Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/800deae8-5c64-37d8-a9ba-c56619c11eb6.roa
File:                     800deae8-5c64-37d8-a9ba-c56619c11eb6.roa (raw, json)
Hash identifier:          VzUf0krGU9CkaZUOaOp1ZksZbtSYYMrJ974L8DDeM9Q=
Subject key identifier:   98:A9:CA:92:31:D0:E5:7A:6E:E4:7D:25:74:9A:9E:5F:E7:95:8A:C9
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F43285848B090B3842A3151E366E56A00
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/800deae8-5c64-37d8-a9ba-c56619c11eb6.roa
Signing time:             Tue 28 Jan 2025 02:00:39 +0000
ROA not before:           Tue 28 Jan 2025 02:00:39 +0000
ROA not after:            Mon 28 Apr 2025 01:00:39 +0000
asID:                     8075
IP address blocks:        192.80.246.0/24 maxlen: 24
                          192.80.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b0:90:b3:84:2a:31:51:e3:66:e5:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Jan 28 02:00:39 2025 GMT
            Not After : Apr 28 01:00:39 2025 GMT
        Subject: CN=96040801-a49f-4ce5-a8ec-f3fb8ce7ff2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e3:f1:26:20:9f:21:ef:26:7f:db:a9:4c:70:
                    71:22:40:14:7a:90:a2:03:0d:39:f1:af:97:b5:d1:
                    e5:6c:aa:ec:22:02:1c:e7:36:37:fd:18:3a:92:1f:
                    47:09:1a:c6:47:a1:b5:45:53:0d:37:9c:9d:2f:2b:
                    73:e6:14:1a:51:7b:89:77:4c:66:d2:99:af:bb:ac:
                    7e:ab:cd:ca:68:42:8d:3c:25:aa:cf:32:db:a5:e1:
                    d6:57:94:78:d7:0f:b6:70:be:c9:e4:1a:73:8e:1c:
                    3d:ef:e3:db:5b:ae:4a:17:62:b3:86:f3:16:21:e8:
                    70:d3:76:a0:87:6c:ac:3a:a7:a3:1e:51:d8:ab:fe:
                    f7:df:0a:71:82:04:2a:17:2f:37:bc:c5:1f:b9:5e:
                    f9:f1:20:62:db:48:59:e4:f7:7c:72:66:30:97:b5:
                    33:a3:b0:d3:d6:1e:8b:3d:02:7c:b5:6c:88:bc:67:
                    a0:a5:a7:f1:c7:73:eb:30:c6:93:f0:25:73:b6:17:
                    49:ab:64:e4:66:8f:6b:c0:3b:1f:04:b0:85:1d:00:
                    6e:9f:7b:e3:f5:fe:32:e2:b2:fe:40:07:26:1d:8c:
                    0a:b2:80:c7:65:b2:4a:4c:b0:d6:6c:40:17:1c:83:
                    f7:a8:2e:76:56:4f:0c:b5:a6:1b:62:f9:66:78:63:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A9:CA:92:31:D0:E5:7A:6E:E4:7D:25:74:9A:9E:5F:E7:95:8A:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/800deae8-5c64-37d8-a9ba-c56619c11eb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:2b:6d:ac:95:2a:c0:65:2a:00:89:b9:9d:ae:47:41:fe:33:
         4c:af:fd:20:71:a2:95:36:c7:f7:61:60:24:b2:54:51:af:1c:
         79:c2:c7:38:42:3e:be:27:1c:d6:65:20:1e:f2:91:40:f3:6c:
         25:63:67:3d:84:eb:69:e1:f0:f1:cc:f8:79:3e:00:6d:15:3d:
         ac:fb:fd:92:3d:f4:a9:b1:25:da:01:3a:f8:51:cb:cf:e0:23:
         ed:bc:64:ba:65:59:03:68:15:7e:f3:3e:a4:82:5a:0d:09:4b:
         3f:05:41:0f:6e:ef:d9:fe:81:ef:33:b4:0c:5a:14:2c:3c:df:
         ff:d4:cb:83:54:af:b9:cf:7c:e6:d3:6b:f2:61:f0:40:71:72:
         c1:7a:42:97:99:de:02:2d:34:31:11:8f:70:0a:f1:f1:84:1f:
         f7:70:64:b3:79:eb:34:17:20:b2:c3:b5:f4:70:77:2d:d4:ca:
         a6:39:6c:2c:d8:7a:9f:34:2c:15:f6:73:ed:cf:df:73:5a:2d:
         4a:31:7b:2e:1b:ac:68:f7:19:2e:7a:26:e9:2c:24:a6:9d:d3:
         63:98:e4:c9:a2:a0:64:0c:f1:e7:fa:f6:eb:3c:f1:91:3a:b4:
         76:7f:32:bd:8b:1e:b2:02:de:44:40:74:95:e0:71:d0:15:ca:
         32:f3:c5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:12:26 2025 by rpki-client