Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/8da58bd3-3c1e-31c2-8681-b5644c200c95.roa
File:                     8da58bd3-3c1e-31c2-8681-b5644c200c95.roa (raw, json)
Hash identifier:          98t/SGDAMP6dFB3Q7hmk6I6E2xtOBSyemsmggUsiMvM=
Subject key identifier:   8A:39:F5:9A:53:E7:F8:E1:25:D6:18:44:34:71:7F:F8:ED:93:B6:4C
Certificate issuer:       /CN=f37ae11d-629c-4443-bc37-2c3eebd09453
Certificate serial:       010D0C9F432858491AA6C8114903438239E9F5A0
Authority key identifier: 57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/8da58bd3-3c1e-31c2-8681-b5644c200c95.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     394708
IP address blocks:        209.143.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:c8:11:49:03:43:82:39:e9:f5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f37ae11d-629c-4443-bc37-2c3eebd09453
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=5bbca7ae-bd69-4b26-8296-54c91b9939f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:73:38:a1:be:a2:f8:ab:37:d4:e7:3a:ce:24:
                    3d:f9:0f:ed:ee:a3:95:91:00:ce:74:5b:fc:53:dc:
                    bf:6f:fa:08:33:a2:2d:a6:85:6e:8b:f9:62:2c:d3:
                    ad:7b:fc:08:22:a3:e6:d5:0b:22:d2:32:4f:36:9d:
                    80:98:49:38:9e:62:5f:c8:79:44:97:23:c9:17:ff:
                    7e:f9:12:26:07:16:34:aa:df:a2:7c:97:80:cd:65:
                    b9:7f:4d:04:92:04:01:3a:fb:59:00:b1:86:f4:76:
                    85:ae:bc:27:90:0c:40:de:26:69:6d:ab:8d:17:82:
                    2e:5f:de:d3:2c:79:4f:34:0d:63:13:aa:15:10:a9:
                    1d:85:d8:f6:a1:f2:6f:4e:99:d4:19:38:f5:8e:2a:
                    9e:71:15:22:5d:08:52:81:b4:13:4c:12:3b:7f:73:
                    5e:b4:a1:07:97:98:bc:4f:bf:84:2d:fe:e3:0e:d0:
                    2d:cb:87:71:ad:7d:f9:1d:d0:1e:a9:d0:a0:6a:43:
                    92:15:12:c1:63:a5:cf:6b:6f:cb:77:d7:12:88:70:
                    ce:54:b8:b6:c5:5f:cc:d5:0a:a0:f4:75:12:21:fe:
                    5c:60:00:13:c4:44:48:4d:93:3a:1e:a8:86:4f:2a:
                    9a:35:0c:9e:5e:fe:a1:19:47:ca:ef:ea:9c:61:e4:
                    c7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:39:F5:9A:53:E7:F8:E1:25:D6:18:44:34:71:7F:F8:ED:93:B6:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/8da58bd3-3c1e-31c2-8681-b5644c200c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl

            X509v3 Authority Key Identifier:
                keyid:57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.143.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:fb:42:d7:b0:c8:83:47:3a:56:87:74:d3:a9:d1:a1:8e:18:
         79:6d:5c:2c:31:04:7a:d4:6c:64:fd:9d:5e:10:50:84:5f:b8:
         84:3a:29:d6:81:92:7a:be:ad:1e:50:70:7d:66:af:3c:72:cc:
         23:6f:f5:3b:5e:df:e7:bd:02:25:b9:90:44:da:b2:49:a2:17:
         14:7a:44:ee:80:4c:d4:e9:38:45:f4:29:1a:eb:b8:3c:d4:a0:
         4f:20:37:18:df:7b:04:1c:4d:12:a0:d5:52:99:1f:72:fe:38:
         94:bf:70:a6:03:b0:7c:4f:06:f9:a7:05:b0:e7:08:d1:df:72:
         c7:69:24:68:21:8c:7d:0b:c8:7e:69:9f:26:d9:5d:4c:97:17:
         fa:60:63:f4:cc:96:4c:f3:b2:b3:64:8c:52:7c:f8:51:ab:33:
         75:2a:e1:a3:77:55:7e:8e:da:97:2d:1e:96:b5:d0:51:d5:10:
         ea:27:eb:04:20:df:d6:4d:d8:48:15:a3:87:50:05:8d:42:00:
         66:f9:7b:fa:99:54:3a:f0:ac:73:2b:b1:7d:69:27:14:e3:5a:
         6e:7b:e9:b6:b8:cc:4e:43:7e:4e:cd:55:95:8a:be:29:3a:77:
         18:e7:80:83:17:e0:68:79:2e:3f:dc:c0:8d:b7:51:29:ba:32:
         3b:e4:5d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:21:15 2025 by rpki-client