Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5/b07bf949-79c7-3a74-a3ef-e5569af453ef.roa
File:                     b07bf949-79c7-3a74-a3ef-e5569af453ef.roa (raw, json)
Hash identifier:          2qIM+8ay21IbVB0VqM8bodB7qAJWJ2fTQm3m35CKLPM=
Subject key identifier:   7B:D9:2F:2A:24:50:F7:1D:C8:05:2B:A6:8F:E6:35:12:F8:E7:77:27
Certificate issuer:       /CN=235d7f84-9186-4dd5-a197-87e823c53ed5
Certificate serial:       010D0C9F43285849C904F001891A4618157F2D40
Authority key identifier: 22:A3:C5:EF:AA:7F:64:D8:F4:34:E5:44:1C:7E:96:34:5D:6E:A8:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5/b07bf949-79c7-3a74-a3ef-e5569af453ef.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     36136
IP address blocks:        198.140.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5/235d7f84-9186-4dd5-a197-87e823c53ed5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5/235d7f84-9186-4dd5-a197-87e823c53ed5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f0:01:89:1a:46:18:15:7f:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=235d7f84-9186-4dd5-a197-87e823c53ed5
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=608f2915-5563-43de-93db-559f940eaaba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d8:07:1f:f7:c1:35:53:07:07:6c:8e:87:3a:
                    9e:c7:c2:38:ab:72:45:7e:ae:49:e1:32:ce:60:d7:
                    17:3b:c4:d7:26:04:05:af:58:6d:be:2a:bf:6d:ed:
                    b0:01:ba:27:55:67:e7:ad:42:ee:e6:07:08:e5:49:
                    56:f2:1f:3d:8a:a3:1e:41:66:2b:de:02:df:1a:96:
                    2b:97:d5:f0:99:ea:8d:60:0c:be:27:14:32:86:8c:
                    60:c8:80:3e:69:02:47:da:63:e9:7d:b7:a4:3b:43:
                    a4:53:e6:99:45:96:df:0e:c3:6a:41:de:5e:24:f3:
                    62:16:a0:67:88:59:ca:c5:3e:b6:e7:68:3f:f9:ea:
                    3d:91:d6:4a:53:3d:11:14:88:15:d0:2a:38:1a:bb:
                    23:e0:5c:aa:ad:a4:c8:07:21:a2:29:c9:49:ca:ac:
                    69:25:5a:b8:dc:fa:0f:89:10:3b:d6:ec:94:70:64:
                    8f:dc:54:33:51:d9:ac:ed:df:01:39:6f:82:ba:b3:
                    ce:ae:04:df:b0:a8:25:60:72:43:8e:da:4e:08:1e:
                    9b:9b:98:e6:d1:1b:3c:8e:42:7f:f1:bb:26:46:4d:
                    ad:d7:57:f0:f8:c7:5e:d5:eb:be:19:28:74:d1:25:
                    84:49:48:23:d2:40:dc:69:f2:0c:26:50:82:3a:88:
                    02:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D9:2F:2A:24:50:F7:1D:C8:05:2B:A6:8F:E6:35:12:F8:E7:77:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5/b07bf949-79c7-3a74-a3ef-e5569af453ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5/235d7f84-9186-4dd5-a197-87e823c53ed5.crl

            X509v3 Authority Key Identifier:
                keyid:22:A3:C5:EF:AA:7F:64:D8:F4:34:E5:44:1C:7E:96:34:5D:6E:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.140.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:0d:fa:be:30:62:14:ea:83:c3:b0:76:c6:f7:3a:c6:8f:dc:
         0b:92:2a:f6:05:d6:0c:13:f6:09:0b:83:5b:fd:8b:8a:33:e1:
         37:22:34:f3:c2:d7:34:07:93:a9:94:05:0f:70:bf:9e:72:9f:
         55:5d:9e:45:99:53:ff:53:8d:d4:ed:53:6b:68:7a:63:1a:5f:
         3b:3d:fb:c7:29:a9:6c:41:e1:e7:85:37:7a:03:bb:ca:98:23:
         68:de:76:c8:87:69:be:f2:fb:37:57:15:4a:d8:42:be:6f:27:
         91:bd:86:ba:2a:60:06:1b:dd:d2:11:be:5b:a3:f2:22:9d:57:
         04:fb:72:e2:de:8d:87:f2:37:e0:45:51:4b:4f:22:ce:97:60:
         d0:63:af:db:89:d1:32:91:7c:1c:19:b4:48:56:92:e5:ca:e8:
         c7:e7:b9:fd:b9:d1:56:e9:19:52:df:a7:16:c9:1d:31:eb:90:
         8d:e6:c0:4e:91:2f:cc:5e:61:0f:6d:a0:0f:ea:1d:ec:66:42:
         4a:a0:8f:c4:0f:ee:4d:80:ce:34:e9:7c:bf:97:f7:f6:b9:8d:
         7d:d5:fa:ef:e2:48:d8:84:9c:7b:93:36:5d:96:0f:80:45:d9:
         c2:de:f3:f5:a0:48:7c:02:6f:e0:f2:9e:8d:3a:c7:ab:17:09:
         ee:43:b7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:36:23 2025 by rpki-client