Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0953ab88-0d2b-371e-be5f-8d9985c68ef3.roa
File:                     0953ab88-0d2b-371e-be5f-8d9985c68ef3.roa (raw, json)
Hash identifier:          Ob26cAwwpy2cgNViJdP61GKCiucelfUJvcZachhs4EE=
Subject key identifier:   2F:6A:B2:31:94:E3:B6:11:A7:89:AF:80:2E:3B:F4:4E:5C:EC:BB:4D
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285848D21142D2579ED0FFAAA32EA0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0953ab88-0d2b-371e-be5f-8d9985c68ef3.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     51964
IP address blocks:        140.209.240.0/21 maxlen: 24
                          140.209.249.0/24 maxlen: 24
                          140.209.250.0/24 maxlen: 24
                          140.209.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:42:d2:57:9e:d0:ff:aa:a3:2e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=9074ede5-fc6e-4fa0-8d80-4460b69658a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:62:a6:25:58:db:37:bc:3a:7a:b3:ad:68:
                    cf:8a:b0:99:59:8e:5c:aa:4b:2d:32:8b:10:1e:61:
                    c6:88:7a:78:90:e5:7e:c2:f6:36:f2:a4:51:1e:13:
                    94:90:ea:b4:10:a2:18:c1:c7:79:39:68:f7:f7:17:
                    74:ba:e0:c8:fa:4e:c6:8b:57:a8:9d:ad:c9:40:f6:
                    1a:77:32:8a:f8:b3:ca:49:bb:08:d5:ff:69:be:75:
                    44:3e:09:5d:a0:1c:ac:81:d3:40:47:d6:df:39:24:
                    b8:c4:e5:38:b4:da:00:3d:7e:f2:89:c6:6d:36:35:
                    3e:65:b5:19:cd:a4:76:fa:9c:31:55:37:dd:78:81:
                    b3:9c:3d:8c:62:f9:68:1b:9a:73:10:c7:5e:5f:4f:
                    26:56:d6:3d:a6:df:47:c0:a0:36:0f:fe:e7:7c:8a:
                    85:f8:72:14:2b:de:49:23:8c:9b:29:ff:22:0b:ed:
                    a0:cf:2d:6b:50:49:18:f7:e3:99:78:88:92:e1:40:
                    c1:58:16:8b:2c:8a:e2:6c:96:6f:92:6d:10:2d:df:
                    c7:32:07:04:ff:27:58:16:2b:f6:fb:e8:c2:d8:85:
                    90:e9:94:a7:72:f7:67:98:67:da:24:f2:fb:75:43:
                    9e:49:30:38:cf:a0:58:28:e3:a7:06:54:49:89:a4:
                    3b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6A:B2:31:94:E3:B6:11:A7:89:AF:80:2E:3B:F4:4E:5C:EC:BB:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0953ab88-0d2b-371e-be5f-8d9985c68ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.209.240.0/21
                  140.209.249.0-140.209.251.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ce:79:a2:60:d5:a8:a5:0c:96:4b:24:b4:60:d6:d3:5d:a1:
         81:fa:ac:84:10:1c:7e:d4:ab:36:15:bc:ee:5b:eb:a8:9e:97:
         97:9c:6a:5e:8f:67:c5:3b:9a:b0:b1:4c:30:d8:6c:1b:38:2c:
         7e:f5:41:4c:a7:1c:87:65:68:8c:f4:58:23:9a:57:78:34:a5:
         f8:c9:67:9a:04:92:4f:0f:c3:cc:4d:f6:9c:66:26:8f:5b:0f:
         d3:7b:b7:37:5c:79:ca:0c:98:ae:d8:4c:43:c8:d3:5a:31:a5:
         0d:9a:09:89:6f:fb:73:66:5d:db:78:61:14:6e:5b:e2:04:f6:
         26:3c:a6:18:15:52:68:06:32:d9:85:ac:d6:69:d3:ca:52:d6:
         b2:b5:14:47:36:55:e7:39:f6:7b:80:0a:5b:2a:bc:95:55:fe:
         27:ea:3f:12:da:58:dc:a4:b8:16:2a:e2:84:f4:7f:c9:48:ed:
         b5:d1:c9:79:c1:22:57:c8:3a:b8:fa:ff:a3:93:87:99:12:53:
         4b:a5:39:ed:6b:da:3f:b7:2d:e9:18:73:26:74:97:69:6f:d3:
         aa:52:26:4c:71:e1:e0:24:fb:ee:63:7f:fa:ac:31:6e:ce:97:
         06:c5:1f:a4:fe:44:2c:76:76:02:48:96:c5:05:a2:dc:1e:24:
         9a:b2:2d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:47 2025 by rpki-client