:c1:84:9f:4e:15:74:38:00:25:c9:75:
                    ba:b0:76:f0:8f:8d:8f:6b:7b:09:94:cf:c0:8c:7f:
                    9e:1a:db:e1:d3:4f:58:da:c8:bf:93:4a:9a:31:cf:
                    78:d4:96:cb:5f:e7:02:1d:6c:ad:e1:1a:d3:76:68:
                    a3:3f:4a:0e:cd:e2:19:ac:66:c4:be:d2:ac:4f:d6:
                    7e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5B:F0:BF:9E:BC:58:33:ED:BB:E5:8E:AA:A7:20:1E:4D:D3:34:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c01d2775-4ee1-3997-97b7-6fc4e2f34c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.159.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:de:46:58:ac:0d:8b:a2:52:fd:0e:37:ee:4e:5f:c5:05:c0:
         12:ef:b3:4b:48:ad:92:ca:6d:bc:ba:7c:8d:64:f9:49:c3:cd:
         08:38:67:a3:06:b2:41:27:24:8d:d0:9a:dc:1a:35:ba:a5:e9:
         a6:9c:d2:a2:5d:9c:58:77:58:6f:ac:d7:42:44:50:01:19:6c:
         a7:a5:7c:b6:54:6c:69:a6:71:a0:15:dc:42:0a:d2:78:c3:51:
         bc:d1:06:ac:b6:6c:c1:a3:20:62:8e:91:02:20:fb:f0:73:65:
         9c:e6:3d:9c:a8:38:29:9c:5f:a4:e0:09:ab:65:c2:23:2a:78:
         62:1c:91:f7:85:b7:95:d2:bd:61:23:d1:e6:29:6a:a8:aa:eb:
         70:e0:0a:d4:2f:54:54:35:f0:76:c4:96:f3:30:84:f5:30:70:
         ba:2d:d2:4b:8b:90:2d:9a:e0:41:67:a3:4c:40:1b:ed:8a:e1:
         36:30:f8:66:cf:d2:63:37:79:71:1c:b9:dd:8c:34:bf:2f:23:
         a6:8c:95:ac:1b:63:92:d5:5e:87:5b:ce:42:85:3c:1d:4c:0a:
         04:e6:fe:ea:58:a0:f2:cb:78:8c:5b:79:9f:e8:b5:c5:6e:fc:
         50:f1:cf:d8:5e:27:c2:a7:b2:7a:55:9d:c5:30:5c:fb:02:ec:
         1d:87:ec:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:02 2025 by rpki-client