Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/8981f9f7-457a-3b83-995f-2557ffc8cb47.roa
File:                     8981f9f7-457a-3b83-995f-2557ffc8cb47.roa (raw, json)
Hash identifier:          cn/d6FfYMmNkqb8/MVONevmbe/BgbY5gHWUpPqE4Hv4=
Subject key identifier:   2D:B8:78:50:FF:F1:5F:2E:A8:19:09:85:39:76:95:55:0A:BA:84:88
Certificate issuer:       /CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902
Certificate serial:       010D0C9F43285849071BE78BF2BCFFD7F97F5300
Authority key identifier: 51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/8981f9f7-457a-3b83-995f-2557ffc8cb47.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     26461
IP address blocks:        208.91.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:e7:8b:f2:bc:ff:d7:f9:7f:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=03fa4a48-2128-431a-a071-cbb326dfcc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:80:66:25:85:2f:77:75:9b:94:94:52:2d:5f:
                    16:4f:48:bd:f0:50:e7:70:2b:e1:66:dc:07:02:0d:
                    fa:3e:0c:be:a7:c9:2d:81:32:a1:7b:04:cc:53:cb:
                    30:85:97:33:77:48:00:41:32:ad:eb:78:c3:c2:23:
                    df:31:47:32:fd:5e:51:c6:4d:0c:d9:fb:94:5c:c8:
                    40:61:dd:56:5b:f3:2a:ef:a7:af:cb:a6:26:27:b2:
                    4d:c2:1b:3c:64:7e:94:eb:54:89:ff:51:11:7c:73:
                    ff:c3:36:a6:7b:cf:8e:dc:9b:a4:11:9b:50:bc:55:
                    19:b3:dd:70:ad:6e:6a:1c:07:ca:e6:de:ca:a6:b2:
                    41:2f:75:66:df:33:c6:a0:cc:5f:67:a0:a0:3b:64:
                    c0:08:ad:d4:15:c7:e1:85:31:18:08:cb:73:28:d7:
                    d2:78:89:f4:6d:42:a0:56:03:1b:34:f3:e3:e6:7f:
                    2e:ca:57:67:43:20:77:28:9f:dd:26:f8:c8:ba:d1:
                    21:e9:89:8f:88:68:a8:2a:94:de:8d:b5:7a:3b:2b:
                    59:b8:30:ba:49:73:36:c6:66:f3:61:61:f2:63:60:
                    7e:47:5e:a8:8f:9e:7b:81:d1:bb:13:19:83:fb:b1:
                    ee:de:35:b3:6f:e4:b3:83:b3:ed:64:45:ab:d2:26:
                    ca:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B8:78:50:FF:F1:5F:2E:A8:19:09:85:39:76:95:55:0A:BA:84:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/8981f9f7-457a-3b83-995f-2557ffc8cb47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl

            X509v3 Authority Key Identifier:
                keyid:51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:26:00:e3:56:52:c2:07:75:5c:e9:db:63:58:cf:eb:96:11:
         63:a4:77:23:5f:61:ad:e1:8b:55:ae:ce:6c:c1:49:36:a7:59:
         10:be:0e:65:43:2f:40:65:3e:e7:94:01:f7:c7:87:3d:ff:51:
         4e:77:a2:49:ab:88:29:82:8f:85:34:0b:23:db:cb:b5:9d:8e:
         bd:90:90:fe:8f:64:66:82:45:6f:22:db:7f:9f:63:06:fd:be:
         e6:3a:85:1e:14:d6:d3:40:9e:f9:06:36:ad:be:92:2c:43:bb:
         5b:7e:2d:98:34:63:3a:1f:7a:b7:40:e6:42:e9:08:19:7b:ed:
         50:3d:52:17:8a:f9:df:ce:86:55:fa:51:46:34:01:33:1b:03:
         8b:f0:be:8b:40:73:b3:ee:19:8d:a0:d0:00:16:4c:9e:d0:96:
         1c:57:cb:c5:5d:86:2b:88:a1:40:b6:22:2f:2c:58:7f:63:b5:
         e3:0e:8d:4a:08:f5:70:d6:77:d4:ac:c1:ce:ee:5f:79:59:db:
         a5:54:45:c4:28:d8:27:d5:c1:51:e9:1d:69:d4:89:25:b4:81:
         c5:3c:13:98:b0:bb:43:33:a1:76:c5:b8:43:7c:00:8d:3b:97:
         54:2f:ab:ca:76:2f:02:ec:05:42:92:fa:71:dd:a0:01:8c:b5:
         b8:09:23:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:37:56 2025 by rpki-client