Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6ffa5493-83a5-3728-bf45-8f88c4c9e7d3.roa
File:                     6ffa5493-83a5-3728-bf45-8f88c4c9e7d3.roa (raw, json)
Hash identifier:          gcNxH7IVImmaQQx1bsPqypS1rbEx4WFuJN2l6lSSl70=
Subject key identifier:   86:91:DB:9B:24:DE:36:61:8A:F8:49:83:0A:9B:CA:F5:4A:38:ED:01
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285848F7C141A2593D9EA10A972FC0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6ffa5493-83a5-3728-bf45-8f88c4c9e7d3.roa
Signing time:             Sat 22 Feb 2025 14:00:52 +0000
ROA not before:           Sat 22 Feb 2025 14:00:52 +0000
ROA not after:            Fri 23 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        169.224.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f7:c1:41:a2:59:3d:9e:a1:0a:97:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb 22 14:00:52 2025 GMT
            Not After : May 23 13:00:52 2025 GMT
        Subject: CN=bc8c9c7a-f3ab-4599-84a8-891348d03aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:16:10:8c:84:0a:12:3d:12:6f:a4:d2:35:
                    2a:6c:ee:89:33:72:fb:a3:97:b0:5e:04:4e:07:ac:
                    10:72:21:ca:88:c3:ef:97:ea:b8:42:0f:15:b2:ee:
                    6c:9e:27:be:b9:03:c8:66:0a:88:e9:2c:81:5f:72:
                    2e:42:23:44:2f:2e:b2:6a:ca:2a:17:c7:7f:2a:50:
                    57:08:10:22:16:80:a7:50:0f:1b:cf:9e:f9:69:e9:
                    19:1b:d8:75:bf:48:5a:7a:ec:ef:77:67:89:ed:5e:
                    a9:6b:f1:89:72:72:da:14:47:1e:95:32:79:3f:c5:
                    c5:1a:76:75:d9:6a:22:7e:99:dc:77:43:c3:0e:c6:
                    8f:84:0f:3f:bb:df:ab:02:61:92:48:68:b9:98:8e:
                    cd:53:7d:53:04:ed:10:5d:76:bc:00:28:5e:85:6a:
                    6d:ff:e5:6a:1a:e0:75:26:89:21:e4:eb:70:8e:78:
                    6f:be:49:fd:96:ea:9b:42:3d:47:e6:bc:7f:9b:e9:
                    50:a7:cb:74:68:fe:de:93:1a:2b:f8:03:47:3a:2e:
                    2b:bf:54:2d:ae:bc:09:53:9b:8e:4d:c2:49:ed:60:
                    22:56:6e:21:7c:f2:45:a6:f1:0f:1b:ab:2f:04:0c:
                    42:c0:9f:ea:87:f0:37:e4:f6:91:8e:5f:a5:a1:98:
                    0d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:91:DB:9B:24:DE:36:61:8A:F8:49:83:0A:9B:CA:F5:4A:38:ED:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6ffa5493-83a5-3728-bf45-8f88c4c9e7d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.224.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:26:5b:eb:70:91:d4:4e:e5:06:c0:aa:f0:a5:02:4f:0b:3d:
         53:a7:02:ed:68:5a:0e:94:d9:df:5b:c5:34:13:8b:2a:ec:5e:
         b0:ff:7c:c5:f9:0c:f5:8e:be:df:be:b7:30:ba:13:0c:4a:ef:
         a8:13:98:ea:fe:92:46:82:0f:3f:7f:51:ae:1c:ed:07:cd:e7:
         bb:b7:45:e7:3f:2f:b1:00:ce:08:60:3e:17:50:65:33:e1:cb:
         a6:73:a8:f6:26:40:33:2c:5a:0e:5c:18:29:07:25:9c:b1:59:
         08:0d:c9:38:a3:33:14:d9:76:2e:7e:6f:07:38:5c:60:99:ce:
         7d:7c:f7:79:6f:8c:d6:4b:d7:43:7c:aa:87:63:94:32:68:c5:
         19:cf:e3:d0:05:e2:e7:8b:ee:b3:37:c7:77:a8:4c:9e:6d:cc:
         b5:c2:c1:0c:cf:ea:d2:65:dc:4d:07:e8:28:58:93:a7:e6:65:
         89:1a:b8:64:f1:4b:27:d4:27:3d:03:d0:c9:ce:9a:d8:17:a4:
         e0:74:f3:f1:bc:92:0d:4c:15:2d:d4:78:14:85:15:82:1d:d1:
         1f:b0:5a:88:ba:0a:54:f9:ab:13:b3:72:37:a0:20:32:7f:ab:
         42:ac:f9:de:c7:c4:e1:0a:62:da:f2:fc:5c:5e:54:cd:48:e8:
         4b:7c:5c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:08 2025 by rpki-client