Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b4b0db6-95d7-3cfd-bab1-8c6d9bce8c09.roa
File:                     3b4b0db6-95d7-3cfd-bab1-8c6d9bce8c09.roa (raw, json)
Hash identifier:          of/PI77iqLbgr3WQn8L8NKpPvJhjUeekGL5aJy30i4M=
Subject key identifier:   14:4C:D2:D3:BF:26:48:E7:0A:1D:9B:67:EE:68:21:AA:4F:0A:63:69
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849B14A4A8B4BA738D0E28D8740
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b4b0db6-95d7-3cfd-bab1-8c6d9bce8c09.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     30288
IP address blocks:        207.106.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:4a:8b:4b:a7:38:d0:e2:8d:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=ae65aa56-4fe0-4860-89b0-c70292b6a4e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ea:7a:62:c4:a6:94:80:af:1a:7d:b5:e7:9d:
                    e3:68:63:83:0d:01:30:f7:6f:08:31:82:bf:d4:35:
                    3c:55:9e:49:f2:49:43:a9:e7:17:95:ca:f0:3b:16:
                    ac:63:ad:18:ce:29:9c:8a:e7:f0:4a:8c:10:c9:25:
                    a6:5f:19:e2:b0:fd:38:0a:db:15:fb:05:45:15:84:
                    c1:15:04:35:12:96:70:69:df:7a:dc:3c:73:c2:f0:
                    ff:66:65:23:64:54:06:1d:e8:7a:71:da:f3:27:43:
                    7b:3e:ca:14:b5:ce:d0:7a:d8:87:03:12:4a:22:56:
                    8c:94:29:e7:8c:be:e1:ef:30:96:b2:fe:8a:fa:95:
                    ff:e8:7c:fb:bc:3b:07:8b:ff:ef:78:d7:46:7f:6b:
                    e1:c1:28:00:ec:58:11:3b:2e:14:bd:05:2d:c2:c8:
                    cc:11:23:42:cd:e8:34:05:c0:da:80:c4:42:05:87:
                    1e:98:80:9e:f6:e2:c4:bd:d7:1f:c4:73:0f:e1:f2:
                    57:cf:e0:1a:1b:2e:6f:e2:69:68:1c:f5:46:3c:a9:
                    3f:da:42:f7:fe:41:37:6b:e1:b2:81:50:f0:27:5d:
                    6e:9e:88:ba:44:24:a6:32:39:ef:a4:b3:5d:70:79:
                    f0:86:5a:63:89:49:1b:6d:95:d3:d3:fc:78:fc:b8:
                    4b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4C:D2:D3:BF:26:48:E7:0A:1D:9B:67:EE:68:21:AA:4F:0A:63:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b4b0db6-95d7-3cfd-bab1-8c6d9bce8c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.106.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:17:97:ce:c0:48:e4:c0:81:7e:ed:a8:85:21:47:a0:7d:32:
         31:e0:a0:c7:3a:75:bd:81:80:0e:49:20:20:8a:ef:5e:15:19:
         89:b1:d1:b0:bf:33:eb:78:b2:d4:ab:f5:02:ee:e6:a3:a1:58:
         bf:28:4e:e4:12:e4:bd:09:cb:65:4f:0f:71:34:60:27:03:c4:
         3e:e5:96:f8:a7:dc:a9:bc:c4:8b:26:fd:03:ef:03:62:4a:a4:
         16:be:9c:93:60:7a:d2:15:ec:55:7d:1e:fa:ef:a6:7a:76:4d:
         23:48:6a:72:1c:78:e4:c2:b3:af:e5:5b:15:b3:93:0a:2c:32:
         d1:f7:77:95:ae:dc:b0:1a:bf:19:85:38:35:18:ce:b3:b9:2e:
         cf:c0:dc:12:ea:5c:09:f8:1c:f7:c2:24:e6:c7:71:b9:97:6a:
         84:7e:1b:7f:69:e1:3c:8b:a7:b6:9f:2b:f9:99:f1:b2:2a:42:
         a8:91:90:5c:0b:ec:a0:8c:19:7f:eb:17:8d:ef:15:71:92:40:
         09:2a:77:72:46:b0:43:a6:8e:81:87:6b:48:48:0a:8e:d9:cb:
         5b:dd:85:77:6d:d1:03:90:9c:dc:1a:79:4b:6e:0a:7a:4e:13:
         24:7b:c9:56:0b:a2:f1:d3:09:7c:2e:20:31:25:2a:83:3d:d3:
         9b:1f:3e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:49:05 2025 by rpki-client