Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9d75e60f-fff2-353b-aa43-f653f361c6a9.roa
File:                     9d75e60f-fff2-353b-aa43-f653f361c6a9.roa (raw, json)
Hash identifier:          qMgV85xKDFxtGbtn+d3hNkzjcIgIuM6v7LHbNkdeyaw=
Subject key identifier:   C8:46:00:09:3E:09:34:BC:8A:9E:6E:69:C4:9D:04:6D:FF:9B:6F:A3
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584924D3F6FC1B88EA832BB64F00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9d75e60f-fff2-353b-aa43-f653f361c6a9.roa
Signing time:             Mon 10 Mar 2025 17:30:00 +0000
ROA not before:           Mon 10 Mar 2025 17:30:00 +0000
ROA not after:            Sun 08 Jun 2025 17:30:00 +0000
asID:                     394089
IP address blocks:        134.231.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:d3:f6:fc:1b:88:ea:83:2b:b6:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar 10 17:30:00 2025 GMT
            Not After : Jun  8 17:30:00 2025 GMT
        Subject: CN=36f8bbf0-3e1f-43b9-a90d-de4c91f4be6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a0:85:16:84:1d:ff:11:96:11:c8:4b:54:c8:
                    aa:4b:8c:bf:2b:02:3b:7f:11:1b:2f:a7:5b:08:2c:
                    32:76:d2:6e:59:22:f7:83:fc:74:78:51:6e:f6:4f:
                    39:b1:d8:f2:d2:d2:e9:22:82:c8:52:9c:59:4f:53:
                    9f:85:46:f2:f8:39:87:37:38:d9:79:d3:c7:20:4d:
                    b5:31:fd:68:a5:0b:59:45:33:3a:46:86:94:a3:f3:
                    97:0d:cc:48:e8:96:0f:51:80:28:d7:23:22:14:97:
                    2a:f4:bd:c0:1a:a2:de:73:77:94:8b:3a:49:70:7a:
                    b4:60:42:6e:9d:85:0e:14:c8:f8:38:02:44:09:56:
                    2f:5b:70:c5:cd:13:5f:17:8c:91:67:31:da:df:c8:
                    00:46:4b:de:20:55:aa:9e:41:8e:7e:18:b8:22:d1:
                    90:2c:5b:a3:1b:80:e6:e8:0c:16:08:be:46:8f:95:
                    d4:cc:13:87:42:aa:2b:bf:8e:8a:66:08:02:65:c9:
                    05:d2:9e:12:fe:f1:d4:14:8b:92:e4:1a:ef:c9:fd:
                    d9:aa:1f:37:c4:f5:1a:64:69:b7:9d:34:9d:d3:5b:
                    2a:b2:c1:93:16:5e:ac:86:91:96:5d:84:f2:09:b4:
                    89:f5:ff:e3:9a:f3:bf:6c:b2:2c:62:d8:ac:5e:5d:
                    60:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:46:00:09:3E:09:34:BC:8A:9E:6E:69:C4:9D:04:6D:FF:9B:6F:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9d75e60f-fff2-353b-aa43-f653f361c6a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.231.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:7c:8c:dc:59:25:9f:74:32:06:02:2c:d0:c0:c0:5a:bc:05:
         9e:ae:b9:b0:87:c0:59:c4:47:5d:e0:35:45:7a:6e:9b:a9:28:
         51:ac:4d:11:bc:6f:e6:33:0e:19:cb:4f:ba:42:b8:fb:c5:b8:
         10:dd:fc:1a:6b:28:16:51:7f:40:a6:dc:89:f7:62:7f:ab:a2:
         df:81:b4:0c:40:29:50:d2:61:ac:0a:22:9d:cb:ce:5b:c4:e3:
         96:1a:3d:3e:58:05:8e:cd:14:28:b9:e9:61:d3:32:a8:59:7c:
         e4:19:a9:d3:2f:4e:7c:84:9e:fd:91:f8:ce:2b:cc:4e:49:21:
         1d:3c:b3:b2:52:10:6d:5c:2d:ed:65:2c:0a:47:fa:18:c2:cd:
         f3:8c:56:2e:e3:53:b0:78:e9:2b:f5:7c:b6:c1:ae:26:70:fa:
         11:48:73:ef:5e:f8:fa:7a:3b:d1:80:e5:1e:05:62:9a:6c:00:
         ba:ba:2a:c9:86:7a:e9:70:66:01:a2:cf:40:5b:72:c9:d8:b3:
         c8:8f:3b:59:3e:5e:5e:cb:92:37:d7:e7:2b:fd:50:d6:35:70:
         f3:3f:03:ea:c9:72:78:1a:a6:bb:4b:dc:50:42:9e:86:b9:a1:
         42:c7:3f:8b:d0:b2:6c:02:7b:d6:aa:58:0f:d7:09:fd:2e:41:
         50:d9:33:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 15:05:37 2025 by rpki-client