Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/81fd3d75-f499-398e-be0f-478cd3ebb591.roa
File:                     81fd3d75-f499-398e-be0f-478cd3ebb591.roa (raw, json)
Hash identifier:          utrERWf+tTZkgNURMnL7Qa8tsQSHLrpANHED1wF0ERw=
Subject key identifier:   98:D7:4B:FB:25:AA:43:64:1C:26:5B:3D:DC:62:68:80:B0:D5:EC:25
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F432858499CFBCA1DF46F9FBC81A650E0
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/81fd3d75-f499-398e-be0f-478cd3ebb591.roa
Signing time:             Tue 22 Apr 2025 18:27:15 +0000
ROA not before:           Tue 22 Apr 2025 18:27:15 +0000
ROA not after:            Mon 21 Jul 2025 18:27:15 +0000
asID:                     11404
IP address blocks:        209.236.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:fb:ca:1d:f4:6f:9f:bc:81:a6:50:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Apr 22 18:27:15 2025 GMT
            Not After : Jul 21 18:27:15 2025 GMT
        Subject: CN=0ad384ca-76e2-40fe-9e5f-1bfa4dd81f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7f:95:79:52:eb:cb:72:b5:c1:9e:09:cd:82:
                    9c:59:7d:ef:ff:51:d2:d8:0e:c1:1d:c8:7d:96:fb:
                    da:9e:33:22:1e:30:6e:32:ca:1d:8a:2f:41:4c:39:
                    6b:aa:aa:06:04:cc:d2:a3:8e:18:1b:98:f9:cb:67:
                    de:b4:a0:c1:cf:49:bf:d6:aa:c3:70:1a:8a:1b:99:
                    9a:20:5d:de:32:39:15:63:34:fc:47:e9:de:e8:f3:
                    dd:2c:0b:cf:35:f4:fb:f3:1d:f6:dc:cf:94:2e:88:
                    07:aa:60:ce:d2:cf:3d:6a:ac:e9:18:6e:58:b8:fe:
                    ee:4c:b9:19:f1:f9:18:bf:0a:66:27:47:d6:c0:02:
                    1c:dc:b3:95:d3:68:6c:ae:33:9c:52:6e:f6:05:8e:
                    73:33:8a:b5:3e:69:30:43:9c:84:4e:11:56:4d:49:
                    75:e3:1f:19:19:1e:38:d1:01:ef:83:7f:1d:57:05:
                    85:04:a4:58:70:16:68:3d:d8:b0:d3:c3:bc:6d:0e:
                    c6:c6:a0:cb:30:24:2f:e0:0b:f6:55:0b:58:14:61:
                    19:4f:f0:86:91:7a:99:3d:5d:b7:dd:8b:ab:d0:01:
                    b4:00:41:c4:9a:c1:47:49:d5:f2:bd:87:7f:81:f0:
                    c3:1e:70:bd:ea:37:da:7d:62:57:65:35:9e:9c:b5:
                    bb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D7:4B:FB:25:AA:43:64:1C:26:5B:3D:DC:62:68:80:B0:D5:EC:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/81fd3d75-f499-398e-be0f-478cd3ebb591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:3e:c5:42:b6:53:90:2d:e0:f7:c3:67:63:94:77:51:f2:92:
         05:47:d4:29:10:bd:2a:44:f6:5b:41:87:f5:e8:4d:1b:3f:bc:
         58:88:72:48:9c:5f:40:db:bd:38:83:71:92:c9:0f:6a:aa:bd:
         2f:24:e2:65:79:fb:19:88:fb:05:8e:7b:5e:74:e3:ff:3a:28:
         2a:57:d0:1e:63:48:10:8f:80:65:f9:b1:fc:2f:e8:90:a1:fe:
         24:19:f1:83:12:f6:50:db:91:67:ac:c3:63:37:b8:e8:1c:6d:
         cb:93:5e:90:88:89:f0:b8:88:bb:60:ec:1d:12:87:e6:ca:d3:
         8e:42:25:0e:d2:18:6c:58:f8:ca:9e:af:73:88:99:c0:4e:cc:
         44:26:ec:40:b8:fc:68:13:52:06:a9:57:a3:38:a6:08:c9:e9:
         27:55:c6:2e:12:04:1d:58:4e:e3:14:db:17:00:2b:40:6c:dc:
         e9:c4:4f:d3:7a:6d:f0:f5:aa:1e:ee:62:b1:a1:57:ac:0f:c3:
         33:4d:02:f8:71:79:95:60:f9:60:ce:af:2a:9d:d5:83:05:12:
         96:ad:41:46:e4:d5:54:81:f3:61:37:3c:fc:ad:62:c0:d2:21:
         03:b5:95:9c:66:22:15:6a:26:f4:2a:f9:84:a0:bf:7d:b1:d4:
         c7:15:6a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:01:58 2025 by rpki-client