Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b09e3c7b-d4da-3052-b836-3ec571164c65.roa
File:                     b09e3c7b-d4da-3052-b836-3ec571164c65.roa (raw, json)
Hash identifier:          yzs//PpsHDRjs2cwbQ+av4ksGAPEdyY3eHlsnqNYXcg=
Subject key identifier:   B8:DE:A4:31:4B:50:D9:1C:5D:A1:DA:E8:9E:04:9C:22:35:4E:38:EA
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584987AA6BC0B6CD67B92A7CA330
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b09e3c7b-d4da-3052-b836-3ec571164c65.roa
Signing time:             Tue 15 Apr 2025 03:11:20 +0000
ROA not before:           Tue 15 Apr 2025 03:11:20 +0000
ROA not after:            Mon 14 Jul 2025 03:11:20 +0000
asID:                     22351
IP address blocks:        216.250.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:aa:6b:c0:b6:cd:67:b9:2a:7c:a3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Apr 15 03:11:20 2025 GMT
            Not After : Jul 14 03:11:20 2025 GMT
        Subject: CN=b8631b90-aa62-40de-b821-8917f962bf34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c2:81:f7:b4:0d:81:ea:56:cc:53:ab:69:96:
                    f4:29:59:06:d5:c1:87:df:11:46:ed:22:6a:1b:23:
                    a8:a3:cb:9b:ea:83:17:01:17:03:5f:3d:c5:c9:78:
                    35:70:a7:e5:22:64:4f:be:4d:44:e6:03:3e:96:b6:
                    8b:84:c9:48:29:1a:62:d2:a7:50:9c:5c:73:b6:b6:
                    22:ae:9c:4d:1b:51:c7:12:d9:fc:21:f4:34:d0:7a:
                    3e:a1:b9:37:24:57:a9:87:1a:e5:a1:b7:bf:34:9c:
                    24:5e:c0:00:e5:e5:4d:ba:dc:08:1c:b5:37:bc:32:
                    7b:9c:a4:af:6a:76:0f:6f:03:28:b6:e9:0a:2a:ae:
                    20:26:9c:8c:2c:13:e4:cd:fe:8e:ae:80:81:04:87:
                    9e:d6:53:a5:b1:d9:e6:8a:84:c5:1a:d8:88:3d:2e:
                    56:80:8f:36:0d:7a:c6:9f:3f:73:ad:e9:bd:ff:c2:
                    31:8c:2e:17:2e:c5:ce:8b:43:6d:7f:a5:ff:c6:78:
                    0e:41:5b:7a:34:08:4a:78:7f:d0:08:ab:0e:dd:af:
                    e8:b4:27:cf:95:5d:a5:da:e3:f6:5c:cb:31:3c:25:
                    08:3c:c0:e9:b1:01:4e:5e:6c:4f:94:ff:46:e5:30:
                    7b:fa:53:fc:52:4a:46:d6:86:40:6c:98:d3:db:66:
                    93:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DE:A4:31:4B:50:D9:1C:5D:A1:DA:E8:9E:04:9C:22:35:4E:38:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b09e3c7b-d4da-3052-b836-3ec571164c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:10:ac:82:c5:20:fa:bf:01:44:18:27:9f:cb:01:cf:37:af:
         37:f9:94:a2:40:e5:81:cf:ab:16:78:e1:94:38:47:a8:80:ba:
         a6:26:13:83:fc:91:6e:2a:37:b4:da:d5:d0:ff:24:7d:ac:40:
         70:75:0d:92:3f:eb:30:7f:bd:90:d4:e3:94:be:85:60:83:c1:
         10:9f:9b:aa:55:ca:c2:d1:22:27:55:b0:ef:62:81:ce:72:27:
         4d:43:aa:be:80:5d:74:03:36:96:8e:2a:25:35:48:23:3d:2f:
         4f:c4:e5:e1:f7:47:c7:b3:de:5a:43:1b:9a:59:33:00:ed:47:
         6d:9b:bb:cf:fc:a9:66:b7:5c:07:55:e1:ed:4d:94:c9:6a:72:
         7e:aa:03:0f:4e:77:f8:35:13:00:e9:13:0d:eb:b6:c4:64:5b:
         6e:9a:cb:c7:08:6a:2b:0b:dd:1d:c9:d5:8e:34:05:d4:55:5d:
         29:c6:01:0e:51:f1:89:6f:ec:0a:e8:a2:1f:02:dd:6d:09:95:
         18:67:32:42:05:f4:e9:39:26:54:ba:ca:59:78:32:62:68:c0:
         56:83:dc:6a:cd:9c:c4:6f:17:85:9e:2d:e3:93:be:69:56:43:
         d5:70:71:46:07:37:b3:13:cc:21:57:16:89:ca:4c:e6:2a:d6:
         09:95:ed:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:48:54 2025 by rpki-client