Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ed1e1542-18a5-3490-9ff4-59f63b39eb9f.roa
File:                     ed1e1542-18a5-3490-9ff4-59f63b39eb9f.roa (raw, json)
Hash identifier:          tXNln6G/6zcjeSirZGvJVgqmn8tN+bYAgYUElPoNVwo=
Subject key identifier:   2A:C7:19:C6:35:E6:C7:14:17:FC:E6:4B:CA:36:F9:38:0C:90:AE:88
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285849A4BB66E2C3D6237B342EE9A0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ed1e1542-18a5-3490-9ff4-59f63b39eb9f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        209.107.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:66:e2:c3:d6:23:7b:34:2e:e9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=3b5ac267-84ab-4c5c-b5c7-34bcc2b2fe38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:94:cf:dd:82:17:8c:56:52:85:bd:2b:71:52:
                    98:9b:b0:f3:5a:9c:18:2d:cd:52:f2:e9:8f:e4:2d:
                    88:35:30:c6:ad:76:03:32:d3:e6:be:ae:18:82:c2:
                    b2:ff:e3:6d:43:df:55:88:0c:1e:29:e0:3a:1f:69:
                    66:86:7c:b6:0e:30:9c:9f:9e:78:35:31:c3:ef:d2:
                    cd:5d:0f:60:ed:84:49:77:bd:9a:20:91:28:62:e0:
                    e3:30:ef:fb:96:4f:96:ac:1c:6b:1e:db:02:1b:f4:
                    81:17:09:c0:22:13:c5:9f:5f:d4:cf:ad:7b:f5:15:
                    14:2b:d1:0c:58:ff:cb:02:a0:e2:10:1e:0e:e1:4a:
                    2f:c2:99:48:f9:c0:60:13:cf:37:9a:8a:da:e7:45:
                    ff:4b:62:0e:61:31:7b:01:7c:12:4c:cc:de:b4:cc:
                    d1:50:e2:c3:af:43:7d:74:bb:12:16:84:d5:69:d2:
                    ce:43:37:b4:bc:8b:76:db:c1:53:63:2e:b1:09:38:
                    a6:76:83:3d:18:d3:ae:00:9c:fe:e5:6b:08:7d:06:
                    d1:1d:cb:c9:c9:a6:62:d0:2d:1d:b5:ef:85:45:39:
                    82:5a:54:f0:4b:0a:b7:76:d2:c1:9c:c9:9e:a2:d3:
                    70:ad:91:86:d5:24:86:7e:a2:c7:c6:3e:80:75:e8:
                    22:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C7:19:C6:35:E6:C7:14:17:FC:E6:4B:CA:36:F9:38:0C:90:AE:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ed1e1542-18a5-3490-9ff4-59f63b39eb9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ad:f3:16:a6:0d:42:4d:ca:11:74:08:34:dc:e2:c8:ab:56:
         e7:40:83:15:9a:cf:b2:6c:82:54:f6:8d:e3:40:88:1e:a7:b4:
         d9:1a:33:56:f1:05:99:51:c2:4b:a9:28:52:20:87:7b:c7:a0:
         a1:45:69:ae:f9:a9:de:3d:e4:41:bc:47:24:f8:3c:c0:91:e3:
         43:52:54:87:99:58:be:24:24:cb:ee:36:8b:68:3e:de:74:52:
         96:0c:f2:ab:17:d7:23:dc:65:b1:d1:97:74:3c:c6:0d:83:c2:
         bb:ad:e3:5d:d9:cd:7b:a5:89:22:13:fd:07:fa:f5:5c:f0:8b:
         0b:67:51:1f:73:67:83:0b:4e:3a:6e:cc:6b:f6:72:3f:d9:54:
         66:66:bd:94:9a:0f:eb:d3:f1:76:49:3b:02:5a:ce:4b:25:5b:
         2d:5b:66:54:90:0c:1b:a0:5c:a7:6b:4f:03:5f:48:1c:48:a3:
         f2:6c:45:f5:42:ec:8a:ff:d2:78:79:1c:a0:ae:9e:39:c8:f6:
         d4:5d:94:27:f4:8a:16:cd:f9:30:a0:99:ab:d0:16:aa:81:ba:
         89:80:ea:b5:2d:07:e3:88:68:38:96:41:72:48:89:51:fd:9f:
         49:23:65:4b:7a:ea:fa:c0:20:ce:1b:0e:c4:aa:49:b5:30:05:
         49:c7:ce:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:22:44 2025 by rpki-client