Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8748119f-0b36-3fd2-b601-4781cf3d78cd.roa
File:                     8748119f-0b36-3fd2-b601-4781cf3d78cd.roa (raw, json)
Hash identifier:          u2Zli55xIFIKZDgA/+nBw/scP9MFS197dKwuJa3DIuk=
Subject key identifier:   C9:CE:F0:E5:B1:37:FE:51:B9:74:39:25:DF:67:04:43:4D:FA:8D:0D
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858491D7182E60C6957F86FB50240
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8748119f-0b36-3fd2-b601-4781cf3d78cd.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        165.85.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:82:e6:0c:69:57:f8:6f:b5:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=1a11ea1f-5424-4b23-b123-8aecc4aa1782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f4:da:06:29:78:c9:74:1a:4a:f3:42:f4:bd:
                    be:7f:aa:d3:15:40:cf:31:16:27:fe:3e:41:d5:49:
                    87:5d:39:e9:c6:f9:c5:dc:56:6e:7f:19:1d:8b:fc:
                    e7:2a:fa:cc:4a:65:56:c1:94:f4:b3:92:2f:da:98:
                    44:59:a3:c6:1f:30:67:4c:3e:de:1b:60:61:60:48:
                    b0:51:3c:27:ce:2a:4f:f1:3a:ba:74:26:d9:c5:e2:
                    86:57:23:40:3c:11:0a:47:c2:50:e1:a7:c1:de:b6:
                    8a:4a:49:13:6d:ed:52:73:ad:cc:49:b2:d9:ea:71:
                    1c:00:47:e0:3c:39:bb:ce:6e:0c:05:8d:60:89:cf:
                    f8:58:03:ba:df:51:3b:33:e4:ea:32:72:1a:b0:33:
                    e4:bb:ee:7d:33:79:10:0b:24:41:79:8f:5d:4e:0f:
                    cf:48:d3:6b:8e:db:c2:31:91:e3:15:46:c6:15:e6:
                    e3:2d:72:a2:65:0a:08:72:a6:5f:9b:3a:3b:c4:b6:
                    52:70:d9:86:35:95:bb:80:fb:64:b8:86:16:d2:58:
                    0d:cd:fd:f8:bc:c2:eb:41:18:09:de:1f:80:6d:1c:
                    b4:fd:93:78:f7:96:f0:65:c4:7b:5c:93:5c:7a:dd:
                    1c:50:43:5e:38:35:86:0f:60:94:50:f7:4d:a6:d3:
                    56:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CE:F0:E5:B1:37:FE:51:B9:74:39:25:DF:67:04:43:4D:FA:8D:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8748119f-0b36-3fd2-b601-4781cf3d78cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:f3:ee:9f:c3:c6:57:eb:82:5e:b5:89:b1:f4:80:7c:4a:c7:
         d9:97:dc:98:8c:32:d5:74:46:fb:d3:71:43:61:05:0e:10:b7:
         dc:0d:b9:82:b3:0b:5d:93:03:9c:5f:42:4f:85:fd:25:07:b0:
         0c:41:73:ae:1c:69:7e:32:1e:3b:9d:28:10:4e:ba:3b:58:6a:
         4a:86:5e:58:f3:d1:12:14:6b:c7:4b:ba:59:a5:a9:d0:81:62:
         31:29:c4:e8:e0:d0:78:25:c3:4f:64:5b:09:35:88:71:ac:5e:
         81:b6:bd:5e:2d:17:6e:5b:b4:dd:3d:ac:1e:88:1f:94:e4:27:
         19:ea:bd:ad:b4:54:e5:22:20:59:56:e8:4f:0e:19:12:6b:e8:
         66:78:2f:e8:3d:63:37:5a:e6:d3:16:a5:59:fe:1a:06:58:9c:
         7c:7e:17:f8:30:7a:22:5c:0a:a1:3b:4c:35:87:00:4c:8e:16:
         d1:eb:43:25:50:c6:06:c2:a4:88:7f:53:7a:19:d5:f7:d0:d9:
         2f:b3:2f:4c:52:cf:db:0b:79:a1:86:f8:c2:34:02:71:a4:f0:
         66:6b:1c:08:6c:c3:21:bd:ac:4f:c6:d1:79:8e:22:61:47:e6:
         9c:1e:57:d3:46:bd:83:6d:ee:3b:46:b0:d5:c6:6d:f6:5a:d6:
         7a:8a:58:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:22:50 2025 by rpki-client