Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/fd4c00b7-96e4-37b1-999c-f48fdf2b836b.roa
File:                     fd4c00b7-96e4-37b1-999c-f48fdf2b836b.roa (raw, json)
Hash identifier:          Ohani+JutuGrx7NcOcz2LBIQg3F09s6k4Kp3gKqCyFQ=
Subject key identifier:   EB:69:1A:0F:4A:21:84:CD:CC:2E:F8:9E:A7:BC:D3:2C:F6:DB:2C:7E
Certificate issuer:       /CN=9d295acd-c538-4740-8f21-9eca736b29d5
Certificate serial:       010D0C9F432858492CFF691ED865A99D5A483C80
Authority key identifier: 42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/fd4c00b7-96e4-37b1-999c-f48fdf2b836b.roa
Signing time:             Thu 13 Mar 2025 15:44:01 +0000
ROA not before:           Thu 13 Mar 2025 15:44:01 +0000
ROA not after:            Wed 11 Jun 2025 15:44:01 +0000
asID:                     16509
IP address blocks:        205.233.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ff:69:1e:d8:65:a9:9d:5a:48:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d295acd-c538-4740-8f21-9eca736b29d5
        Validity
            Not Before: Mar 13 15:44:01 2025 GMT
            Not After : Jun 11 15:44:01 2025 GMT
        Subject: CN=46b8b6cf-0409-4840-a194-eacd15aaf41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bb:78:36:52:0f:9a:ea:a6:51:d0:cb:17:1d:
                    1d:d8:a6:73:8a:c5:7c:23:55:0d:b1:7f:5f:fd:22:
                    61:66:d5:aa:a2:37:24:33:7d:df:14:64:9c:08:77:
                    37:e7:c7:9c:26:a4:ff:de:0b:9c:27:58:d0:7a:77:
                    00:23:1f:d9:b4:b7:cc:00:74:88:c4:fc:c0:09:74:
                    b7:4c:1a:05:5f:48:08:79:0d:21:4e:84:a1:2c:66:
                    d0:36:83:bb:a7:78:eb:a1:15:e9:e1:c2:3c:5c:82:
                    11:a8:11:ae:ea:88:e2:53:4e:99:a3:b5:83:24:eb:
                    64:5d:94:7d:e6:88:53:ed:dc:5f:2f:a8:ff:81:16:
                    63:e7:6b:77:4b:47:19:b5:35:5b:73:dd:70:2b:6a:
                    76:2d:f6:8e:51:14:d2:cd:63:26:2c:27:36:5b:6c:
                    97:ad:63:10:8b:61:1a:aa:46:90:d2:80:f8:0b:76:
                    bb:b4:d6:cb:f4:b9:b3:e9:29:7f:a7:4c:ab:39:51:
                    e9:28:88:51:af:c6:f6:d1:37:b8:da:20:c7:80:50:
                    0a:8e:9b:15:ba:09:f5:af:30:64:00:4c:ca:5c:5f:
                    2d:fc:c3:38:4c:03:40:aa:84:8f:02:2b:cd:5d:ea:
                    b9:c7:ef:a4:28:e0:1e:a6:c0:49:4f:15:0f:fa:8f:
                    16:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:69:1A:0F:4A:21:84:CD:CC:2E:F8:9E:A7:BC:D3:2C:F6:DB:2C:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/fd4c00b7-96e4-37b1-999c-f48fdf2b836b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl

            X509v3 Authority Key Identifier:
                keyid:42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:fc:35:b2:e8:f7:d8:54:5a:74:f7:3d:00:90:38:03:f0:9a:
         6a:bf:93:4b:d9:c9:21:1c:4c:f7:2e:c8:1a:31:78:f6:4b:56:
         39:56:8e:3d:72:31:32:01:ca:18:d1:0d:c1:a2:b1:11:4b:89:
         86:14:90:90:ae:32:7f:3d:b1:ea:75:fa:cb:95:3f:47:18:27:
         af:b6:e1:29:8d:ba:44:c6:5c:9c:30:f6:fb:58:96:5f:3b:63:
         44:9d:df:62:92:81:1e:a3:ca:91:a7:aa:ff:90:a1:59:4e:13:
         a2:47:26:99:07:d1:a6:cb:9e:1a:25:2d:db:04:99:b1:f8:dd:
         47:80:34:b3:9a:ad:23:0d:cd:99:cd:e3:42:47:ce:b4:95:e7:
         34:9b:4e:41:d6:51:66:e6:28:7b:3f:c2:80:60:f3:ff:36:8c:
         9c:69:0b:67:16:b5:82:95:b6:a0:63:27:ac:86:1e:65:5a:d7:
         c0:a0:e2:c1:e7:f7:12:72:40:a8:2b:f3:ea:7b:fe:e6:f1:4f:
         24:6a:d8:83:80:96:17:85:ce:8b:a9:65:0d:c1:27:f5:00:8e:
         c2:8a:4c:43:69:b1:02:43:7e:b6:a2:cb:d4:ff:15:7b:8e:f7:
         a4:37:d6:e0:37:53:31:55:d0:b8:86:74:2b:10:da:d9:56:59:
         83:fa:55:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:20 2025 by rpki-client