Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/839eb910-1a14-3f61-997c-f800091ddd13.roa
File:                     839eb910-1a14-3f61-997c-f800091ddd13.roa (raw, json)
Hash identifier:          XyOhkrPnF5UyCZGdk4uWcTHVvuvxhfboyiPR1zgsNaw=
Subject key identifier:   74:A1:37:6F:3C:3B:6F:D7:6C:DC:33:E2:86:F8:87:28:55:60:A1:50
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584960541C40D30B60B2418E74C0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/839eb910-1a14-3f61-997c-f800091ddd13.roa
Signing time:             Tue 01 Apr 2025 01:00:47 +0000
ROA not before:           Tue 01 Apr 2025 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:00:47 +0000
asID:                     54538
IP address blocks:        169.224.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:54:1c:40:d3:0b:60:b2:41:8e:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr  1 01:00:47 2025 GMT
            Not After : Jun 30 01:00:47 2025 GMT
        Subject: CN=a00eb57f-bd07-4060-b3ab-0bf8549c2421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:d1:05:10:d0:17:8f:cc:ae:d7:c7:e1:79:
                    71:38:08:db:46:65:14:a7:a7:b6:cb:9d:0d:da:c8:
                    b9:dc:73:31:a7:d6:13:8d:e3:2a:1c:8c:f8:b2:27:
                    61:7b:bb:dc:c0:62:88:db:63:d3:e0:b2:a8:81:dc:
                    f4:e7:6c:5b:99:47:17:c0:e1:d5:c8:f9:00:e0:18:
                    67:c7:eb:84:94:6b:98:21:a2:59:b1:45:23:37:7d:
                    e1:4e:6b:45:41:9a:e4:f3:fb:8d:30:03:14:2f:19:
                    b2:0a:f7:78:7d:d6:69:99:65:0c:7c:1e:02:57:6b:
                    ec:04:8b:2e:2d:91:66:d3:a9:b9:5e:47:9b:ab:76:
                    d1:71:30:38:5c:62:1f:19:cb:49:11:d7:30:5f:83:
                    9f:bf:0a:45:93:e4:b4:0c:f4:67:3d:8e:b8:71:45:
                    b5:dc:b2:61:62:f6:7f:88:36:18:31:16:67:67:c2:
                    8f:24:00:5f:52:a5:f4:8f:60:8b:cd:c6:b5:75:af:
                    72:02:fe:a5:60:5a:b7:23:3b:bc:ca:72:3c:ad:bf:
                    0e:84:2c:74:02:3e:78:7a:b5:a9:ed:ff:66:3a:3f:
                    0c:c6:ca:c5:cf:46:9e:fc:37:4e:d1:37:19:e3:56:
                    c2:4d:4b:ee:0d:51:0b:98:ee:75:85:88:1a:d9:16:
                    89:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A1:37:6F:3C:3B:6F:D7:6C:DC:33:E2:86:F8:87:28:55:60:A1:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/839eb910-1a14-3f61-997c-f800091ddd13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.224.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:8a:b9:8f:0d:2a:28:92:0a:9b:da:b7:5d:54:f1:e5:c7:04:
         55:e7:84:02:1d:d6:a2:b8:9b:92:39:27:b3:fb:13:2c:db:35:
         a4:ba:a5:41:8b:ca:4f:42:1f:59:5c:ef:6e:e5:ca:56:9a:71:
         b1:59:60:2f:45:81:54:96:b3:49:dc:d8:9f:9a:64:d9:87:9d:
         3d:84:a7:07:a2:70:76:ba:75:1e:ca:92:e9:cd:6e:a8:df:52:
         4a:4a:5e:78:91:84:fc:eb:b6:3d:09:2d:6a:16:cc:fb:4d:db:
         70:05:70:f3:8b:76:b1:b4:44:a3:60:93:fd:35:c9:88:7c:b2:
         8a:f0:df:83:e9:1e:5c:3c:55:27:d8:ad:47:c3:f0:20:ef:11:
         cf:45:93:3f:8d:77:c5:a9:3b:73:76:8f:4e:ae:15:40:9c:b4:
         cd:18:36:d7:81:6d:5c:c2:33:b5:0c:2f:ee:e5:60:81:ad:c8:
         e6:11:5a:cc:c6:1e:11:82:8c:ec:f8:57:58:5e:ae:9e:e8:42:
         fb:c9:a3:79:de:61:47:a9:ed:cc:f3:59:f9:4e:a6:af:62:92:
         ca:59:00:1e:a6:28:c0:c9:1a:3f:29:ef:d3:2a:5e:65:bd:1d:
         ae:51:e8:88:fd:56:93:c2:05:fd:2b:3b:27:17:4a:5f:d6:23:
         b5:da:14:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:02:21 2025 by rpki-client