Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3bb98283-2c3e-3940-9125-b56027801384.roa
File:                     3bb98283-2c3e-3940-9125-b56027801384.roa (raw, json)
Hash identifier:          h+tEmZXtjzGCKkNccOUPgNxGDTR+1oNd+fsyILQfTiA=
Subject key identifier:   73:A2:CC:8E:77:C3:64:AC:02:06:B9:AF:A3:B9:A9:F5:BE:C5:43:D3
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285849955F1EC74C7778EB0F9AE300
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3bb98283-2c3e-3940-9125-b56027801384.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        207.34.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:1e:c7:4c:77:78:eb:0f:9a:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=e7788607-90a5-4036-a3a8-68e7e6375390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c3:73:dc:08:65:d0:c9:ad:35:d1:2b:df:5b:
                    90:c4:cc:53:9e:4d:91:8f:ae:7d:df:57:1b:03:41:
                    3c:f2:d6:c3:4f:67:1a:57:0c:f5:af:0b:82:d2:45:
                    a1:07:7c:b2:28:c2:fd:5b:9a:8d:0e:4e:81:ea:6d:
                    57:d8:1e:09:84:11:c6:b8:2c:b9:f6:87:cb:ab:5b:
                    9a:fe:a6:e9:93:33:44:32:b7:b3:fd:54:bb:ea:b2:
                    44:48:36:4c:45:be:7f:ac:5d:dd:f4:7b:ae:88:d2:
                    7b:ed:82:65:ba:8c:a1:dd:4c:ef:4e:e0:af:f4:b7:
                    78:f3:b3:7c:2a:a8:ad:88:69:e5:2f:2a:68:41:28:
                    eb:0d:29:89:4e:7e:e1:44:e5:17:cf:5f:a3:5d:7e:
                    ac:08:76:34:b3:3b:68:94:2b:be:ee:50:c1:78:0f:
                    c6:e8:01:fb:23:d2:48:34:f6:e5:fd:3d:ef:5e:19:
                    f5:70:54:e5:00:a3:3a:6b:d2:c3:c6:fe:b3:b2:3f:
                    b7:f6:7e:04:29:28:bc:d6:41:25:2c:5f:0a:76:59:
                    bc:d4:02:7e:1f:8a:5c:b1:6f:68:81:8c:42:57:38:
                    e4:5a:8f:f3:9b:0f:d2:72:ed:61:1c:ae:2f:47:dd:
                    bd:3a:6c:19:ce:cc:bc:65:dd:ac:d6:c7:7a:59:ed:
                    6d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A2:CC:8E:77:C3:64:AC:02:06:B9:AF:A3:B9:A9:F5:BE:C5:43:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3bb98283-2c3e-3940-9125-b56027801384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f5:ad:1c:16:fb:eb:38:52:30:cf:75:44:b0:81:4f:6c:37:
         24:f9:53:3a:04:2f:ad:d1:1f:7a:82:fd:4f:64:81:d7:9c:64:
         71:20:ae:9f:18:9d:a4:e9:d8:8e:56:ca:2a:56:81:a9:6e:fb:
         7a:6a:f9:91:9c:09:be:1e:3b:34:2d:73:f6:18:36:a8:67:4e:
         c0:27:47:af:dc:03:d3:63:f2:a6:bb:2d:b4:17:16:ce:8b:d2:
         54:4b:1a:e1:08:1e:31:4f:c3:81:f8:d7:bb:b3:c9:52:58:39:
         cd:db:2b:3d:22:ae:a5:27:1a:4f:dc:60:aa:8a:46:4d:87:4c:
         cb:54:7d:a3:51:9c:e8:23:3a:2b:ee:74:62:c7:03:be:a4:0b:
         4e:95:02:6b:b4:c0:07:04:d5:b8:28:f0:b8:b8:da:59:8a:aa:
         04:69:29:58:83:fa:44:b3:1e:55:2d:37:4a:0b:7e:18:58:e2:
         2d:e5:fc:3b:e8:ed:ef:03:86:15:a6:d1:4a:7b:4d:c9:52:e5:
         92:7a:ed:c4:d4:60:69:5f:4f:b5:3f:95:d2:9e:c9:5e:a7:05:
         b0:15:66:86:ee:9e:c9:4f:da:c3:16:ec:8d:49:38:20:c2:39:
         bc:12:82:93:5e:f8:91:b9:57:ed:d6:4e:1b:30:87:b1:1f:21:
         36:09:58:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:56:50 2025 by rpki-client