Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/c25ee94f-8e16-3936-9e4b-59697afbf11d.roa
File:                     c25ee94f-8e16-3936-9e4b-59697afbf11d.roa (raw, json)
Hash identifier:          7o+5kJHpQF5Q/XxGGx5r7htquJ5Q2JhbjEnAdueKWXI=
Subject key identifier:   0E:10:2A:7E:D3:A2:0A:F3:9B:C0:A9:55:57:07:E4:54:62:C2:0E:C0
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285849A4BB6C2081FD17620FCB7100
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/c25ee94f-8e16-3936-9e4b-59697afbf11d.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        209.107.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:6c:20:81:fd:17:62:0f:cb:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=b634fa2e-29d7-4d8d-aaa8-53a7a2dea6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a9:5d:29:b9:d2:8a:e4:66:c0:09:99:da:93:
                    9a:7f:37:22:63:85:b8:8c:56:c0:36:ad:1a:3d:b0:
                    19:ee:02:6c:2d:01:dc:bd:e3:8b:37:eb:17:cb:87:
                    a8:23:c4:85:f6:44:98:a7:e7:59:8c:e5:e0:98:1e:
                    c4:e6:9d:96:12:f3:54:9f:23:8b:a1:40:b5:19:11:
                    b6:13:14:dc:67:01:30:b3:88:c8:d5:c6:b1:67:ad:
                    f4:69:63:5b:af:a1:8e:ee:b6:99:c7:d0:5a:f6:e2:
                    aa:1a:a3:94:6d:46:d3:f6:e5:20:d6:58:f4:9c:6b:
                    21:72:c3:f4:e3:74:50:4b:9e:f9:ba:00:6d:f2:f9:
                    30:67:ac:6d:ae:16:52:88:77:5f:3d:55:cb:4e:8a:
                    59:43:c8:fc:b0:48:c8:5d:7a:da:f6:2d:91:b4:90:
                    e0:82:30:0f:3c:49:e0:e9:c9:28:9e:7d:1c:21:26:
                    ab:41:20:9a:3d:d2:ca:00:4c:4b:d5:38:94:82:e2:
                    9c:4d:a4:07:2d:72:7a:78:b2:c8:96:96:b6:f3:f4:
                    5a:6f:16:79:9a:12:15:cd:b4:5e:1d:47:29:61:5e:
                    de:20:0f:be:d3:55:37:45:98:75:9e:c6:6e:4b:d4:
                    1d:70:0b:09:76:e7:af:37:2d:12:72:23:5e:48:96:
                    45:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:10:2A:7E:D3:A2:0A:F3:9B:C0:A9:55:57:07:E4:54:62:C2:0E:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/c25ee94f-8e16-3936-9e4b-59697afbf11d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:14:ea:34:73:45:90:fd:96:8c:b2:2d:08:46:de:33:0f:e9:
         0a:f6:4d:66:1f:1c:52:17:53:7d:82:92:28:a4:c5:f5:dc:08:
         84:19:43:0a:4e:9a:fd:17:2e:07:12:f0:1d:2e:bb:f7:71:a5:
         84:46:43:d9:2b:37:ca:27:9e:40:ff:1b:f8:a3:8d:6f:ea:ba:
         23:fb:b4:d1:20:96:fe:1a:0f:84:71:bf:70:a1:02:66:08:45:
         5e:14:6d:3c:a7:ba:5f:cd:ce:bc:5b:a1:a1:44:81:9a:05:94:
         da:41:23:9d:b6:a6:bd:bf:d0:5f:d3:f6:d6:41:08:91:9c:d0:
         26:da:1e:31:08:c0:5d:bc:2f:55:3d:14:9e:e1:c4:1c:a5:37:
         5a:0c:12:50:b8:ae:d8:a9:f1:71:b6:bf:52:ad:d4:9d:47:b9:
         a7:7a:94:54:07:2c:a8:28:20:66:6a:6b:d3:cd:4a:7a:22:d6:
         73:77:ed:ac:d3:99:16:6c:0e:47:e9:27:34:23:df:31:08:06:
         ea:26:1c:13:e5:73:26:24:e1:30:6a:b0:80:41:ff:9c:ee:41:
         7d:39:f1:93:d7:9b:86:81:d9:0f:4a:fd:d0:f3:60:13:8c:ac:
         ed:26:47:8c:c9:c6:d1:34:cc:85:1f:64:6f:3c:17:eb:5a:45:
         c1:9b:a9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:41 2025 by rpki-client