Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8872e9cb-4562-39e8-9fc1-5bf45cd0a5ed.roa
File:                     8872e9cb-4562-39e8-9fc1-5bf45cd0a5ed.roa (raw, json)
Hash identifier:          CtndHW4ZozXsgjWkvRoCMosBfum7SknIbbGynZx1ogo=
Subject key identifier:   E5:06:57:44:AD:0C:57:EE:AD:5B:20:A0:C2:24:76:B3:A6:B7:4D:AB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584905B6BACCAC24A075CC324E00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8872e9cb-4562-39e8-9fc1-5bf45cd0a5ed.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     22773
IP address blocks:        70.174.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:ba:cc:ac:24:a0:75:cc:32:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=e9b608d1-309f-40fa-a1af-bef1840ee422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:63:76:1e:4e:33:59:ee:ce:36:51:01:49:
                    52:7f:05:ff:18:f3:aa:70:9b:17:00:6a:5e:ba:40:
                    26:3b:71:02:3d:01:87:2e:70:86:79:27:e8:6c:c8:
                    94:31:4e:d4:1d:b2:41:03:6c:06:98:6f:7a:b3:bb:
                    6b:47:17:41:74:01:a1:f1:f6:bb:12:37:1d:c5:a0:
                    97:f5:d1:69:99:58:1b:8c:e3:d6:36:e3:80:f4:db:
                    14:32:3c:12:fc:02:1c:43:d7:a7:63:61:3a:35:d8:
                    35:08:8a:ff:93:bb:ea:1b:94:54:50:c0:35:44:07:
                    c5:e1:4b:69:25:02:4a:d1:7f:1e:ec:4a:eb:8e:d8:
                    49:eb:84:b9:41:dd:53:28:37:a1:24:56:6b:16:70:
                    67:86:f5:05:09:d1:64:e0:de:99:e3:77:82:68:a5:
                    94:ee:f4:2d:d9:59:f4:da:63:64:ba:b9:47:a5:e2:
                    34:11:fe:88:72:8a:71:5a:d3:d1:d1:ed:96:3d:30:
                    8f:1d:4f:33:e2:89:df:28:73:2e:23:d4:b9:03:82:
                    8a:15:f4:6e:6c:48:7f:7f:84:b3:79:3b:f0:c2:4a:
                    83:8e:84:45:a9:9e:98:b1:ab:11:f9:e6:be:cd:9b:
                    17:bc:2c:f1:2c:26:f5:cf:ce:35:c2:2e:0d:21:67:
                    2e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:06:57:44:AD:0C:57:EE:AD:5B:20:A0:C2:24:76:B3:A6:B7:4D:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8872e9cb-4562-39e8-9fc1-5bf45cd0a5ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.174.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:5c:04:c0:5a:90:56:cb:ce:50:29:fd:73:94:ae:1d:22:a2:
         41:a0:96:62:31:51:5a:0e:88:27:f7:ae:eb:17:81:05:72:d6:
         6c:05:f5:c4:c7:9f:a2:ee:2a:de:46:4d:9d:69:b4:13:23:f8:
         1d:51:4b:87:a9:f9:ba:28:22:40:0b:67:4f:dc:62:5f:c0:22:
         55:c1:cf:a8:5f:8a:5e:80:7e:f8:6b:c6:ea:d6:e9:b5:c9:9c:
         a5:81:ab:c6:9d:3c:8a:85:a0:28:b6:ab:75:10:a8:cc:80:81:
         13:88:9c:ff:c0:26:1c:e2:3e:0a:9d:e6:3d:df:11:24:8c:71:
         fe:32:c3:e6:f6:d1:83:b4:3f:39:f6:ca:1a:21:16:2b:b9:ba:
         85:3a:bb:39:91:5f:63:c1:cf:1b:8a:d6:29:52:61:de:97:09:
         73:e4:94:59:f3:b9:14:2c:9f:9b:92:63:e9:ee:38:70:11:ff:
         61:e5:02:81:84:74:da:bc:6d:98:ef:41:bd:96:45:41:90:3e:
         14:44:9f:7e:6d:fa:04:fa:cc:3b:b4:83:e3:96:1f:73:80:08:
         2c:bc:cb:f1:4d:62:03:ae:3a:7e:0e:d3:e2:07:fc:2b:8b:f7:
         9b:7f:a6:4e:bd:e9:b5:47:f7:97:4f:b9:39:62:78:0c:da:9e:
         89:db:b5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:27:39 2025 by rpki-client