Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/888892f3-b74f-39b9-89ae-4061ddc0d3e4.roa
File:                     888892f3-b74f-39b9-89ae-4061ddc0d3e4.roa (raw, json)
Hash identifier:          LYjaLhoDbqLTUiXCn/5NAOlluWXjbt5q/HQtlyVQplA=
Subject key identifier:   3F:EB:FF:E6:A6:37:D4:5D:84:56:BD:D5:DA:AF:31:5E:45:CD:01:80
Certificate issuer:       /CN=ba339105-0dc8-4e13-ab0d-3279a6b58f97
Certificate serial:       010D0C9F432858492184055519291975FC9FA580
Authority key identifier: 90:B8:5A:EE:92:C4:9A:6D:E8:77:45:60:0F:2D:77:2A:26:11:83:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/888892f3-b74f-39b9-89ae-4061ddc0d3e4.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     7720
IP address blocks:        208.99.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:05:55:19:29:19:75:fc:9f:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba339105-0dc8-4e13-ab0d-3279a6b58f97
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=3f618687-b41e-4ac5-9e34-e9e2bfe11514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:68:7c:2f:e5:cf:2a:e6:8b:9a:5e:c5:4f:f8:
                    cf:15:b0:f2:88:be:fb:ad:77:55:5b:d8:d7:00:02:
                    93:9f:83:e5:69:cb:ea:ca:e8:de:57:d6:cd:a9:c3:
                    63:33:d1:93:02:73:64:84:50:e5:22:a1:94:1a:b9:
                    95:25:67:a6:7a:09:09:06:d7:4a:9d:2a:dd:27:d6:
                    a0:69:3b:ed:15:a2:99:97:ba:3c:8b:cf:0c:e8:56:
                    58:cf:e1:35:f9:19:40:5d:22:cd:7d:01:a2:bd:b5:
                    49:8e:b8:bd:1f:57:c7:e4:b7:05:82:9e:99:1d:1e:
                    ce:7f:49:b9:fb:71:25:3a:bf:b6:23:58:3f:84:7f:
                    5e:25:13:15:6f:ac:bd:98:3d:8e:3d:de:eb:4c:5d:
                    ec:4c:c1:68:3b:dc:e7:89:0b:22:73:13:7c:00:f2:
                    81:de:04:10:ac:3e:35:2b:aa:2a:50:fd:15:14:45:
                    44:8b:fe:89:88:8c:85:49:7e:da:ef:6b:79:00:0f:
                    6b:52:f9:23:e1:d4:b3:54:8b:b6:01:02:6f:d4:b4:
                    81:f4:e7:2f:90:a0:1a:57:0a:24:1a:64:98:f2:30:
                    6b:1e:d5:36:6d:78:47:7b:c8:c7:d0:f3:1e:59:3b:
                    72:5d:2c:31:ca:0c:ab:ed:ed:d8:34:e8:68:fe:36:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EB:FF:E6:A6:37:D4:5D:84:56:BD:D5:DA:AF:31:5E:45:CD:01:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/888892f3-b74f-39b9-89ae-4061ddc0d3e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.crl

            X509v3 Authority Key Identifier:
                keyid:90:B8:5A:EE:92:C4:9A:6D:E8:77:45:60:0F:2D:77:2A:26:11:83:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:cb:04:f9:c5:2e:21:77:3b:c8:b9:99:ca:b2:49:f1:27:d0:
         73:91:61:da:d3:bc:88:f6:b7:c5:22:0e:37:35:57:58:36:53:
         1a:56:3f:c9:10:0b:bc:a7:55:18:eb:bb:13:ba:f4:9a:ea:fe:
         4d:c6:ed:a9:50:14:5e:dc:39:a4:56:3e:80:7a:60:eb:e8:37:
         93:1c:65:60:ed:28:99:62:c5:08:9b:b1:ab:73:7f:af:4b:d4:
         9b:29:09:97:5d:2a:c0:f5:77:04:fa:02:4e:ee:0f:d9:cf:ea:
         80:84:dc:62:56:cd:54:84:27:bf:7b:18:0c:64:2a:93:fb:bb:
         5f:0e:a9:d4:38:ff:b5:a9:63:c6:ff:24:06:0f:5d:8d:47:f2:
         06:84:40:55:02:6c:fb:97:de:c4:6e:11:eb:2b:af:a4:10:3f:
         90:73:5a:92:79:f5:fd:b4:ed:3f:85:df:f1:d0:d6:9b:98:fe:
         36:36:ab:09:00:1d:34:98:81:7a:bc:47:17:d0:60:ed:3d:96:
         b6:a5:d4:3b:60:1b:fa:6c:91:e8:83:28:d5:59:4d:76:b0:19:
         11:77:cd:d9:5c:eb:b6:b4:79:43:ea:eb:b8:0a:c0:e4:0c:dc:
         32:a8:cc:2b:96:78:3a:dd:58:3c:f8:24:f2:ea:e9:a8:83:a1:
         95:01:b1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:01 2025 by rpki-client