Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/256f50ae-7edb-3604-9a36-1652de9e921f.roa
File:                     256f50ae-7edb-3604-9a36-1652de9e921f.roa (raw, json)
Hash identifier:          ojJMX6FC942tjS1uvGdVHIgeV2om+EDRac226s8GJCo=
Subject key identifier:   28:8F:6C:49:4B:C2:36:62:AA:80:19:80:84:C2:A7:04:44:9E:3A:89
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285848F65BDC963D1756DB054D4390
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/256f50ae-7edb-3604-9a36-1652de9e921f.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        208.127.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:dc:96:3d:17:56:db:05:4d:43:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=469931e3-0bee-485a-ad4d-555a04216ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:a8:a2:71:86:45:4b:92:4c:a4:81:d5:68:
                    ea:ec:c7:ce:9e:55:61:a6:09:d4:8b:10:63:54:f9:
                    91:79:21:90:f7:d9:4d:ca:73:51:2c:6c:90:95:5c:
                    41:0d:8f:50:4c:9e:65:e6:b9:db:7b:54:00:a4:94:
                    1d:34:a4:ba:1d:07:06:97:55:6f:44:01:db:71:04:
                    40:b9:ee:79:40:e1:1f:56:41:2c:bf:d7:d7:be:13:
                    fe:2b:8d:2e:0d:55:8c:f8:d5:0a:b8:7b:4d:ba:6a:
                    f8:2a:f2:ad:84:0c:0b:9d:6a:4d:9d:28:78:26:16:
                    74:49:ae:c7:36:37:6f:5f:d6:6f:5c:c5:b9:86:3c:
                    cd:7c:84:75:77:da:35:1f:1e:1d:f1:4c:0b:76:f8:
                    ea:6f:c3:bb:ca:b9:d2:f1:b9:10:02:92:f2:d3:7d:
                    b9:79:50:ec:c0:40:fe:a7:77:da:f1:c7:39:4e:af:
                    01:3e:48:20:5a:1d:0b:80:5f:90:f9:6b:26:86:65:
                    88:13:d2:d1:9d:5d:a7:e4:81:ee:24:9f:79:f9:d1:
                    fb:88:89:23:2d:bd:96:3d:da:87:3a:22:cb:e7:08:
                    2e:59:86:d2:bd:2e:c5:6c:36:cd:79:a7:78:b5:69:
                    d0:ba:19:2f:09:f7:b5:f0:61:b6:d8:72:76:0e:28:
                    07:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8F:6C:49:4B:C2:36:62:AA:80:19:80:84:C2:A7:04:44:9E:3A:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/256f50ae-7edb-3604-9a36-1652de9e921f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.127.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:60:9c:14:50:78:42:10:16:a5:c0:ee:a5:cf:ce:e3:3a:28:
         cb:92:11:15:d4:29:74:9f:4a:d0:41:b9:40:1b:eb:36:28:d9:
         76:8d:c4:fd:e8:9c:17:62:78:bb:9e:cb:f2:f0:8d:5d:41:c1:
         ed:58:ef:6c:79:40:dc:ac:8e:cf:17:75:63:82:02:05:14:42:
         44:6a:42:b5:c2:58:a6:e0:74:5e:fb:68:7c:ee:f9:7b:27:ea:
         6f:b0:a1:c1:d0:05:bc:91:c0:49:17:b1:4b:1f:31:90:92:48:
         34:0c:9c:a3:14:bf:34:89:e6:2c:97:17:3d:38:9c:27:65:b7:
         99:dc:e6:46:96:26:e1:11:db:3e:60:c9:7f:a2:6d:c1:12:e8:
         92:89:1d:05:39:20:bb:74:b8:00:d3:91:18:6f:dc:76:df:f9:
         65:48:ee:20:fe:c8:22:3a:3d:1b:38:df:7b:34:e6:52:25:96:
         5a:15:d1:68:f0:c4:51:2d:26:af:7f:a0:63:fd:95:61:88:be:
         d2:96:eb:8a:bc:ec:b6:58:59:ac:67:12:8f:a3:6b:ce:8b:8f:
         08:56:fe:10:8d:c4:eb:ba:85:90:9b:d5:42:1f:25:5b:74:9b:
         ad:d8:e7:f1:7f:e9:bd:da:54:9c:1e:16:9b:12:34:39:91:62:
         e4:b2:17:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:05:03 2025 by rpki-client