Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8a7c8fd9-33c8-3896-875f-f6567b317496.roa
File:                     8a7c8fd9-33c8-3896-875f-f6567b317496.roa (raw, json)
Hash identifier:          ZDWZNQyvYjltT8azDQMFWv0z5XtLIrUUsgKPw7Sewpo=
Subject key identifier:   1F:E5:13:F4:F7:2E:B8:B5:71:C2:92:1F:82:1F:C4:DE:42:23:42:08
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858493C0940F84CF009A6FB8C8480
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8a7c8fd9-33c8-3896-875f-f6567b317496.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     396982
IP address blocks:        140.209.192.0/19 maxlen: 24
                          140.209.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:40:f8:4c:f0:09:a6:fb:8c:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=43a4e194-014d-4f71-b309-6548202672bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:35:3d:77:21:e0:31:fc:57:28:81:d3:c6:33:
                    18:76:7b:ad:87:68:4c:e5:7d:fa:15:29:a4:7c:df:
                    19:65:9c:f0:8e:0e:1e:dc:16:b8:6b:85:d3:34:08:
                    6f:07:94:54:1c:b1:11:fa:8e:4f:c2:b5:f8:e9:ee:
                    31:3a:07:d6:1f:23:52:e3:de:04:ea:b0:03:b9:cb:
                    26:b5:16:8c:14:fa:5e:fd:1d:ef:8b:89:42:6f:7a:
                    8b:f9:8e:65:29:33:00:b2:59:98:a0:14:97:40:3a:
                    7b:fa:84:8e:6d:c9:15:5e:bb:6d:77:c2:8a:c8:42:
                    da:f5:e9:e3:54:94:83:d9:07:9c:ad:22:06:17:b9:
                    60:cb:2b:40:dd:c3:36:36:fd:6d:77:04:33:27:d5:
                    83:56:6b:ef:84:08:e2:2e:51:08:41:44:55:9f:2e:
                    ae:70:b2:93:7e:e3:05:c7:5a:c5:83:74:1c:89:ed:
                    23:b0:bc:4f:eb:3f:cc:92:f8:bc:9c:98:d3:43:16:
                    e0:40:39:d8:d4:f8:21:d8:86:4f:75:70:15:72:a1:
                    16:e3:a3:d6:c7:65:e0:e9:66:de:0f:ae:0b:da:41:
                    0b:ca:e7:9d:1e:22:78:09:e4:d4:de:65:83:5d:12:
                    d6:20:98:4f:f9:60:cd:d5:91:e8:73:61:13:0c:95:
                    ed:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E5:13:F4:F7:2E:B8:B5:71:C2:92:1F:82:1F:C4:DE:42:23:42:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8a7c8fd9-33c8-3896-875f-f6567b317496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.209.192.0-140.209.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:17:1d:51:93:2e:de:2d:d1:1b:98:23:33:b6:b4:b9:87:9a:
         16:f6:ad:30:59:00:f5:9f:3f:88:1f:d9:c3:3d:96:3d:18:a7:
         f9:d2:7f:2e:d1:1f:e8:e4:b6:c6:c8:bd:a2:64:c0:71:6f:31:
         3f:fa:9f:73:25:dc:7e:b5:90:cb:72:c5:7b:a4:56:4f:12:21:
         82:ba:07:9c:be:b8:d5:10:a8:21:fd:a2:73:cf:90:3b:bd:05:
         c9:60:35:25:ab:7d:b6:6a:68:c9:18:27:7e:4b:0f:47:ad:a9:
         e8:21:4c:cb:6d:61:9a:e4:5d:c2:29:db:25:a4:86:c6:01:4a:
         a8:89:db:bb:10:33:7b:87:1f:72:2d:09:49:bc:c4:22:7c:84:
         05:b2:49:b5:de:2e:40:76:7d:6d:a2:71:41:5d:52:8f:89:2f:
         14:cd:3f:b2:18:f0:dc:93:47:8b:a6:4b:2d:31:11:c2:49:3b:
         c5:48:fb:bc:67:dc:f1:f4:cd:4d:5e:f9:55:96:0a:b9:9e:36:
         e6:3c:95:c2:e8:7e:c7:85:2b:b0:e3:b1:03:09:c9:4a:1c:77:
         1c:a6:99:7c:10:9a:a2:17:63:78:5e:7c:9f:e2:cc:77:eb:a0:
         a3:7f:d5:3e:18:75:49:a1:72:ab:3f:41:71:6e:23:ab:5b:49:
         28:ae:79:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:56 2025 by rpki-client