Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/8f85dfe2-a69e-3cce-93e8-4bbe67282d69.roa
File:                     8f85dfe2-a69e-3cce-93e8-4bbe67282d69.roa (raw, json)
Hash identifier:          XDGk9GR9ND4MAMnlSIJwO1+2SVElPRBmCvA6FftzBQQ=
Subject key identifier:   F9:1F:1C:50:BC:83:CE:45:4A:2F:96:1C:C8:4B:3E:53:E9:EA:DF:AC
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F432858490CB16D32D2102738181AECA0
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/8f85dfe2-a69e-3cce-93e8-4bbe67282d69.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     6505
IP address blocks:        200.30.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:6d:32:d2:10:27:38:18:1a:ec:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=ec774123-a69b-4d66-be8b-56434ac39e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:30:35:39:bc:e1:a9:bc:16:8d:c7:d9:ae:66:
                    e6:5f:d2:eb:63:88:ab:36:52:b8:47:59:97:37:77:
                    67:37:da:01:bd:57:fb:6e:ba:66:fa:59:9e:05:e6:
                    fa:8d:5c:36:cb:ef:51:de:3a:d0:ef:03:84:54:36:
                    08:9d:f9:bb:55:11:b5:f9:a6:af:4a:95:e4:ec:02:
                    e8:9c:b5:70:6e:92:f3:f5:6a:1b:cb:ce:ab:36:f5:
                    53:03:e7:85:0d:dd:5d:8b:9c:f4:72:65:6d:ce:c6:
                    87:46:7f:be:3b:2d:01:31:3b:fc:01:fc:7d:e6:14:
                    15:71:0d:ae:c5:62:7c:e7:61:dc:ea:73:e3:3e:19:
                    ff:f3:24:36:67:e2:92:5d:15:a4:c9:59:bf:c3:05:
                    17:f1:4a:5d:6f:45:b3:3e:76:a7:95:e0:f2:d0:90:
                    ab:90:cb:0d:2c:02:6f:8e:20:8a:7a:e5:40:d2:20:
                    44:63:57:92:a7:29:da:f7:98:3b:f1:1c:a3:d6:b9:
                    79:3d:4b:41:e9:0d:a5:e7:31:65:c8:ea:9e:d7:41:
                    a4:38:00:cb:fb:22:08:2a:f4:1c:65:d3:0a:ad:0d:
                    84:10:10:10:68:fb:a7:7a:9a:04:98:88:9c:6d:31:
                    c5:ee:ee:72:89:bb:53:dd:23:ea:c6:6b:63:29:04:
                    03:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1F:1C:50:BC:83:CE:45:4A:2F:96:1C:C8:4B:3E:53:E9:EA:DF:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/8f85dfe2-a69e-3cce-93e8-4bbe67282d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:1a:05:45:19:e4:db:7c:7d:97:41:cc:b9:f5:bd:f5:e0:27:
         6d:85:04:e2:c5:35:7a:ae:38:4f:4b:61:13:4b:dd:cf:fe:d0:
         28:d7:12:0b:1f:3b:aa:0a:b8:d3:cf:f4:d3:5a:6b:34:3b:0f:
         d2:75:6c:95:1d:db:50:b0:38:e7:6a:cb:fa:cd:a0:e2:02:af:
         bb:08:b7:81:40:3e:f0:e9:7c:59:d3:f5:2f:05:cd:f5:27:8f:
         10:ba:b0:71:cb:cb:09:55:84:42:94:b2:d0:be:07:73:40:a9:
         58:13:16:88:14:9e:53:93:40:21:22:42:a2:0c:f6:ee:04:1e:
         6f:f7:3e:4f:29:fe:57:7f:51:bb:cc:b0:c1:5c:76:9f:4c:95:
         62:e5:03:07:3f:e8:20:9e:bc:8d:8f:de:d8:f5:54:f0:17:2a:
         0f:af:22:0b:31:72:10:9f:2e:aa:4f:63:c0:b7:15:d3:d4:d6:
         44:c2:bb:99:ac:9e:15:4c:eb:11:1c:e5:3c:2e:f9:99:f4:46:
         65:33:ed:d9:1d:cf:b3:fb:c2:4b:3a:ac:e3:d5:57:bd:5a:93:
         e5:8b:50:d7:8a:e3:a7:8d:e9:00:a4:54:11:1e:80:f1:82:c0:
         7b:9b:1d:ec:b8:9c:1b:d7:4c:df:8b:56:a3:31:ed:f7:ca:ff:
         94:e1:9f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:30:13 2025 by rpki-client