Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6e2ea774-1d47-3de4-ab0f-4a1bd2fc791d.roa
File:                     6e2ea774-1d47-3de4-ab0f-4a1bd2fc791d.roa (raw, json)
Hash identifier:          cEz9AI4PujC0wgOP4jIKI8LpzoQe03EbGmO9jshJXWg=
Subject key identifier:   45:B1:81:3D:29:D2:AA:87:06:A8:CD:86:07:DB:67:61:D1:FD:40:8F
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858499DBF2AC4473D9C3327FC9620
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6e2ea774-1d47-3de4-ab0f-4a1bd2fc791d.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     852
IP address blocks:        207.194.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:2a:c4:47:3d:9c:33:27:fc:96:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=f983b5d4-eb29-4fbc-a94d-4b32717d174c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:02:a7:02:39:78:6f:ae:63:7e:ea:7f:e8:a9:
                    48:cc:1d:27:39:81:2e:48:ba:cb:c9:d2:02:7a:11:
                    df:3a:54:c5:5c:6c:3b:6d:95:f8:75:b8:bd:8f:86:
                    9e:7c:dd:ca:4d:30:a9:12:6d:d2:a4:3e:14:94:af:
                    88:0d:ec:4f:37:4d:32:47:2a:88:03:4b:19:79:31:
                    ec:62:3c:04:07:ff:46:10:18:74:4d:14:13:eb:e7:
                    1e:e1:9d:a8:b2:95:99:81:4d:bb:1f:bd:de:c8:d2:
                    39:b2:b6:89:25:de:61:4b:fe:63:26:db:2b:5e:49:
                    d6:52:6f:7c:d1:8e:23:81:f3:57:42:ef:3e:9c:79:
                    f9:5a:cb:59:8e:15:ad:0b:9d:35:12:90:74:c7:0a:
                    c6:65:66:ff:10:7a:da:bb:a4:b2:6d:99:2e:8d:c3:
                    5a:0b:83:5b:79:f8:a2:b1:4a:d4:02:e8:52:07:51:
                    2e:a7:87:3f:e3:ac:44:ee:40:62:ae:10:7b:f1:12:
                    7f:41:e4:84:ab:de:08:3d:ab:e1:16:b7:bc:29:fa:
                    ef:74:31:78:2e:e0:f9:25:d5:5d:95:4e:ab:44:da:
                    f9:ea:08:36:81:e8:56:5c:39:c0:04:4a:7f:a0:92:
                    07:40:05:e9:fb:f9:37:51:99:3a:80:d6:9e:8f:f9:
                    9e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B1:81:3D:29:D2:AA:87:06:A8:CD:86:07:DB:67:61:D1:FD:40:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6e2ea774-1d47-3de4-ab0f-4a1bd2fc791d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.194.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f1:1a:c2:cb:11:c3:18:b9:51:ad:8f:cf:97:94:24:7a:2e:29:
         10:da:72:1e:23:7c:1c:02:fa:55:29:e5:ae:86:d9:8c:6b:7b:
         53:61:5a:0b:8e:90:34:91:52:fe:02:eb:c3:cd:3d:f0:e1:b3:
         5f:ca:2a:1e:af:ea:8c:7e:8f:d9:6b:88:60:e5:e0:3b:e0:76:
         55:84:df:0f:34:21:60:70:7c:b8:6c:86:6f:00:bf:bb:43:7b:
         42:58:be:76:f9:bf:22:37:48:33:de:72:c9:95:de:f3:e5:dc:
         ff:7f:f5:24:03:3c:a6:df:73:d1:16:56:51:56:17:88:a1:45:
         13:dc:c5:bd:c7:59:f8:ed:1a:ac:9c:7d:12:cf:2e:00:f5:ee:
         4d:f3:da:a7:59:24:4f:b6:10:e8:9b:c3:4b:6e:d7:5f:3b:ec:
         7f:47:37:9d:fe:f8:3a:d8:97:f2:11:d2:d0:b3:26:9b:22:1a:
         0d:32:3d:92:b1:51:4d:67:ac:8f:c0:6d:87:0c:40:a8:97:82:
         2b:f7:bf:bb:aa:9d:59:bf:0d:5e:9c:f6:34:68:82:87:da:2c:
         03:23:37:2f:f4:59:ed:0d:40:1c:28:c2:00:5a:19:7d:f6:ee:
         20:db:d8:54:27:33:5b:9e:64:46:e0:d0:a1:41:e6:28:d4:d0:
         15:d8:80:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:01:39 2025 by rpki-client