Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/7d38a0b0-ea61-304f-9083-015162f8c564.roa
File:                     7d38a0b0-ea61-304f-9083-015162f8c564.roa (raw, json)
Hash identifier:          aLWZFm+Jyn7fjaLOfooJ12XtX44U9ZOlAJ/Dt/pU9Po=
Subject key identifier:   98:B8:97:32:65:C5:2E:70:B0:43:62:07:1F:2C:37:ED:D2:8A:ED:94
Certificate issuer:       /CN=21d44745-4ec9-4f13-a01d-70bb2f3adb8d
Certificate serial:       010D0C9F432858498CFF1141DC4DAC3684A6AC00
Authority key identifier: AD:34:72:50:B1:C0:C5:C8:0F:D4:CB:86:9C:EC:DF:D1:17:EF:2D:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/7d38a0b0-ea61-304f-9083-015162f8c564.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     376
IP address blocks:        205.236.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:11:41:dc:4d:ac:36:84:a6:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21d44745-4ec9-4f13-a01d-70bb2f3adb8d
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=7b393125-4e33-462e-b6ce-31217b3fa7bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a3:59:fb:ce:fb:30:13:1a:0a:af:81:bc:56:
                    05:2a:93:fa:4b:9d:b0:87:53:37:41:36:87:b9:68:
                    37:ad:8e:04:7a:b6:82:73:2a:a4:20:ee:28:0a:4e:
                    57:d7:f1:ee:3f:a2:a0:0a:bb:6b:46:26:ba:f5:4b:
                    91:7c:57:0a:90:72:32:3c:54:09:53:df:83:31:09:
                    22:29:21:35:b2:4f:f7:2d:00:b0:cb:70:05:17:47:
                    e3:f7:9c:b5:57:22:44:0c:02:ca:56:c4:29:9e:d1:
                    38:e5:08:76:fc:be:30:4a:13:6e:28:64:dd:6d:02:
                    68:93:9e:07:92:2e:32:e7:c7:a7:27:06:75:fa:76:
                    2e:a1:fb:39:31:bd:08:53:70:c8:e4:87:a5:fb:10:
                    10:5a:e5:c7:d1:13:ef:ac:21:1b:bc:44:78:fc:ce:
                    e2:70:f4:c1:5e:88:79:a3:ea:c7:18:95:4f:ae:78:
                    2e:ea:f0:f6:9d:c5:5d:42:06:3a:9a:67:57:cb:8d:
                    b9:08:89:4a:8c:c6:cf:4b:f3:a2:cd:60:d4:0d:db:
                    45:44:e0:5c:c7:2a:e6:d7:d5:47:38:d6:94:7b:ca:
                    0b:2b:17:f0:1a:8a:3a:66:de:7f:a4:d3:4d:5a:f0:
                    09:25:93:ac:08:15:52:fc:26:25:e6:13:cf:8f:5f:
                    e8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B8:97:32:65:C5:2E:70:B0:43:62:07:1F:2C:37:ED:D2:8A:ED:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/7d38a0b0-ea61-304f-9083-015162f8c564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.crl

            X509v3 Authority Key Identifier:
                keyid:AD:34:72:50:B1:C0:C5:C8:0F:D4:CB:86:9C:EC:DF:D1:17:EF:2D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3a:23:eb:bd:f2:48:02:b7:05:83:16:e5:94:51:77:2a:12:
         e9:af:c1:a0:d6:c6:c6:4b:ef:23:ce:22:f2:88:17:60:d2:68:
         97:00:e0:fc:3f:34:94:be:33:00:cc:83:1c:40:06:87:40:44:
         80:9d:0c:4a:cc:c1:c0:b0:98:bf:74:cd:36:cc:dd:6f:03:ae:
         74:dd:44:eb:cc:4c:21:8a:2f:96:8a:94:b2:46:d1:33:e5:37:
         01:39:da:aa:e7:f5:84:58:10:ca:57:51:c8:b9:7e:82:a8:66:
         d8:e1:6b:fb:72:c9:21:55:79:16:94:14:b9:79:0e:9a:43:16:
         43:2b:d9:3e:0c:0a:c1:3a:3d:3c:4a:60:d9:cb:da:45:58:1a:
         61:2d:84:f8:0b:75:b9:3b:f7:9d:8d:64:70:a3:bb:22:44:bc:
         35:3f:eb:ca:e2:17:3f:07:7e:96:a9:56:7c:ff:03:ac:96:1d:
         14:b8:41:a5:a2:0b:d9:cd:1e:ce:96:8b:93:9e:74:9f:74:93:
         c7:0d:0f:17:41:f6:e3:a2:3d:1c:32:15:f7:e4:91:84:fb:9c:
         85:2b:58:c6:8e:4a:cb:31:d9:91:af:c4:90:1a:0f:47:a7:58:
         07:a2:82:cd:fc:d4:9b:a1:9e:e4:f7:3b:f6:6e:fc:18:c8:d5:
         70:e8:4e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:29:36 2025 by rpki-client