Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/6e0df5b1-d691-3061-8105-608fc4c30dc3.roa
File:                     6e0df5b1-d691-3061-8105-608fc4c30dc3.roa (raw, json)
Hash identifier:          aC39OSovUSHizc77rU+pHmkg/syPpTI2E1Qm09RnLBI=
Subject key identifier:   A1:9C:5F:05:FA:6E:6F:36:77:27:19:01:49:12:CD:77:DB:38:BD:3C
Certificate issuer:       /CN=3df29669-3733-4127-bbde-a71cc4b5a661
Certificate serial:       010D0C9F43285848E16BE2889FCD79AAC9025A68
Authority key identifier: 95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/6e0df5b1-d691-3061-8105-608fc4c30dc3.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     55247
IP address blocks:        208.82.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e2:88:9f:cd:79:aa:c9:02:5a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df29669-3733-4127-bbde-a71cc4b5a661
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=1e1252e1-776b-4e06-b6c4-0c2d13a7445c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:b2:b9:11:24:2c:a7:7d:2c:34:a1:8b:82:
                    52:35:26:e3:e6:70:e8:d3:b8:15:4d:0e:c3:5e:f3:
                    5b:1d:77:f3:cd:95:05:a6:07:4a:d0:1c:1c:56:87:
                    e4:0e:23:9c:57:52:e1:52:66:b2:ed:a6:5d:82:c8:
                    39:ef:cc:8a:71:5d:f7:89:c1:df:21:42:87:c2:d9:
                    0c:13:ec:62:83:53:6f:58:32:71:34:56:27:8f:c4:
                    43:7b:b5:b1:f6:58:e1:f9:cb:39:7d:c3:21:76:b4:
                    c3:aa:52:c4:43:11:c1:52:09:71:de:df:2d:57:99:
                    5a:1c:6b:fe:38:37:e4:c8:eb:85:7f:57:59:e7:09:
                    53:dd:16:d5:01:a9:ea:58:19:13:de:47:15:a6:be:
                    e0:81:f2:54:44:61:24:55:b9:ec:bf:57:12:53:f8:
                    79:0e:c0:6a:65:51:6e:e2:b0:a7:fb:61:7c:33:2a:
                    8a:42:ce:62:c1:b4:b5:af:04:a6:7e:5f:55:98:bd:
                    20:1a:1d:57:a5:9a:5a:dc:c6:6f:82:e8:8e:30:66:
                    87:13:08:a2:57:18:55:63:92:4e:a6:b5:7a:0e:51:
                    69:fe:19:be:38:83:a5:30:28:b4:ae:45:ea:be:e3:
                    8f:74:cc:93:20:a8:78:92:7e:fd:12:07:07:e0:69:
                    ee:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9C:5F:05:FA:6E:6F:36:77:27:19:01:49:12:CD:77:DB:38:BD:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/6e0df5b1-d691-3061-8105-608fc4c30dc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d5:03:65:42:b8:95:13:26:8f:51:0d:62:c9:ad:da:aa:33:
         0c:61:7a:85:be:90:f2:09:77:1b:89:05:dc:64:15:af:7e:35:
         79:f4:a5:42:1b:1d:a7:f7:87:19:2b:da:92:79:0a:b3:b0:a3:
         f4:5b:77:7e:9b:7b:3b:af:39:80:1d:ff:9e:3e:b2:e4:eb:00:
         a5:0b:af:06:6c:a9:fb:fc:d7:8c:b3:37:60:17:1a:d4:72:9c:
         73:4c:d7:c7:b3:fb:76:f7:64:2b:2d:16:7f:b0:ef:72:77:fb:
         18:6c:ca:96:22:bb:ae:f8:1d:4d:4a:b3:84:3b:c3:e2:07:75:
         90:a5:02:22:87:2f:00:e6:73:db:ff:92:0b:34:6e:e7:d4:88:
         61:f0:2e:0c:fb:39:6c:10:4b:2a:ca:8f:a4:9e:9d:b3:20:f0:
         11:99:9d:09:47:15:3e:06:7e:d5:5f:58:e5:15:6b:3a:9f:b0:
         48:15:05:7e:90:78:9e:28:18:11:36:23:2e:b6:f8:5f:5f:fd:
         9f:8a:c0:0f:f5:71:e8:d2:d6:32:43:f9:09:36:8d:9f:1d:35:
         59:b6:c3:7a:3e:2b:8c:0e:25:29:7e:d2:a9:22:5d:80:57:9b:
         90:c7:82:ac:a9:4e:04:61:d4:4b:41:79:45:d4:73:78:6d:96:
         84:4a:36:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:56:30 2025 by rpki-client