Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6e52cc5e-821f-339e-b6bf-71d9fd27ec34.roa
File:                     6e52cc5e-821f-339e-b6bf-71d9fd27ec34.roa (raw, json)
Hash identifier:          0k9pbYf6ICY1To9Esp1lyytewCpSOFqmBkp8ThpxZcc=
Subject key identifier:   32:31:85:E0:D5:A8:E0:D2:41:18:1E:8F:4E:9B:E1:91:2F:5C:11:9E
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285849955F192AC141839D50757100
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6e52cc5e-821f-339e-b6bf-71d9fd27ec34.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        207.34.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:19:2a:c1:41:83:9d:50:75:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=57b761de-da3c-4de7-a33d-bb848b67a35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3f:a2:4e:58:c5:fd:8f:a0:b7:6c:36:09:72:
                    60:d2:5c:10:66:cb:b3:4e:e1:de:6c:6a:17:0d:ad:
                    8d:e1:a1:61:25:ca:f8:4f:84:33:4b:83:58:01:02:
                    17:04:56:a2:12:9c:c4:02:b2:9d:41:8b:a6:06:0f:
                    73:a8:b7:9d:f0:b6:95:de:f8:35:9f:6f:37:0d:a5:
                    95:dd:52:e1:c1:e5:90:c9:10:d8:10:b3:50:2a:49:
                    16:98:6d:ab:ab:c0:54:23:e7:e4:b9:2b:fc:d2:8d:
                    8c:af:65:34:2b:8e:b2:e3:22:fd:c5:ce:ab:97:66:
                    f5:b1:76:0c:92:cb:64:7c:5f:c1:02:6a:2e:7d:2c:
                    05:38:40:d5:83:7b:96:09:69:c2:98:af:5d:ca:05:
                    29:36:ec:63:cf:07:be:15:12:55:7f:e0:d9:f8:96:
                    22:95:b9:11:15:d5:1c:9b:aa:c0:4b:1b:20:dd:5a:
                    0d:2a:c9:7a:62:68:86:c3:61:a8:18:31:86:8f:cf:
                    c7:27:df:ae:5c:f2:d5:ca:7c:1e:71:4f:e4:8d:b5:
                    c4:ac:35:f8:ae:bb:e6:fc:dd:9b:61:16:71:84:12:
                    a7:ad:bf:f0:ee:a8:03:9e:36:76:8d:72:98:a2:37:
                    e0:27:b0:c7:87:00:69:e8:e4:79:fe:dd:f3:4b:9e:
                    5d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:31:85:E0:D5:A8:E0:D2:41:18:1E:8F:4E:9B:E1:91:2F:5C:11:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6e52cc5e-821f-339e-b6bf-71d9fd27ec34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:13:e6:ea:01:d4:73:04:f6:91:c8:8d:37:46:79:e3:c9:f0:
         ae:ee:f3:f9:ca:bf:70:85:ae:3d:47:c3:10:5b:2b:de:9c:55:
         26:da:6a:78:1f:dc:57:bc:cd:d6:ee:69:7b:3c:07:f1:9c:35:
         7d:e9:ec:fa:0f:6b:b1:18:d0:c7:dd:81:e9:cd:74:0d:64:00:
         e9:12:ab:ac:68:0c:45:af:2b:32:8d:19:60:9f:b2:17:93:8e:
         7f:b1:34:07:7e:84:e4:a3:5c:5b:f3:27:71:c7:26:16:95:d0:
         14:21:c1:02:fd:b9:b0:b7:96:d3:da:c9:7d:35:1a:ba:59:57:
         83:77:1f:70:57:23:1a:fd:46:9c:92:e4:b3:06:9f:e2:21:82:
         c0:01:0e:e0:05:d2:8d:2d:a3:b5:0a:74:b4:76:47:9c:6c:45:
         be:f1:3d:6a:85:51:38:57:91:53:e5:a3:4a:ce:fc:c6:91:8e:
         d2:34:b6:ba:c2:cf:51:66:f4:a5:fe:3f:d7:77:e0:94:70:ae:
         9b:e7:1e:be:6e:2c:55:98:4a:6c:2e:93:53:80:87:93:8b:cc:
         7c:bc:d4:94:61:58:87:c7:34:55:bd:00:51:97:31:54:f6:87:
         91:f6:90:ae:6a:4d:06:5a:45:be:75:8a:16:95:25:d5:ec:51:
         e8:19:94:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:44:25 2025 by rpki-client