Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f06ff54b-63ec-3bf7-9834-a6c1e60330d2.roa
File:                     f06ff54b-63ec-3bf7-9834-a6c1e60330d2.roa (raw, json)
Hash identifier:          W27EwJ3k/DqskhoCtDeg9noyHLUDXZ1Lr71zsqm/tYA=
Subject key identifier:   FD:10:A0:D4:8F:92:4A:13:E6:88:34:AB:FF:69:D7:2A:85:B3:C6:78
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584819CFD7DFD7D62A372CC5A700
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f06ff54b-63ec-3bf7-9834-a6c1e60330d2.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     16550
IP address blocks:        165.85.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:d7:df:d7:d6:2a:37:2c:c5:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=e22dbd08-8fe7-4a62-9124-10975a2648f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9a:e1:ec:43:7e:39:71:b7:62:57:eb:7f:93:
                    bf:da:9a:5c:18:81:d0:91:34:07:0e:0f:48:dc:c8:
                    ab:5e:89:98:bc:d5:f9:30:cc:7b:01:c0:af:c6:04:
                    de:8d:38:82:69:14:b4:7f:1b:be:7b:bf:d0:84:56:
                    62:f4:76:fb:f4:bd:d4:3e:ab:d5:97:56:13:85:6a:
                    ea:88:d1:fd:96:a6:5a:ce:42:47:46:94:c4:d6:86:
                    fa:01:8a:90:e7:d7:69:96:e1:9e:04:e2:5b:94:d8:
                    38:21:bd:92:ce:ed:42:30:43:f4:47:4c:f7:83:5a:
                    43:2d:93:72:60:99:93:bd:7a:e0:f9:3b:7a:85:6b:
                    18:44:27:67:bf:d1:6e:92:91:26:26:89:7f:94:9c:
                    5b:0c:10:7d:30:5e:8d:e8:dd:b8:f7:d5:2b:83:bb:
                    11:7d:17:a6:b5:14:a0:b3:ea:25:45:37:1f:eb:7d:
                    92:77:14:bb:e7:5f:f4:e1:7f:c1:f7:23:e0:6a:48:
                    09:72:f4:3b:30:9f:67:58:ba:23:6c:81:51:1a:dc:
                    96:c5:32:81:81:7f:0d:76:0c:ae:3f:4c:c7:8e:b5:
                    68:5a:d9:7e:d1:b2:d2:39:13:81:3b:e2:8d:8a:6d:
                    7a:fa:ff:71:d2:8d:52:31:b8:6f:1d:7f:4e:3b:a0:
                    4e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:10:A0:D4:8F:92:4A:13:E6:88:34:AB:FF:69:D7:2A:85:B3:C6:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f06ff54b-63ec-3bf7-9834-a6c1e60330d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:52:da:74:aa:8c:f2:89:ae:a8:49:0a:bd:f4:e1:5c:15:29:
         bc:73:50:13:61:04:b4:43:cb:e9:30:62:c4:67:36:0e:ed:bb:
         6a:9d:5b:35:6c:22:bb:da:0f:0e:0d:8b:0a:49:b5:7c:af:0e:
         f3:9b:82:d3:79:71:f1:d1:b1:7c:6b:56:4d:ea:d7:71:3f:ed:
         28:41:f4:7f:63:41:d2:94:98:07:14:49:a3:64:2c:a8:2b:f8:
         40:35:5a:4f:99:3c:c4:79:4b:aa:d9:cc:6f:7d:e1:bd:0d:4b:
         63:23:a7:4e:52:8c:97:3a:cc:f4:07:93:27:ee:bf:c2:67:92:
         ce:d6:6a:62:f5:71:86:89:2d:d1:51:ae:fd:88:09:6a:f9:43:
         10:8c:bb:9d:b5:5a:66:ea:14:fe:85:67:ca:6a:f4:71:15:10:
         99:d8:2f:ea:c6:99:db:eb:de:51:dd:09:06:f8:58:78:85:e3:
         c3:9e:f0:57:d1:a7:49:d3:4a:bf:cb:c7:db:18:43:61:f8:c3:
         7b:aa:ba:14:7c:83:de:ad:a1:cf:43:07:ad:05:80:42:3c:a3:
         fc:60:b2:ef:75:3f:42:8b:44:61:8e:91:4b:13:48:b0:5a:76:
         e6:f9:ab:13:92:08:f6:4c:c9:fe:74:cf:ce:e1:9a:f4:17:1c:
         02:4f:19:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:26 2025 by rpki-client