Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8748119f-0b36-3fd2-b601-4781cf3d78cd.roa
File:                     8748119f-0b36-3fd2-b601-4781cf3d78cd.roa (raw, json)
Hash identifier:          BOECSXif9xVEnHKx+VIY3NqdsB/zTkOo6aDiWOnYG9M=
Subject key identifier:   52:C1:41:80:DA:98:2E:95:4E:29:7D:CE:FC:D4:90:67:24:6E:6F:76
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858483E1AB76C1EA3496605008FA0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8748119f-0b36-3fd2-b601-4781cf3d78cd.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        165.85.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:b7:6c:1e:a3:49:66:05:00:8f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=b587414a-4f18-4253-acd3-2ed3ddf0ddb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0e:9e:b7:eb:be:7d:cd:99:22:7f:7f:ff:5c:
                    5f:75:67:e8:ee:18:04:08:df:72:62:4f:95:28:d1:
                    ee:32:12:b1:05:35:7b:62:a3:9e:cd:b7:24:3b:f4:
                    3c:a7:d6:d5:58:90:a8:cf:01:fd:3a:8c:73:a4:62:
                    5d:ad:89:51:53:b6:68:b1:d2:4f:c3:a6:c6:cd:46:
                    2b:51:3d:32:bf:db:5b:a3:c4:6e:6c:05:b4:b9:66:
                    f7:73:51:10:ec:11:1d:32:de:1c:33:9b:f0:cc:92:
                    dd:eb:35:ea:02:1b:e8:b0:dc:60:a3:a8:6e:ba:8d:
                    15:b4:de:dd:18:56:6d:f4:d6:69:af:08:b9:0f:5a:
                    8f:05:a6:ad:01:64:3b:b3:c5:87:90:5a:e9:4b:bc:
                    f6:43:7a:72:05:87:65:6b:c1:a6:f4:1e:49:60:ff:
                    17:6e:46:5b:9a:09:8a:69:76:ab:55:b6:df:dd:4e:
                    fd:f0:f4:17:6d:31:41:21:9d:89:c0:8d:30:5c:23:
                    46:f1:26:38:65:96:69:6f:6f:74:e0:a4:8f:16:f8:
                    b5:d5:cd:24:a8:f5:7f:da:10:24:42:03:97:56:5f:
                    0c:08:6e:ef:ae:b2:1c:0a:67:d0:b5:b2:7d:ff:a4:
                    eb:bb:6c:8e:fa:b1:2d:2d:84:1b:4e:88:b3:52:2d:
                    20:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C1:41:80:DA:98:2E:95:4E:29:7D:CE:FC:D4:90:67:24:6E:6F:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8748119f-0b36-3fd2-b601-4781cf3d78cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:17:bb:a0:cd:b6:44:0e:85:3a:f1:98:b8:98:28:8e:7c:93:
         12:6a:f1:a2:6b:2a:ba:e4:7f:59:dd:8c:b7:19:1e:32:56:ea:
         b0:a4:49:d6:d4:3b:c6:63:49:e2:95:2a:ac:e7:9b:f9:bb:16:
         61:b4:e1:cb:25:ac:23:bc:79:57:a4:9b:d1:5b:74:7b:9e:99:
         24:ef:4d:bd:bf:fc:83:8c:db:36:7c:4f:86:f2:c6:a4:1c:8c:
         1b:6b:59:ea:cf:82:c8:a6:cb:2e:d6:16:08:25:57:d7:be:81:
         79:83:e4:48:22:da:b1:02:c7:a9:29:7a:e4:3b:99:9a:32:f1:
         98:61:e6:11:cb:05:da:7f:04:9e:41:5d:96:a1:cd:81:d3:88:
         d6:50:94:44:27:65:38:30:af:92:55:be:ba:4c:73:66:74:2e:
         a4:4e:fe:46:10:d8:03:02:30:e5:5a:52:1f:df:cb:9d:80:ab:
         00:1c:35:b5:5b:0c:33:67:4f:8c:2f:96:5a:7a:44:50:80:e0:
         4b:67:c1:ed:ea:fc:30:ae:84:ac:68:d6:7d:2d:29:f6:b3:fe:
         e7:0f:64:fc:c6:b1:54:f3:da:49:df:63:c9:40:68:d3:19:79:
         87:76:cb:d2:cc:48:d0:59:d4:55:5a:72:57:23:e0:20:d6:18:
         ad:e6:8b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:57 2025 by rpki-client