Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/59099632-598d-3efe-9b48-188d626e672e.roa
File:                     59099632-598d-3efe-9b48-188d626e672e.roa (raw, json)
Hash identifier:          iCcUWKz66R1HYxXCaxlwNsgwRkAbD6fXhthxxFcnJ9c=
Subject key identifier:   08:5A:D5:4E:97:58:61:D8:75:38:53:BB:B2:13:2C:51:65:CE:0C:99
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F43285849C904ED57947033CBABD52340
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/59099632-598d-3efe-9b48-188d626e672e.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     11358
IP address blocks:        207.174.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:ed:57:94:70:33:cb:ab:d5:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=d857804f-3382-441b-a8bd-672fd6b12105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:74:fa:c2:c0:de:87:5f:41:8b:80:ad:79:67:
                    16:df:11:0e:b2:82:78:59:39:77:a0:54:ee:1c:15:
                    66:5e:24:04:7b:b4:04:3a:5c:fb:b6:94:28:c4:3d:
                    22:9a:7b:99:61:51:a2:5b:91:62:e3:ca:f4:94:c5:
                    7f:00:35:1f:c8:3a:1d:a7:2b:11:78:45:2f:e2:41:
                    09:71:86:6e:29:53:36:6e:c8:49:00:95:7c:12:c3:
                    bc:f2:41:70:5f:a6:90:cc:5c:29:48:1b:23:56:d0:
                    2e:1a:4b:c2:79:e3:c3:dd:e6:8d:58:a6:c2:47:9c:
                    a6:47:82:62:ec:89:f0:3c:de:23:3e:02:1f:b6:d2:
                    b7:1e:78:ed:50:fb:25:d4:e5:6f:70:2d:55:95:0a:
                    6a:67:6f:8e:b7:3d:41:73:78:45:14:3c:15:34:fa:
                    a0:8b:6f:33:cf:62:86:59:8d:69:59:8d:9b:bd:af:
                    7a:f1:5d:68:1b:16:a8:2c:f0:47:6f:a8:4a:5f:ac:
                    40:42:a1:cb:2a:a6:cd:ac:ff:ae:ba:af:66:b5:67:
                    7f:a2:27:a6:32:04:a7:83:1e:3a:37:51:d4:b5:25:
                    c9:d1:1b:5f:23:db:d7:59:bb:6f:19:b9:6a:5f:5a:
                    62:f6:a9:6f:32:59:1f:97:e1:64:f3:ae:7d:74:3a:
                    74:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5A:D5:4E:97:58:61:D8:75:38:53:BB:B2:13:2C:51:65:CE:0C:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/59099632-598d-3efe-9b48-188d626e672e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:49:76:bf:57:f9:a1:0c:d1:37:05:e9:04:47:7e:af:d4:8f:
         8a:b9:fc:5d:88:68:3c:4d:c8:8a:65:4e:27:66:dd:29:43:7e:
         2f:4f:d1:4f:49:25:1d:a6:ac:f2:f5:a3:b5:65:d0:ef:dd:4b:
         b3:19:51:53:1b:d4:bb:fe:1a:88:54:6b:4e:3a:08:22:36:99:
         0c:68:46:07:03:46:54:0b:83:8c:c3:b0:91:91:7c:5b:07:f7:
         5f:46:9d:4f:67:ba:99:69:6e:fb:29:c6:93:6c:af:a4:4b:6f:
         d8:d3:fa:db:71:ce:b6:4e:b7:e7:2c:da:d6:68:1a:81:8c:3b:
         c7:20:b3:e1:c2:1a:a3:04:d6:ff:fc:69:40:72:14:1b:53:bd:
         67:55:a8:ed:a6:1e:01:0e:27:33:57:a6:b7:47:ea:db:d8:43:
         a2:4e:35:27:c4:b8:91:80:96:f8:9e:22:bc:b0:3e:f9:56:4d:
         d1:02:b5:9f:5a:b8:c4:06:04:02:c2:17:2f:ee:52:e2:f4:56:
         da:e8:b6:7b:8b:9a:cc:32:b2:ec:73:46:93:f5:71:d2:92:7e:
         09:2e:20:69:02:45:7b:1e:fe:ed:25:bb:79:72:03:92:4f:6b:
         40:46:07:20:6d:ea:11:09:42:f3:38:a6:77:33:da:a1:ff:6c:
         f6:e7:05:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:40:44 2025 by rpki-client