Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8512791c-c3b7-3d44-b9f1-49c24810ef4b.roa
File:                     8512791c-c3b7-3d44-b9f1-49c24810ef4b.roa (raw, json)
Hash identifier:          qRUUhER1VwGwzSwYVsNhO/F1teeVWRU7t117lqxezh0=
Subject key identifier:   2C:15:C0:59:7C:90:EB:64:D6:31:A2:9F:21:EC:CC:00:3E:7F:C6:1D
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F43285849B6DF5B49E49434CE7A06B400
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8512791c-c3b7-3d44-b9f1-49c24810ef4b.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        207.202.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:5b:49:e4:94:34:ce:7a:06:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=34f118dc-6c02-492a-861a-6d92e9e38914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:40:a2:f9:b3:c4:49:a5:84:c3:cb:98:34:
                    f1:99:84:79:c0:91:35:00:48:46:f0:56:3a:4e:e1:
                    21:cc:ac:ad:a3:da:fa:11:ff:ae:16:48:45:b0:b2:
                    41:bf:62:8a:f0:ee:10:b2:f8:af:22:cd:d9:10:ae:
                    01:31:df:fe:4e:97:23:34:fe:4d:2e:3e:f1:d2:cd:
                    4b:5b:57:68:d3:82:05:8b:59:ae:59:ad:30:b1:23:
                    ca:17:2c:5d:dd:52:f1:7b:7d:d2:df:f9:04:f6:4e:
                    0b:46:1f:94:d7:72:55:45:f5:d3:f2:b6:51:de:75:
                    fa:85:a3:09:e2:15:bb:e4:b5:cd:62:84:3b:3c:e9:
                    17:b9:5f:fc:7d:0e:ce:57:67:e5:3f:57:d8:11:3d:
                    ca:09:e2:c2:7b:88:6e:e8:32:3b:98:79:6b:4a:37:
                    f1:b2:47:9a:3b:a3:b1:1c:8c:ea:3d:9e:36:99:96:
                    ef:fa:75:d6:c7:ac:b6:99:ed:f9:be:62:c5:76:32:
                    20:11:20:c3:fa:50:84:76:7d:4c:53:68:1c:67:28:
                    3a:ac:42:88:0d:32:ce:f4:b7:15:ea:a2:b8:bd:5b:
                    b4:f1:3b:0b:4b:8d:0e:cb:6f:ed:3e:3d:98:7c:dc:
                    d6:91:f6:27:ff:f5:ac:e7:d3:36:e5:00:f0:2a:3e:
                    b0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:15:C0:59:7C:90:EB:64:D6:31:A2:9F:21:EC:CC:00:3E:7F:C6:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8512791c-c3b7-3d44-b9f1-49c24810ef4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ba:3a:c1:34:b5:75:85:23:03:e6:40:71:ef:e4:1c:1e:fe:
         6f:7d:8b:02:59:d5:d9:99:be:9b:20:57:19:b7:37:91:74:00:
         c3:11:ee:fe:d5:8c:a9:2a:ff:1b:26:a8:47:ce:21:bc:c2:e7:
         95:3b:38:b9:08:c5:c4:3f:8b:32:9f:23:06:05:7e:8a:b7:b1:
         99:77:8a:03:31:81:e3:01:bd:3f:a2:34:dd:a2:e3:8f:5a:b8:
         ef:41:7b:a9:32:27:a0:9b:ca:9c:08:92:e9:d7:a3:46:19:b6:
         71:df:4f:3a:ab:9a:57:26:08:3a:ac:63:7a:e8:a4:8a:1a:99:
         65:ec:8c:87:4c:22:53:e3:e1:97:4d:99:a3:fc:d7:3f:d8:9e:
         d6:34:46:45:eb:44:23:52:15:86:5e:98:56:2e:43:1d:d7:30:
         fd:8e:2d:40:a1:e5:ef:5d:e2:82:9a:95:7e:c5:1d:6a:80:83:
         f4:c5:81:36:c1:11:5e:5f:a8:a6:78:41:d5:30:af:c7:38:4e:
         32:36:27:0f:32:3a:a5:b9:39:a2:a5:ad:3c:d4:96:d0:79:23:
         49:62:b5:2e:cb:82:7d:c2:d1:2c:08:e8:ec:3b:5f:f9:c3:8f:
         a6:5c:c2:6f:12:7c:ed:98:29:c9:50:75:73:7b:c5:03:f4:94:
         c1:e7:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:00:41 2025 by rpki-client