Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/353f216d-9b24-3f3a-b26c-686bbb880989.roa
File:                     353f216d-9b24-3f3a-b26c-686bbb880989.roa (raw, json)
Hash identifier:          uUZXaaK9iiFZWix5nAE/3DlCoSGgO7KonJN9+y3FoGo=
Subject key identifier:   71:15:C2:66:89:A6:3E:C3:E8:4C:93:93:E4:11:7D:CB:2E:1E:B2:66
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F4328584A1B5FFB769B8CC2149299F880
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/353f216d-9b24-3f3a-b26c-686bbb880989.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        207.2.117.0/24 maxlen: 24
                          207.2.118.0/24 maxlen: 24
                          207.2.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:fb:76:9b:8c:c2:14:92:99:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=6e581802-e6df-4267-b599-0d0ec47d456b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4d:65:d7:cf:68:83:6f:cf:ca:b6:77:9d:af:
                    82:b7:21:16:34:62:7b:4c:e1:69:19:42:03:21:4a:
                    25:a5:f8:7e:e8:50:d0:35:61:f4:c3:89:09:e6:bf:
                    16:25:6b:59:2a:28:f0:09:d7:3b:f3:d8:79:79:24:
                    86:5f:f4:3b:4f:97:01:7c:4e:11:04:ab:34:c1:e4:
                    c0:f6:71:39:8b:98:7a:09:9d:c9:8b:4d:6a:4a:99:
                    bf:35:96:4a:c5:99:03:4d:d5:be:81:db:a6:22:15:
                    c8:7e:cb:34:5e:d3:00:40:4c:ee:1e:aa:cb:58:ec:
                    a4:43:35:d3:3b:c0:7d:77:91:83:cf:01:6c:a9:1f:
                    8a:50:ef:1b:8f:c3:48:f4:bf:7d:30:ad:51:bd:59:
                    ce:33:9b:d9:e0:17:bc:be:85:47:e7:75:4d:2d:0f:
                    6c:3b:60:f1:13:cb:2c:e5:53:a4:8a:07:ea:68:3a:
                    75:7a:79:73:1b:7c:85:3a:37:01:ce:be:58:ff:bc:
                    74:57:51:9e:aa:ff:ac:16:a1:42:5c:5f:ee:24:ab:
                    0b:fe:e9:44:dc:43:49:c8:8a:05:50:ee:c9:cc:40:
                    a6:88:d4:99:de:35:b5:55:8b:60:c3:dc:9e:1e:eb:
                    1f:f7:a2:8f:a4:34:c9:da:b6:0b:2e:e5:9d:50:a3:
                    0b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:15:C2:66:89:A6:3E:C3:E8:4C:93:93:E4:11:7D:CB:2E:1E:B2:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/353f216d-9b24-3f3a-b26c-686bbb880989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.117.0-207.2.119.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:1e:49:82:2d:a5:d4:c8:0a:77:b4:00:02:69:47:52:79:29:
         a1:8b:14:3c:99:e6:ff:40:11:54:84:11:e4:24:fe:cc:52:95:
         ed:ae:46:54:b9:02:bd:10:50:53:db:35:97:f6:33:57:b0:2c:
         41:11:d5:04:1e:72:c3:7b:9d:c5:4d:44:45:7c:3c:54:a7:b5:
         79:6a:a4:cc:a8:8b:74:f8:8e:ec:f2:4f:69:74:6c:bc:1b:2d:
         e4:ce:dd:7a:2f:0f:51:2c:7f:65:f5:61:81:f8:ea:54:fe:e6:
         4e:ae:3e:87:12:c7:a7:a1:05:46:8c:be:4a:59:14:8e:1c:01:
         9e:09:eb:0a:3e:02:ef:5f:e0:6e:9e:1a:16:aa:57:be:4f:ef:
         74:8c:67:95:0a:56:70:69:bf:d2:91:88:10:c7:80:8d:6f:c3:
         eb:bc:67:f3:27:07:e6:96:dd:66:89:37:27:53:57:28:64:0b:
         9d:47:0a:60:a6:ce:ce:9e:5b:f7:2b:99:5f:49:9c:a3:16:02:
         25:0e:9d:85:fd:92:17:56:31:7d:64:3d:cb:92:fe:8d:a0:b3:
         52:fb:a5:28:4d:f4:8f:b5:f5:f6:5d:f4:44:7e:de:d0:28:88:
         d4:df:dc:35:b1:d8:e8:ed:fa:7e:ba:56:06:5c:6f:e9:70:34:
         97:74:c0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:56:47 2025 by rpki-client