Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0ab67bce-4ef6-37a3-97b2-99f4a486943d.roa
File:                     0ab67bce-4ef6-37a3-97b2-99f4a486943d.roa (raw, json)
Hash identifier:          r1kxv1sv+6/NXBMqG26qbZ6KoVn186a+cYK6zHC4VO4=
Subject key identifier:   ED:19:3E:95:E4:78:5C:D1:DD:13:F8:8D:F1:AF:A0:F4:F9:23:32:5B
Certificate issuer:       /CN=0c1ef9c6-289f-416a-97db-f9a640a2b2e9
Certificate serial:       010D0C9F43285848E9CBE51EB4110699415938C0
Authority key identifier: 69:39:63:95:DD:5D:34:75:A2:16:12:5A:CC:D1:89:4D:58:47:9F:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0ab67bce-4ef6-37a3-97b2-99f4a486943d.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     9002
IP address blocks:        185.115.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:e5:1e:b4:11:06:99:41:59:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c1ef9c6-289f-416a-97db-f9a640a2b2e9
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=3b3aa405-d6de-4397-b5ec-69c0df068696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:af:33:5e:38:dc:66:37:3e:c8:e3:c7:2c:40:
                    41:41:42:e1:e0:d1:ad:82:83:c9:f6:f4:58:f8:c6:
                    cd:fa:6c:a4:f2:cb:d6:06:35:6f:b1:d8:f7:7a:04:
                    c3:46:29:4d:cc:d2:c4:c3:de:12:1b:39:f7:e9:ba:
                    e1:f7:07:93:ab:04:08:3a:b1:b2:a8:67:5a:6d:db:
                    ff:74:10:10:fe:9a:32:f2:27:25:e9:59:6b:43:f4:
                    2f:13:c4:10:f4:c7:ee:c9:98:5d:8c:77:34:c6:70:
                    0d:76:7d:30:8e:b1:f6:2e:92:fa:51:10:aa:0b:ba:
                    8e:af:56:fc:e1:ae:a2:b8:cc:ec:57:70:96:3e:dd:
                    77:a0:2e:ba:c8:ed:72:e9:f5:32:0a:25:52:b3:ba:
                    01:54:1b:e9:24:4c:df:c2:0b:ce:6d:f1:91:e5:9f:
                    2c:fb:eb:74:5f:c4:94:8d:4e:44:7e:ce:9a:a5:b2:
                    59:bd:43:6c:79:f0:ff:ad:fa:86:62:b5:cd:7a:47:
                    78:76:39:1e:1f:d8:b3:3b:9e:4e:4d:4d:a1:96:ba:
                    a7:4d:de:e3:97:a0:89:f6:c1:a6:8b:03:5b:a6:ff:
                    aa:59:76:f5:15:87:ad:55:48:e5:cb:cb:27:06:12:
                    88:ec:95:4d:2f:2f:e5:fd:95:cb:c8:53:b3:6a:7e:
                    0f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:19:3E:95:E4:78:5C:D1:DD:13:F8:8D:F1:AF:A0:F4:F9:23:32:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0ab67bce-4ef6-37a3-97b2-99f4a486943d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.crl

            X509v3 Authority Key Identifier:
                keyid:69:39:63:95:DD:5D:34:75:A2:16:12:5A:CC:D1:89:4D:58:47:9F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f1:ce:35:88:18:75:2c:12:23:3f:88:b2:30:aa:4f:a9:25:
         05:26:b2:a8:73:17:d0:8a:68:74:4d:20:24:9d:b7:03:2a:3a:
         9a:a6:9c:92:a2:65:48:3e:fb:80:58:84:ad:fc:89:87:38:a7:
         a9:51:af:6f:ef:ee:c8:3f:bd:15:ca:d9:27:68:38:1f:e6:b8:
         7b:8a:25:20:8e:21:4e:fc:9e:e4:25:ff:1b:e8:7d:d9:54:9f:
         94:d1:ba:94:94:22:05:fc:c9:e2:15:f5:0e:30:c0:6e:8e:3d:
         89:58:dc:92:ad:f9:a4:12:96:05:0e:81:9f:7d:72:79:93:9b:
         94:ff:fb:34:10:e7:13:0e:bb:a2:fc:14:ef:94:24:29:09:25:
         86:63:ac:39:38:88:1c:69:8e:00:81:4c:2d:3e:d0:c4:01:b7:
         5d:09:cf:ab:3b:1a:9c:82:0e:68:eb:71:1f:e0:1d:54:4d:29:
         f8:c4:da:c8:8a:97:79:13:de:2c:3b:31:d1:4b:be:c8:4f:fc:
         37:e6:43:28:00:b8:08:4c:33:10:d1:e0:af:79:e2:54:1c:ae:
         da:39:d7:12:1b:1a:e4:8c:45:4d:f5:5c:67:fc:49:2d:9c:6e:
         98:b1:e7:75:64:26:ad:14:9b:60:1d:b3:7d:73:e2:57:02:d9:
         61:a2:95:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:02:47 2025 by rpki-client