Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/89e723ca-7d41-3a9c-bc68-7ea02fd5ca74.roa
File:                     89e723ca-7d41-3a9c-bc68-7ea02fd5ca74.roa (raw, json)
Hash identifier:          Qy/eJa0WyzlX6i+Uhj8jrPcnkr4peXaYoHBik/TubQE=
Subject key identifier:   46:FB:94:52:26:54:5F:46:7A:3E:5B:7C:4D:29:CD:E3:44:31:D2:FC
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285848EF6141D41C49CD1188653800
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/89e723ca-7d41-3a9c-bc68-7ea02fd5ca74.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     237
IP address blocks:        35.24.0.0/17 maxlen: 17
                          35.24.128.0/18 maxlen: 18
                          35.24.192.0/19 maxlen: 19
                          35.24.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:41:d4:1c:49:cd:11:88:65:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=88ec8723-f825-4e86-a762-765df7d95c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:14:c1:39:3b:14:7a:cc:55:d3:81:3d:95:7b:
                    93:aa:bc:8d:f0:1d:b4:1f:6c:05:7a:00:10:7c:1d:
                    3e:bf:f4:cb:8f:3d:3b:30:6d:9e:cb:c6:d6:fe:45:
                    ca:0f:6c:43:aa:b1:49:4b:bb:35:27:b6:27:93:d4:
                    17:28:7e:af:fc:c2:61:a3:34:3b:c2:31:fc:22:68:
                    45:03:17:82:29:57:e8:35:ef:10:b9:ab:bb:ef:38:
                    f5:3a:4f:ec:10:7f:5c:4d:57:36:2b:69:3b:77:9b:
                    bd:a3:59:69:7f:66:8c:da:76:65:55:65:c5:4b:62:
                    68:2a:ba:63:28:53:56:49:e6:5f:9d:f7:69:2d:a8:
                    36:a1:4f:bb:06:48:f8:11:e7:39:a2:60:87:70:f8:
                    b7:a7:7f:64:e5:f3:de:59:ad:14:cc:dc:d9:7e:89:
                    7b:92:cf:0c:97:bc:96:8d:95:73:99:2f:7e:cd:d5:
                    b0:41:43:ac:36:41:13:eb:17:3d:ba:02:5e:89:2c:
                    51:87:4a:28:e3:10:6b:10:8b:96:6e:4e:b2:e3:a0:
                    5f:1a:ca:14:d6:a5:8a:df:d4:8e:43:3f:a5:fc:d5:
                    c4:4c:2c:ee:da:b1:2a:49:c1:4d:10:ea:f0:65:99:
                    f7:49:32:65:18:b6:91:79:d0:db:30:37:5d:3a:08:
                    05:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FB:94:52:26:54:5F:46:7A:3E:5B:7C:4D:29:CD:E3:44:31:D2:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/89e723ca-7d41-3a9c-bc68-7ea02fd5ca74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.24.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b2:e6:9d:e1:b9:db:49:ab:f0:c7:2c:c8:7f:3e:16:37:20:
         b2:89:67:c5:f2:c6:4b:2f:35:31:66:ac:60:e3:e8:3d:74:41:
         74:a8:af:ee:f6:a6:15:c7:5d:30:3c:b7:44:63:c8:16:e5:74:
         d0:3c:11:6c:db:e3:b4:99:e3:5a:ed:c2:fa:48:1f:4a:3c:23:
         ea:61:7d:53:2b:cb:92:ec:a1:c0:23:05:a9:68:70:54:2b:26:
         45:45:0b:9f:e3:99:51:79:aa:8d:e1:0c:46:58:91:69:9c:28:
         9c:3b:94:11:29:7c:ca:da:71:dc:8e:6a:a7:9e:1d:91:b5:76:
         21:73:a7:8e:2d:e5:d7:96:33:dd:60:99:55:cd:54:99:a4:d3:
         1e:ad:db:33:75:b9:af:c4:6a:0b:91:43:cf:4a:b8:4d:02:5a:
         92:df:88:56:73:f7:22:26:24:00:e0:d5:9a:8a:d0:36:ec:92:
         71:3e:1f:58:72:cf:b9:89:37:c7:b9:50:e4:f7:5f:4f:de:8d:
         38:1a:7e:76:b3:72:cc:e3:53:52:cb:45:54:2a:8c:3c:35:bb:
         d4:89:36:e8:15:22:a6:df:fd:3e:85:ce:60:65:31:ce:58:05:
         9a:f2:92:49:1e:04:b3:20:84:7a:59:9e:8b:42:7c:71:46:f6:
         e1:c9:0f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:06 2025 by rpki-client