Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b645d47c-d9ef-3428-83ca-0c1a50bccc04.roa
File:                     b645d47c-d9ef-3428-83ca-0c1a50bccc04.roa (raw, json)
Hash identifier:          p6czjENP+MssWFsQXpbI8R05n/ZRd+FemO5AekH/GgY=
Subject key identifier:   FD:66:05:A1:6A:31:80:29:DC:DD:8D:72:81:B4:09:76:F5:5E:11:65
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858481F6533497B6CAEC803100500
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b645d47c-d9ef-3428-83ca-0c1a50bccc04.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     394089
IP address blocks:        165.85.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:33:49:7b:6c:ae:c8:03:10:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=ed0abcb2-7551-4588-a38b-416e08e92a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:66:6e:65:32:90:7b:e0:be:d5:7b:35:8d:f4:
                    ae:7e:81:55:b2:55:ad:a1:65:18:5e:2d:6c:3e:ea:
                    35:61:8d:3b:dc:7d:c3:a6:59:51:52:f1:66:bb:63:
                    c5:87:07:42:43:91:90:48:33:ea:fa:a3:58:d0:9d:
                    10:69:3d:c9:9e:6b:10:e9:43:7f:d8:f8:d5:7e:31:
                    1b:f8:29:ad:1d:a1:6b:2b:6d:a5:39:5b:6e:14:16:
                    db:ff:7e:f7:e2:aa:53:2f:eb:41:77:56:fd:da:da:
                    1d:7d:fb:fc:3a:04:a8:46:90:7c:33:b1:e8:fa:38:
                    47:b9:4b:67:63:41:5c:c2:4d:ef:65:58:15:ec:73:
                    a0:ff:7a:bf:d7:b7:c2:bc:23:5b:04:32:90:fa:69:
                    3f:e5:19:d0:65:c6:41:38:4b:1b:f1:de:53:54:8d:
                    bc:c8:0c:fe:fe:a4:70:b9:4c:6a:0a:aa:10:69:4c:
                    c7:75:27:71:32:25:7f:87:ce:e1:84:2a:26:a1:90:
                    dd:6d:c5:a5:b1:f1:3e:0e:96:3b:c7:32:3f:31:71:
                    c2:63:7e:2b:85:57:ea:f4:4f:70:61:92:cd:82:49:
                    78:18:bd:a9:93:43:89:f8:cd:5e:56:1a:a6:c4:55:
                    df:ce:52:9b:d3:3f:94:ad:14:bd:63:8d:9f:63:ca:
                    6d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:66:05:A1:6A:31:80:29:DC:DD:8D:72:81:B4:09:76:F5:5E:11:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b645d47c-d9ef-3428-83ca-0c1a50bccc04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:b1:6f:de:c5:0c:c5:4a:7d:44:a2:77:50:3a:c9:dc:ff:ed:
         67:e6:f2:08:76:0d:12:ea:c9:c7:9a:aa:04:9e:4d:e2:83:a1:
         3c:3c:f0:fe:93:41:92:85:44:ed:8b:c2:01:8f:6c:23:e4:09:
         48:ce:d1:7e:3a:db:18:9b:10:0b:f3:1d:f9:a8:34:07:68:c6:
         05:b1:44:06:c5:ae:8e:71:db:46:05:9d:08:22:eb:65:02:1d:
         90:bc:b2:63:4e:ec:d9:e7:5e:39:d1:de:ac:da:9e:63:45:18:
         a7:ec:e0:5f:17:f7:fd:00:d6:39:b2:7b:e9:3c:1a:8e:a1:e9:
         35:fc:88:27:ed:e8:06:d9:23:5a:42:0f:5d:73:7d:32:f7:16:
         a1:83:b6:82:34:64:b7:85:ef:53:71:2a:d3:9a:d6:6d:4d:d8:
         35:be:50:e8:88:da:2d:a2:d7:dd:00:00:9f:27:23:d5:3e:ee:
         12:4c:82:0e:ed:1a:7a:93:29:74:40:47:30:56:70:6c:01:c0:
         c6:30:7e:22:b5:6f:6a:30:a0:c9:3b:f8:d5:44:3d:1e:28:df:
         08:40:5a:f4:44:a1:3a:fd:0b:3d:d7:52:16:31:62:83:19:42:
         79:84:d6:85:66:29:20:2e:bb:5c:e4:e4:2a:9d:94:5a:62:e2:
         8a:f8:d0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:15 2025 by rpki-client