Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/62b4dd36-c7a3-3eef-b137-1909346b3eec.roa
File:                     62b4dd36-c7a3-3eef-b137-1909346b3eec.roa (raw, json)
Hash identifier:          uerbnrsOxla5bDHf4PohtLd6IvxlSTskUUYjQY/u4kw=
Subject key identifier:   15:F0:88:B5:3A:F4:5D:6F:C8:33:B8:EF:49:20:73:00:9A:1B:D4:AF
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858489BA0B5098A51ECBECDB90700
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/62b4dd36-c7a3-3eef-b137-1909346b3eec.roa
Signing time:             Mon 20 Jan 2025 14:00:51 +0000
ROA not before:           Mon 20 Jan 2025 14:00:51 +0000
ROA not after:            Sun 20 Apr 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        169.224.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:a0:b5:09:8a:51:ec:be:cd:b9:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jan 20 14:00:51 2025 GMT
            Not After : Apr 20 13:00:51 2025 GMT
        Subject: CN=538db995-8a08-45db-98c7-432b201f3f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0a:8d:15:9f:c0:6b:8f:49:ec:09:e2:8f:82:
                    54:c8:e3:b3:fe:fd:3a:d6:77:49:b5:b0:f7:ec:c5:
                    f3:68:f6:51:7a:f1:12:f4:f8:40:cc:5b:8f:01:13:
                    c8:50:75:11:79:ea:f2:ea:37:4c:23:b5:ab:82:e0:
                    7e:f3:71:90:17:b6:fc:c9:ac:66:51:80:52:68:10:
                    5d:0d:06:60:7a:f5:93:de:9e:69:d8:42:cd:57:2f:
                    e7:98:9b:cf:df:3a:be:95:63:6b:55:63:cd:4c:17:
                    79:a4:c4:19:d2:16:4b:a0:b3:14:d8:84:40:9b:f0:
                    bb:03:af:fe:d3:31:c9:e7:46:ad:ee:9a:20:77:63:
                    cd:70:1d:57:dc:78:d2:be:17:97:23:d1:ef:c4:ee:
                    11:ee:9c:ad:86:56:30:6d:e4:d6:a5:81:15:a1:d6:
                    dd:a6:45:8c:0c:f6:66:ec:a7:5f:c9:d1:16:fd:c3:
                    97:be:ee:49:90:26:a4:d9:26:8c:62:39:d5:18:b2:
                    09:64:26:a3:d9:cd:f0:df:7d:51:df:db:8d:29:20:
                    8c:78:14:c0:1b:e0:61:50:ea:01:a1:a7:67:e1:3f:
                    c8:36:6a:0f:e3:a9:ce:42:fa:d0:9f:dc:1e:a4:aa:
                    6d:12:86:9e:5b:e2:ac:91:c5:38:6d:85:ab:7c:32:
                    42:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F0:88:B5:3A:F4:5D:6F:C8:33:B8:EF:49:20:73:00:9A:1B:D4:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/62b4dd36-c7a3-3eef-b137-1909346b3eec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.224.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:97:f8:bf:8a:71:a0:87:81:0e:2c:da:59:55:88:d9:1b:fd:
         02:0b:21:f4:3d:86:b9:54:41:a1:fb:d4:33:40:10:69:29:ab:
         a7:a8:df:ba:3a:8a:47:6a:d7:17:fd:43:4d:15:d8:27:dc:b2:
         30:d7:25:7c:25:72:1c:ad:74:7d:10:e0:01:1b:e3:e6:f4:24:
         2a:0e:63:05:49:4d:d5:23:74:b6:40:9a:53:91:1d:f0:6a:8e:
         20:e2:3c:20:a7:ec:b1:9e:2d:7b:a4:a1:31:05:43:4e:45:c4:
         f4:14:da:ed:df:64:51:20:6d:83:42:cf:f3:e6:aa:1e:2c:36:
         a8:19:f5:79:1e:f7:91:d6:61:a0:d9:49:eb:a5:ba:f3:b9:3e:
         d9:87:e9:4a:4a:aa:61:a1:1f:d1:43:89:e5:6f:74:bc:a4:94:
         cc:83:e3:d0:a3:e5:2f:7c:6d:4d:a4:16:b5:23:42:86:2e:b9:
         bb:a2:b4:f6:2a:1a:cf:03:d5:74:c0:0e:17:d7:c4:d9:e5:14:
         f1:d3:6c:49:6e:01:dc:10:51:dd:7b:36:6f:c4:db:2a:d0:88:
         51:23:9b:a9:9b:09:46:34:87:c0:55:b0:b4:52:71:41:80:3d:
         67:ef:2e:0f:35:97:3f:33:4f:72:04:81:ad:0f:08:0c:b8:53:
         05:e5:06:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:01:21 2025 by rpki-client