Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/279b99c7-6717-3c8a-974d-137532afc328.roa
File:                     279b99c7-6717-3c8a-974d-137532afc328.roa (raw, json)
Hash identifier:          k91wUT4fswM3RG2orN58ved5JjE+4shxzOV8lls0n8s=
Subject key identifier:   F0:B3:C3:75:9D:E6:2F:90:3E:3F:AE:FA:03:6C:D3:4A:C2:99:68:D4
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F43285848DD3BAAC8AB359238D70795A0
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/279b99c7-6717-3c8a-974d-137532afc328.roa
Signing time:             Thu 13 Feb 2025 02:00:40 +0000
ROA not before:           Thu 13 Feb 2025 02:00:40 +0000
ROA not after:            Wed 14 May 2025 01:00:40 +0000
asID:                     10397
IP address blocks:        208.85.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:3b:aa:c8:ab:35:92:38:d7:07:95:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Feb 13 02:00:40 2025 GMT
            Not After : May 14 01:00:40 2025 GMT
        Subject: CN=a8752366-ab79-4aa6-99b9-de551c75f104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e0:d5:da:79:04:50:dc:59:f4:cc:5d:92:16:
                    66:b1:2b:4e:7a:5e:bc:75:d3:03:74:ab:3d:c2:cf:
                    59:30:55:b3:6f:bb:db:ed:96:74:3e:e4:d9:a3:a0:
                    a7:db:50:fb:eb:45:c1:3e:17:d3:33:68:d0:00:a8:
                    30:85:a3:40:5e:62:98:7d:26:90:56:51:ba:30:7e:
                    b4:d6:5a:c7:ec:6a:dd:3e:fd:df:02:a1:6b:99:27:
                    2a:b3:2c:6b:d6:04:4d:04:43:dc:b6:da:9c:68:ad:
                    15:94:be:c4:5e:78:dd:1b:e6:be:9b:68:27:2e:95:
                    d5:08:30:ce:1e:a1:7d:ed:3d:80:5f:0e:a7:29:92:
                    f7:7a:5a:c4:ea:63:51:6f:b2:c9:be:2d:5a:5d:bb:
                    18:df:d7:71:30:00:87:9e:4b:41:89:19:b1:bc:7b:
                    18:31:dd:f2:bd:43:bf:7c:74:5e:83:58:fd:6a:21:
                    bb:1a:f3:1c:04:af:43:77:bb:b1:45:93:3b:a0:12:
                    d8:a6:58:ac:2a:f8:6c:54:a6:08:86:d4:6e:61:7b:
                    31:31:00:e5:23:91:3d:47:68:ef:a0:5d:69:21:ab:
                    53:38:4f:9c:2d:36:b9:ad:c3:4e:22:d0:bf:49:c1:
                    bf:6e:18:07:de:f9:e0:dc:dc:57:39:15:63:59:2a:
                    49:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B3:C3:75:9D:E6:2F:90:3E:3F:AE:FA:03:6C:D3:4A:C2:99:68:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/279b99c7-6717-3c8a-974d-137532afc328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e1:e4:8f:b6:a1:00:6f:7f:f0:f6:f4:fa:f3:34:c5:58:4c:
         b5:be:79:41:1f:85:d6:50:30:0c:70:97:cb:5c:a7:65:b6:b9:
         e1:05:e2:0f:df:ab:fc:aa:76:f6:25:71:2d:b8:b0:a6:48:22:
         85:3b:3c:af:33:ed:42:46:cd:89:50:c2:93:88:d9:40:7f:6f:
         28:22:6b:db:45:95:98:db:98:a7:96:67:07:3f:06:b2:8f:49:
         29:bb:8a:66:4b:2a:0f:45:19:a1:30:f3:d4:54:6d:3f:04:74:
         65:f2:78:29:33:21:1b:86:b4:af:cf:d2:53:5a:25:35:23:b6:
         3c:b8:3b:ab:a6:ef:1e:07:42:6e:5c:90:02:dd:e7:c3:db:5b:
         e8:5e:c5:03:d2:d1:4b:48:50:75:2d:92:a4:0d:06:78:2f:51:
         bb:76:07:0e:aa:a7:c4:b3:97:5f:9e:6e:1b:60:68:d6:c6:26:
         a9:41:de:dd:07:b6:4d:57:e8:43:e6:ad:6e:d9:27:35:0a:86:
         d0:63:a3:97:60:83:1f:d9:dc:b0:56:9b:92:59:5d:03:17:ed:
         3b:ef:a1:2d:53:f2:6f:80:07:a2:a0:f7:2b:2d:89:d7:f9:f4:
         f7:cf:77:bd:0a:1f:50:f7:f8:ba:e4:d7:c6:bd:f5:05:9a:ed:
         05:ea:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:52:55 2025 by rpki-client