Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/ed3eb783-8f94-3d0c-9b5e-e26d751b90d7.roa
File:                     ed3eb783-8f94-3d0c-9b5e-e26d751b90d7.roa (raw, json)
Hash identifier:          /BYDFBoRY1Ayja8ksjCFSzJu0WnWjUT5PoHaIXdXSX0=
Subject key identifier:   4D:76:03:84:8B:5A:2A:0C:C1:BB:31:E4:14:F9:4F:31:67:CF:5F:29
Certificate issuer:       /CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
Certificate serial:       010D0C9F4328584964844A7E33F95F636D841EE0
Authority key identifier: 62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/ed3eb783-8f94-3d0c-9b5e-e26d751b90d7.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        207.174.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:4a:7e:33:f9:5f:63:6d:84:1e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=245c35f2-c377-430a-9ef4-512bc6688afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:f4:14:da:8b:11:0b:be:b4:67:f6:64:30:
                    20:d8:df:37:1a:31:7d:2b:6e:64:37:e7:f2:e3:54:
                    3d:ac:3a:a2:a9:71:ad:c2:30:3e:aa:ff:be:bb:06:
                    a7:a8:2a:2b:9a:23:bc:fd:63:fd:88:fe:bb:d7:72:
                    43:ee:1c:11:e9:b8:16:7c:44:39:52:1c:76:95:15:
                    45:66:ad:e6:43:ac:61:e2:52:b7:01:f2:ee:cd:63:
                    b6:36:4e:a0:77:d1:34:79:1a:28:3c:ec:37:d9:70:
                    43:d3:4f:e0:df:50:16:78:63:ed:c3:55:b1:94:18:
                    73:12:5c:c4:af:37:3d:eb:f5:d4:25:48:04:14:3d:
                    ed:83:78:db:1b:ee:3f:11:b3:42:a8:fe:0b:0f:24:
                    be:cd:f7:b0:35:60:cd:28:66:06:06:17:9b:f4:ea:
                    73:b1:c4:49:61:11:bc:d9:6c:5a:6a:56:e0:ff:74:
                    23:69:2f:ea:4a:46:6d:d8:1d:dd:57:79:8b:2b:4a:
                    22:a6:6c:55:c3:c5:9e:4a:85:74:59:ac:a9:2b:1f:
                    31:e1:5f:9f:48:c6:b7:40:55:9d:48:89:73:97:e4:
                    12:cd:17:1c:2f:00:e2:68:86:2a:fd:9a:34:61:c7:
                    86:d8:1f:ea:03:67:af:86:82:9e:1b:87:b1:51:d7:
                    e5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:76:03:84:8B:5A:2A:0C:C1:BB:31:E4:14:F9:4F:31:67:CF:5F:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/ed3eb783-8f94-3d0c-9b5e-e26d751b90d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl

            X509v3 Authority Key Identifier:
                keyid:62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:8d:1d:c8:cc:a9:c0:2d:58:45:68:9a:dc:f0:80:2d:dc:a7:
         a2:e1:f3:3e:3b:58:a0:fa:57:91:a9:1b:65:21:dc:ea:91:78:
         81:b5:c1:1b:e7:1b:f5:d1:b7:02:0c:32:c0:13:50:bd:a8:36:
         3e:01:e4:17:37:f6:1f:b5:9a:26:95:8c:58:6c:9e:0b:67:7d:
         32:ce:ef:16:68:92:a1:b1:6a:25:f1:e4:43:63:8f:76:c2:2a:
         f3:13:29:3b:c0:fe:3f:1a:32:7e:35:ff:d1:ee:1f:f5:b1:2f:
         85:2a:36:56:d8:89:9f:1a:f7:c6:ff:7e:d9:72:b6:fa:b0:7f:
         7c:5e:a7:c2:9a:96:21:34:ae:8f:d8:67:b1:3d:43:94:bd:b3:
         24:8d:51:d4:f2:3f:61:b5:61:15:9f:54:95:1f:8c:d1:7b:fc:
         79:27:e2:d8:87:e8:e1:ea:26:cf:7f:e3:26:92:4f:40:65:74:
         79:e0:25:e2:43:89:09:4a:55:d9:2c:ff:3f:43:47:87:cc:fe:
         85:52:99:9f:ed:2b:a1:95:db:45:2b:94:be:fb:8f:69:53:14:
         90:57:39:cb:5e:50:54:3c:2c:c9:06:0d:93:54:47:53:52:32:
         49:b6:e1:f0:e2:34:c1:99:32:2d:26:38:47:3d:71:c8:f3:26:
         5e:94:fb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:50:08 2025 by rpki-client