Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa
File:                     79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa (raw, json)
Hash identifier:          7vEouP7+iYfgsgWV6Sc7jxbuuxgkKzEveOv70MhRctk=
Subject key identifier:   12:26:26:44:1E:FC:D9:A4:67:08:EE:39:54:44:51:86:DC:FD:F4:AB
Certificate issuer:       /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial:       010D0C9F432858499AF48C4701478B11A6B24480
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     7922
IP address blocks:        209.250.11.0/24 maxlen: 24
                          209.250.21.0/24 maxlen: 24
                          209.250.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:8c:47:01:47:8b:11:a6:b2:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=040af2db-a129-4be3-a6ae-38fb93ca4f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:70:61:8d:ff:69:c7:3f:96:ac:b2:a9:9b:
                    66:b0:b4:1d:86:17:91:df:32:cc:43:f8:73:db:c4:
                    e8:27:c4:ae:30:96:fb:d7:9a:51:fc:23:34:09:24:
                    17:9f:7a:5b:2a:48:dd:c0:3b:36:8f:14:bc:13:f6:
                    9a:7e:07:4c:0a:d9:32:c9:ab:71:9d:67:c9:a6:5c:
                    e7:59:ac:da:1c:fb:88:56:91:6b:93:d6:27:17:7a:
                    0f:e5:38:77:40:96:f2:a7:66:1f:ce:b0:b0:56:59:
                    b7:c5:43:c0:6d:e9:7f:cd:d0:04:9b:3d:75:70:6e:
                    e5:d8:c0:09:44:2d:29:14:a8:24:d6:90:56:5d:f2:
                    a9:30:97:aa:4d:0b:8b:94:c2:a5:93:7b:bc:aa:4c:
                    9a:74:77:6d:e8:ba:83:59:f6:af:fd:16:70:72:f0:
                    60:9d:04:3a:fb:ee:3c:36:bd:73:bd:9b:e2:21:d4:
                    49:be:c9:24:23:4e:de:1b:14:88:8f:d4:f7:21:6b:
                    e7:f9:86:23:b0:cc:db:96:67:f5:35:8e:6e:9a:bf:
                    15:1c:f5:41:df:f1:46:95:6e:19:98:7e:06:2b:6e:
                    26:31:22:c4:1a:47:8a:36:d5:b7:49:32:b7:f9:3c:
                    cb:f7:d9:61:23:37:49:fd:76:b6:4f:86:8f:b9:d8:
                    0e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:26:26:44:1E:FC:D9:A4:67:08:EE:39:54:44:51:86:DC:FD:F4:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl

            X509v3 Authority Key Identifier:
                keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.250.11.0/24
                  209.250.21.0-209.250.22.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:97:f5:3b:40:09:84:bf:ad:7b:2b:18:90:f3:b8:35:b8:f4:
         ad:be:43:86:8c:d6:7e:94:2e:6d:a8:fc:5e:64:7e:fa:cd:0f:
         5c:3d:f1:79:63:55:db:92:c2:f8:75:da:84:9c:ac:7a:79:a7:
         f1:d0:1b:25:34:b0:d3:0a:58:30:21:90:02:5e:1a:31:36:b3:
         d0:4d:dd:45:ba:f4:0f:59:52:df:9c:55:4d:99:a5:29:49:71:
         a2:d1:b9:9a:a0:29:cb:21:b6:f3:75:ec:55:49:41:e4:7a:a2:
         99:1f:9d:2c:ca:ae:40:7b:ac:ca:bf:ad:ae:aa:67:33:a1:50:
         2d:ee:95:70:ce:2d:0b:57:11:99:73:02:c2:07:09:52:db:35:
         6a:74:a5:c7:fa:44:d0:d0:93:e5:af:95:a7:3e:91:bb:27:a2:
         60:2f:45:35:1b:3e:35:a1:83:1f:58:a5:62:94:c2:e1:10:9e:
         b6:ad:1b:5b:01:f4:99:c8:8e:77:bf:85:80:ef:3d:a2:4a:e3:
         cb:ac:62:ae:aa:1e:bc:d2:ae:d6:56:fb:00:5d:7c:16:eb:38:
         ea:c4:a1:76:a2:9b:04:6e:4f:44:88:ce:6d:4b:fd:eb:20:ae:
         96:6a:a5:26:a4:79:e8:94:6f:a9:39:e3:8a:12:7b:10:e6:ec:
         26:69:73:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:51:58 2025 by rpki-client