Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/a241a47a-993d-39f7-9921-26439d28eafd.roa
File:                     a241a47a-993d-39f7-9921-26439d28eafd.roa (raw, json)
Hash identifier:          S1kxFK0n4hR2Mc5CnPDIa/OK/csLPv2CGUfYehPRA/A=
Subject key identifier:   3A:60:3F:78:38:C1:6E:B7:1E:53:DC:70:16:6C:60:D9:96:CA:76:AE
Certificate issuer:       /CN=85ab0b8f-e87f-4660-83cc-46c357202ed9
Certificate serial:       010D0C9F43285848EB310AF513FD85B622432640
Authority key identifier: 9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/a241a47a-993d-39f7-9921-26439d28eafd.roa
Signing time:             Tue 18 Feb 2025 02:00:38 +0000
ROA not before:           Tue 18 Feb 2025 02:00:38 +0000
ROA not after:            Mon 19 May 2025 01:00:38 +0000
asID:                     8075
IP address blocks:        198.35.23.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:eb:31:0a:f5:13:fd:85:b6:22:43:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85ab0b8f-e87f-4660-83cc-46c357202ed9
        Validity
            Not Before: Feb 18 02:00:38 2025 GMT
            Not After : May 19 01:00:38 2025 GMT
        Subject: CN=f1cf9561-b4fd-4dd8-a506-b0c529e7318a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:5e:c5:9d:cf:37:0f:ac:3f:6a:b8:00:32:
                    03:1f:ff:04:7c:a3:6f:c1:3e:d3:1e:8a:cd:0b:b0:
                    9e:05:d2:97:e6:ac:f8:ad:e7:56:50:c8:47:d9:02:
                    81:14:d6:7a:71:65:d9:e4:dc:71:cc:4a:b4:09:43:
                    fe:2f:9b:87:7d:52:e9:12:c3:46:49:88:2e:84:82:
                    e1:62:d2:d5:bb:5c:11:59:47:ab:0b:15:6a:f2:a7:
                    b5:46:df:9c:26:84:23:7f:8c:56:be:e2:33:81:4d:
                    81:e5:c3:5c:e9:c5:cb:bf:30:bc:8e:bf:7c:7c:82:
                    e8:42:19:41:9d:0f:3b:91:6c:7d:2e:27:cd:7b:f2:
                    36:47:dc:e1:ef:77:a7:a2:3d:7e:63:b5:4e:65:6c:
                    08:1b:b3:07:ca:ba:02:00:e0:f1:92:61:a2:56:03:
                    af:89:f7:b0:95:3f:1d:f5:07:9a:1f:1e:6a:cd:0c:
                    64:74:76:16:8e:3c:c9:48:86:98:84:87:f8:24:e5:
                    d4:d9:74:41:49:46:11:41:89:69:8f:db:8e:ce:f5:
                    22:0a:53:d4:aa:1a:3c:6a:e1:36:6f:0e:51:6d:3e:
                    46:c4:ba:88:11:76:b0:62:38:e1:ac:ca:9b:99:90:
                    f0:07:df:3c:bb:1c:7d:55:ce:47:03:86:86:c6:24:
                    bf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:60:3F:78:38:C1:6E:B7:1E:53:DC:70:16:6C:60:D9:96:CA:76:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/a241a47a-993d-39f7-9921-26439d28eafd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.crl

            X509v3 Authority Key Identifier:
                keyid:9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.35.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ba:b3:bc:9f:86:d7:dc:67:7f:5c:76:8d:a8:45:8b:24:ee:
         a0:17:91:a7:df:92:81:6f:cb:83:d8:17:61:0c:8d:14:9a:63:
         a0:a4:97:53:70:c5:81:27:7d:b5:2b:94:18:ae:d2:69:cd:4a:
         13:87:00:94:85:55:de:2b:6e:79:0a:a5:8a:c1:38:83:81:0c:
         74:47:ed:40:29:d9:16:41:89:b2:69:34:8e:40:75:32:68:48:
         0f:05:0c:59:da:8e:59:26:93:24:4b:7a:bd:f5:d0:83:28:10:
         67:ac:3c:77:9a:e5:77:28:57:64:2d:54:63:ea:00:41:59:bd:
         c4:f4:b1:2c:9a:fa:ad:ec:24:2a:2d:0f:7f:c1:ba:db:8d:4c:
         f9:51:fe:6d:fa:d5:32:0b:17:73:27:f2:54:eb:58:eb:2e:e8:
         27:68:93:79:2b:4d:60:55:46:ce:b1:c2:5c:02:28:29:82:fb:
         1f:81:3e:36:42:5d:b9:4e:6c:d2:41:37:06:3b:c2:18:29:95:
         53:5f:2f:4c:bf:d5:e8:dc:03:61:20:2c:57:3d:06:45:e0:3c:
         69:54:47:76:78:26:b0:f3:c4:32:df:b2:dc:1c:85:a3:1e:ef:
         1e:4e:89:a2:e1:ce:46:40:39:03:39:b6:1f:87:87:b0:bd:75:
         7e:68:30:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:54 2025 by rpki-client