Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/3090b810-4dac-3695-a43e-d330ef2f7fcc.roa
File:                     3090b810-4dac-3695-a43e-d330ef2f7fcc.roa (raw, json)
Hash identifier:          8+fR1WXXMyHrpErdNtEY/U/yjQzZjJkiZuoWKtR8wpM=
Subject key identifier:   73:A8:2C:06:57:ED:64:5E:42:C9:4D:AA:10:08:6F:20:71:58:64:97
Certificate issuer:       /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e
Certificate serial:       010D0C9F4328584894A5E71E370695B90E2BE420
Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/3090b810-4dac-3695-a43e-d330ef2f7fcc.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     264646
IP address blocks:        8.242.189.0/24 maxlen: 24
                          8.242.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:e7:1e:37:06:95:b9:0e:2b:e4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=567e4f30-8cd2-4d38-aef0-48b1ee71d1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:88:8e:b9:88:f0:8d:3f:e6:8b:a4:83:ab:a6:
                    d8:0a:90:f1:34:9b:59:13:11:d3:47:65:8a:53:70:
                    76:ed:ff:94:62:92:04:22:3f:7d:f2:7a:f5:80:d3:
                    73:eb:ea:9e:90:5b:3b:e3:72:1b:c4:ea:e9:3b:c0:
                    9d:a7:4c:a5:c5:ce:ec:12:d5:c6:98:0d:5a:a8:ef:
                    40:9d:89:eb:e1:a1:04:56:61:11:51:4d:b9:71:f9:
                    96:a0:aa:75:a7:25:a1:6d:60:8a:1a:85:05:86:ed:
                    16:05:ea:a7:b5:06:0a:82:db:e7:e0:26:ca:d5:37:
                    a2:24:64:4e:7c:62:5b:2f:c2:67:ec:48:f3:4a:77:
                    12:bd:2b:92:4b:42:06:1b:26:1a:f1:73:8d:67:cf:
                    fd:8e:a0:8a:a2:2f:16:77:e7:c2:61:99:fb:ff:5c:
                    1f:9d:ca:30:40:d6:c1:45:8d:6a:7e:25:21:df:8a:
                    08:3b:8a:aa:67:a0:03:0f:d8:5e:81:18:b5:c7:9f:
                    dc:57:7c:70:81:a8:b8:68:e3:75:9e:05:d0:2c:a4:
                    c1:53:d4:fd:f9:57:bb:7b:df:f7:72:81:15:13:7a:
                    e4:45:72:12:55:c5:f5:03:d5:09:c9:0b:f2:54:c8:
                    f8:09:44:d0:6a:e0:a9:89:53:7d:87:85:69:d1:27:
                    67:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A8:2C:06:57:ED:64:5E:42:C9:4D:AA:10:08:6F:20:71:58:64:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/3090b810-4dac-3695-a43e-d330ef2f7fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.242.189.0-8.242.190.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:16:3e:ec:34:dd:7c:2f:2a:8c:f8:7e:99:a8:1f:cc:92:63:
         1e:27:46:54:ef:7f:00:65:f2:6a:d2:73:70:ba:ae:24:e4:54:
         9a:35:76:e8:af:e6:48:3e:c2:4c:df:9b:2d:29:81:2d:24:72:
         8e:31:49:d8:f3:34:3f:35:a6:60:39:41:a3:ac:a3:11:7f:28:
         13:df:65:58:01:08:13:38:4d:25:89:a2:b8:eb:cd:95:46:bd:
         a3:77:22:4a:b2:c4:85:a7:7c:ab:56:ab:d6:4c:0c:70:d7:fe:
         ea:fd:e5:f1:98:71:55:8b:17:13:25:60:84:ea:f6:05:3e:df:
         f1:0f:92:14:fe:74:f5:73:97:43:72:75:08:68:e5:78:39:76:
         05:80:57:23:b2:ec:ed:b5:2e:46:e5:35:bc:4d:0f:cf:66:a0:
         c6:cd:87:7e:41:7f:fa:7c:6e:1b:c1:e9:a2:9b:a2:5d:d1:da:
         29:ae:5c:13:d8:b8:bb:71:2f:eb:bc:5a:fb:c8:28:a1:02:69:
         0b:65:66:d9:da:5a:6e:06:c1:c9:7c:b5:e1:9d:6e:5d:70:aa:
         74:c7:de:4e:2d:48:47:2f:30:ab:36:81:41:ff:15:e7:b9:ff:
         58:e2:dd:fa:4d:d9:f6:d0:5c:73:25:ff:e8:7e:df:d1:72:42:
         de:01:d5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:24 2025 by rpki-client