Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/b405fd56-7238-35e1-ab4d-25811983c86a.roa
File:                     b405fd56-7238-35e1-ab4d-25811983c86a.roa (raw, json)
Hash identifier:          jiDKTJfk8DKs5CB3FfhIbQKJa3kGDdSMYJADd72conY=
Subject key identifier:   C2:1C:61:EA:2E:35:28:82:D0:5A:EE:ED:82:49:30:AC:89:11:FE:85
Certificate issuer:       /CN=dba0d862-3d0e-4150-90de-3c956c1b532d
Certificate serial:       010D0C9F432858491246C827E7C4CF66065505E0
Authority key identifier: 8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/b405fd56-7238-35e1-ab4d-25811983c86a.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     393398
IP address blocks:        170.75.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:c8:27:e7:c4:cf:66:06:55:05:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba0d862-3d0e-4150-90de-3c956c1b532d
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=035f60f6-cd60-4ea5-8b0b-6c31fc72963c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:21:e7:d3:9a:a5:f7:a2:03:ba:d4:91:70:2b:
                    18:a0:26:ea:b4:37:bd:ca:bf:64:dd:be:6c:65:27:
                    75:84:3f:71:99:ab:c5:cb:3c:4f:f2:3b:c0:87:c2:
                    86:42:69:a7:40:64:cc:9f:e4:1e:5e:e8:5f:5a:24:
                    5f:59:bc:c9:27:0e:81:0a:f4:2a:e4:bb:d3:11:c4:
                    d5:26:a8:5c:da:f2:aa:0b:8f:f9:b2:a6:52:a9:16:
                    5d:33:18:70:a0:3a:a9:e6:ea:e7:a0:09:b0:0f:7d:
                    6d:f9:f1:1a:c2:e6:8c:5e:cc:7e:d3:e8:50:99:ef:
                    92:da:5e:79:14:7f:87:8b:fc:cd:27:62:9a:69:e4:
                    dd:4c:de:6c:f5:62:7c:6f:92:36:92:45:07:7e:f3:
                    ab:31:2a:46:45:92:26:be:ed:66:cf:71:b2:81:54:
                    fd:9d:4a:ec:a6:5f:4a:88:9a:53:54:dc:39:bf:ef:
                    8c:ae:e1:27:9e:d0:9b:3b:2b:73:2d:2b:63:2f:f5:
                    7a:b9:67:d6:18:89:ff:4a:cd:4b:4e:1c:2b:ac:79:
                    ca:d0:84:ce:29:60:6d:1e:ef:2c:52:5c:c9:8f:bd:
                    9b:6d:d0:76:3f:8b:9b:9b:0d:dc:5c:a2:05:0b:ae:
                    2f:7c:12:70:26:75:86:5e:8d:9c:06:e3:1f:d3:f0:
                    0f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1C:61:EA:2E:35:28:82:D0:5A:EE:ED:82:49:30:AC:89:11:FE:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/b405fd56-7238-35e1-ab4d-25811983c86a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl

            X509v3 Authority Key Identifier:
                keyid:8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:f9:de:ea:fb:50:ce:a0:d7:f8:43:c6:1a:ac:de:2d:be:ca:
         36:fb:2e:fb:36:f8:67:5f:50:52:5b:e3:5e:01:de:f1:c8:92:
         4b:2b:88:e8:0f:79:7e:30:0e:f6:70:58:00:93:1d:37:45:43:
         d2:60:a7:98:99:5e:2e:f4:40:8b:7a:14:f4:33:31:b2:1e:05:
         42:e2:ba:43:09:a2:9a:9e:3f:6d:b4:77:cd:85:38:49:40:21:
         9a:f5:85:17:60:f7:aa:0b:5a:f4:a1:d3:4b:f7:d4:02:1d:05:
         6e:fd:66:1b:c9:75:95:48:62:09:ad:2e:ab:e1:85:a6:18:03:
         d4:18:1f:83:86:3b:26:c6:21:f5:53:13:00:3c:15:02:21:98:
         a0:c8:1d:89:7d:7a:81:fd:60:0f:8d:ca:ab:14:19:0e:44:3a:
         11:0a:8d:b9:b7:7e:3a:33:ae:0c:96:9e:fb:16:aa:9a:bc:1c:
         7d:bd:7e:7b:7c:05:c3:bf:ee:4d:1c:92:d2:9d:09:7b:64:20:
         c9:f3:59:a1:99:66:c6:7e:cd:69:7f:f6:f3:56:03:98:8e:bf:
         c6:46:ce:31:24:65:88:a9:6b:a0:84:06:8b:e9:a8:19:b3:30:
         94:b5:d3:93:ac:d1:1b:d9:42:13:e9:25:b0:f2:83:96:bf:ef:
         f4:28:88:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:31:32 2025 by rpki-client