Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/753d027f-feb5-3c3c-96d6-c16d206a0f49.roa
File:                     753d027f-feb5-3c3c-96d6-c16d206a0f49.roa (raw, json)
Hash identifier:          SRFPTw3/4HDrXhseRrgdm/4J3JyWRugUPZ8E5QW+PbA=
Subject key identifier:   41:65:69:B4:D2:27:D1:3C:4A:73:21:55:23:A8:33:EB:F3:CC:F3:70
Certificate issuer:       /CN=eb36756e-e433-4732-a707-a9fa13965624
Certificate serial:       010D0C9F432858491246C79D258DF8BA345AC200
Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/753d027f-feb5-3c3c-96d6-c16d206a0f49.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     3565
IP address blocks:        208.68.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:c7:9d:25:8d:f8:ba:34:5a:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=5dacb962-12bd-4b62-9ae4-fda4a2e33e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:e8:66:63:ea:93:5c:d6:3f:8c:e1:05:f5:
                    da:8e:5f:e6:33:e6:4c:46:04:28:ae:86:b8:a2:98:
                    58:2a:9f:fd:81:5b:50:82:69:19:6f:0b:05:0c:5a:
                    1b:c6:df:f9:d9:e0:a1:c4:4d:d2:76:f3:80:14:7b:
                    63:d9:51:49:77:84:c9:50:03:87:75:fe:e5:c1:31:
                    a8:4d:13:cb:31:fd:26:0c:f5:90:e6:22:6b:04:fc:
                    04:51:eb:5f:1e:c1:a2:6c:14:4a:a0:2e:ec:b5:44:
                    dd:1f:cd:6a:4d:eb:30:64:07:96:7b:86:ae:2f:c9:
                    b0:10:cf:0d:9f:9e:25:2c:f3:38:4c:d7:ba:94:c7:
                    88:a5:c4:14:66:17:e0:34:0a:91:1a:e9:b4:74:d1:
                    2f:ab:b7:af:bc:ce:8d:03:cf:3b:52:93:27:7e:c1:
                    87:13:e0:d9:18:d7:f0:47:aa:5a:f0:24:fd:d2:c7:
                    cb:1c:c3:2b:ec:74:0b:be:c7:7c:a0:39:91:06:d2:
                    6a:69:aa:21:d0:a0:9f:d5:73:45:eb:84:60:b4:41:
                    13:a3:34:e6:bb:97:2a:9c:42:af:d4:c4:e0:26:cb:
                    26:27:ed:98:4c:fd:c7:0c:9e:15:a0:99:7f:d4:f8:
                    2c:aa:19:aa:d1:90:34:3d:27:dc:ff:2c:01:cb:d1:
                    8d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:65:69:B4:D2:27:D1:3C:4A:73:21:55:23:A8:33:EB:F3:CC:F3:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/753d027f-feb5-3c3c-96d6-c16d206a0f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl

            X509v3 Authority Key Identifier:
                keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f8:3f:7c:24:7f:aa:6b:2a:71:dc:61:d5:4e:02:e2:6d:01:
         3e:1c:f2:c4:38:1e:2b:0f:ab:d6:a9:ad:0b:92:30:7d:35:fc:
         2c:83:07:5b:de:58:b5:3a:b4:8b:ca:71:fe:aa:a9:1d:d3:c5:
         72:61:55:41:35:26:a5:19:2c:d9:e8:21:87:74:0e:26:ce:f1:
         0c:7b:c8:8a:6f:9f:c1:b5:ba:0e:2c:de:98:93:03:b9:bb:22:
         ea:14:81:9c:c0:b5:5f:14:c3:55:42:eb:76:06:bd:77:82:74:
         4d:a5:5b:6f:2a:60:12:f0:6c:c2:b9:54:35:04:2a:0e:f5:93:
         2e:41:7f:f4:91:07:c6:68:3c:d0:e4:d8:2d:79:c2:2a:15:d1:
         94:99:28:16:74:23:07:7f:92:30:df:4c:6a:08:19:d0:e5:63:
         bf:ba:98:57:2b:d4:20:c0:c8:32:82:e9:cd:92:6f:e7:37:f9:
         e7:9b:bf:a7:2a:54:79:8e:ec:ea:4f:b2:5f:5f:da:3d:3e:64:
         ff:85:6e:32:8a:af:63:79:da:28:dc:c3:6c:86:da:35:0a:cc:
         9d:ea:73:4c:f9:24:8c:6b:d1:88:65:83:17:43:b2:b8:8b:55:
         86:15:55:24:8f:f6:53:ca:cd:f6:9f:a8:ca:a3:4c:0e:2f:f4:
         03:69:90:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:07:14 2025 by rpki-client