Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e7202be5-f97f-385d-9853-b4148deeb956.roa
File:                     e7202be5-f97f-385d-9853-b4148deeb956.roa (raw, json)
Hash identifier:          Il/xvVJqc4R0t6vq8EreGdQnpvkF33N54cG6dP8QvPc=
Subject key identifier:   4B:76:25:3C:29:D5:BB:20:E9:DE:7F:76:98:C9:AB:BE:C9:BD:B2:93
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285848DBD66800D637FDA6A7E732A0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e7202be5-f97f-385d-9853-b4148deeb956.roa
Signing time:             Wed 12 Feb 2025 14:00:53 +0000
ROA not before:           Wed 12 Feb 2025 14:00:53 +0000
ROA not after:            Tue 13 May 2025 13:00:53 +0000
asID:                     54538
IP address blocks:        165.85.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:db:d6:68:00:d6:37:fd:a6:a7:e7:32:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb 12 14:00:53 2025 GMT
            Not After : May 13 13:00:53 2025 GMT
        Subject: CN=8bab53a8-f48f-495f-8b18-f85e40d0f0a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:37:78:fb:70:19:4c:c5:f6:ce:2e:52:0b:b2:
                    f0:55:b5:25:a2:a0:28:19:85:8f:56:3d:53:e7:1b:
                    ea:73:3a:15:ec:1d:bc:00:1f:58:ea:36:93:4e:75:
                    dc:19:4d:cf:6f:13:d9:58:70:ff:2d:11:62:1d:53:
                    f6:9d:28:66:94:e7:1f:a5:87:ea:bd:7a:f8:9b:2a:
                    bf:ea:53:6b:ca:69:8b:a1:08:e5:d6:4a:1e:6a:a8:
                    26:46:4c:a1:10:73:39:0f:b5:36:07:39:60:e8:da:
                    e4:2b:da:30:97:e7:25:98:9a:de:58:bc:2f:4a:9c:
                    f1:b3:10:77:b5:44:72:b5:99:9f:6e:d8:77:56:c7:
                    b8:eb:2c:9d:06:d2:e1:51:04:38:0d:4f:ed:8f:e8:
                    99:08:35:19:20:39:0f:ea:91:cd:47:5c:a1:d3:5d:
                    c1:c4:93:70:82:73:3f:3e:68:01:6f:83:48:c6:3f:
                    d0:fc:dd:7c:6b:82:09:cd:8b:57:cd:aa:44:ec:9a:
                    ce:7a:5c:f8:cc:2e:3f:6e:07:26:50:83:c6:00:34:
                    56:e6:cb:d9:1f:a3:a1:89:12:95:36:db:da:5f:ca:
                    a7:aa:cd:5f:1c:89:33:ba:4b:d5:c7:a0:4f:7f:70:
                    0f:2f:92:26:d7:82:ca:81:27:94:55:fe:1f:4e:04:
                    c5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:76:25:3C:29:D5:BB:20:E9:DE:7F:76:98:C9:AB:BE:C9:BD:B2:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e7202be5-f97f-385d-9853-b4148deeb956.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:34:b1:58:f1:20:7f:1f:ca:73:f1:18:25:64:3f:69:c3:a9:
         b6:0a:c6:28:69:9c:b7:67:6c:f1:21:21:18:3b:22:4f:34:9f:
         de:fe:29:a0:44:40:f8:1a:9a:9d:14:e3:97:a4:35:85:73:c4:
         cd:d3:91:0b:d6:c5:f9:ea:81:08:6b:c1:3c:28:ad:a5:73:27:
         d1:68:9d:ba:ee:3e:9f:b5:20:3f:ca:72:71:78:81:9e:95:29:
         2f:c7:31:ed:58:fc:46:38:4c:e7:50:6b:a8:8a:dd:c8:5c:8d:
         55:6e:cf:f2:19:78:4a:d0:d3:c9:9c:57:ea:91:d1:0d:46:ba:
         6d:28:4d:f4:bd:b4:a7:64:64:69:18:d2:44:60:21:c6:70:ec:
         d5:ec:50:28:2c:7c:d6:59:81:8c:40:c1:09:1c:63:32:6d:b6:
         cd:bc:fa:26:89:83:db:d9:0e:2c:b8:8c:8a:06:8d:28:07:c9:
         ad:79:4e:14:3b:17:c5:6a:47:a3:dd:11:a1:f8:e9:42:78:c1:
         84:48:35:ba:60:0c:a1:ed:89:15:18:bd:5c:70:30:fd:af:14:
         31:76:ae:c6:06:7a:60:6c:ed:b9:ed:76:d3:b4:d5:73:2a:b6:
         82:89:75:d0:db:6b:67:a2:b0:62:4f:07:6f:a1:51:07:7c:55:
         d0:e5:eb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:39:28 2025 by rpki-client