Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3851e1de-9d4a-3f2b-bcda-bfb8394275b2.roa
File:                     3851e1de-9d4a-3f2b-bcda-bfb8394275b2.roa (raw, json)
Hash identifier:          F1lSq7joQ9FT2TowTrgzahH9hXbBBubAEAIwenUNEvI=
Subject key identifier:   48:51:62:84:FB:0F:63:48:02:E2:BD:91:C7:9B:8B:C9:83:6A:0C:DF
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285848E00658A73A22F1FB30310080
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3851e1de-9d4a-3f2b-bcda-bfb8394275b2.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     394089
IP address blocks:        169.224.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:58:a7:3a:22:f1:fb:30:31:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=06e2dac8-969f-406a-92e8-18cfe4c1527e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:33:ab:e7:64:60:29:ab:79:02:d8:f7:06:
                    75:b6:13:7b:9c:15:8f:a5:10:a7:71:c8:6b:4f:14:
                    f4:a2:da:3d:15:7c:3c:12:cd:e7:90:d7:3d:57:08:
                    bb:f7:a5:ae:3c:6a:60:9a:7e:d3:a2:98:a7:ca:56:
                    cc:1b:bc:61:7d:29:ec:ab:df:ab:a6:52:92:7d:c6:
                    b5:a8:08:1b:a3:54:be:74:77:45:62:43:b8:37:cd:
                    32:32:72:a5:69:38:51:54:ed:c3:d9:0f:27:df:e5:
                    62:53:bc:c6:c2:64:18:63:af:07:9d:39:65:9d:17:
                    5e:73:27:08:c6:db:36:d6:09:58:e7:1a:ea:83:08:
                    67:7f:5c:1f:7e:eb:af:42:51:6f:7a:c6:3b:4e:a0:
                    cd:13:dc:6f:e4:7f:44:b6:9e:c1:27:20:93:59:3d:
                    8c:1e:03:0b:34:0a:b7:0f:a0:ba:4c:15:a2:99:2a:
                    45:fa:bf:81:fa:4d:d1:49:e8:bd:7c:82:7d:e5:d6:
                    14:60:75:d2:e7:86:98:34:0a:65:8f:35:ef:20:b6:
                    4f:c9:72:80:06:d7:1d:a4:48:07:31:9a:ad:35:72:
                    29:38:c3:a7:e9:3e:76:49:f3:ca:c1:f9:e9:e4:95:
                    6d:c6:6e:be:d1:75:c4:4c:0d:05:ca:29:7a:b5:7d:
                    61:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:51:62:84:FB:0F:63:48:02:E2:BD:91:C7:9B:8B:C9:83:6A:0C:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3851e1de-9d4a-3f2b-bcda-bfb8394275b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.224.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:79:64:34:54:90:f6:5f:1a:93:4a:f9:c9:87:f6:ba:8e:23:
         c2:d4:63:bf:b9:14:c8:2f:ed:4c:39:a5:eb:c3:a1:45:f0:e4:
         6b:ea:35:ac:e6:62:bf:22:91:e8:e7:01:74:fd:1d:f0:09:a1:
         bd:ba:f0:be:b3:22:72:81:93:04:52:29:3d:df:a6:dd:6c:61:
         77:59:f5:aa:c5:7c:de:2e:de:1d:04:14:e1:56:d0:c5:67:0a:
         4f:8c:57:42:1d:07:93:72:4d:42:e2:e5:2e:d0:a4:a2:9b:cb:
         bc:85:3c:c5:fe:12:df:21:e7:df:3a:ba:57:4f:89:9d:a8:9f:
         3c:a1:5a:71:43:09:26:c6:46:b0:60:b9:16:21:ee:76:a2:45:
         3c:c7:fc:ad:a8:7c:e1:20:37:50:44:06:05:80:2f:ed:67:6e:
         06:5f:c9:31:48:bd:2b:80:44:a9:11:56:45:51:a2:c7:eb:7d:
         5f:13:36:b6:ad:8e:f8:04:5c:b9:43:7d:06:1a:1e:67:4d:06:
         d7:8f:44:f2:27:a8:e1:1c:60:79:74:50:0f:d1:0e:ac:3b:9e:
         d4:c8:84:61:62:c8:ae:f8:03:9c:ea:85:e4:b4:31:d8:c6:66:
         c1:8e:05:26:e5:76:0b:dd:47:06:46:6e:0b:ac:05:ae:c4:95:
         3d:df:f0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:15 2025 by rpki-client