Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3af58970-ed68-3030-ad52-5a7b13c5d79c.roa
File:                     3af58970-ed68-3030-ad52-5a7b13c5d79c.roa (raw, json)
Hash identifier:          rD6Gnqov5/2QDvwnho25EwLmk7rDb+gBvK7smXRqheA=
Subject key identifier:   2C:30:05:22:21:E5:E8:D4:A7:53:32:90:9D:B4:AD:18:21:6D:FC:09
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848F9267A283EEFDA46799C9E40
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3af58970-ed68-3030-ad52-5a7b13c5d79c.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     40590
IP address blocks:        128.177.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:7a:28:3e:ef:da:46:79:9c:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=1762f962-e2dc-4e29-8ece-878169209f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e7:ee:45:e6:84:22:b7:52:6b:b3:b3:c7:59:
                    ef:0e:94:cf:82:9e:91:dc:ce:24:5e:05:00:6b:1d:
                    2e:e2:7b:5c:9c:06:1e:34:13:69:25:e4:2e:ff:d4:
                    a5:19:93:95:a5:fd:59:5e:69:7b:ff:ce:18:e3:10:
                    d6:0e:ae:fb:fc:6e:44:b5:c7:9c:52:c2:74:a8:fe:
                    24:e6:62:69:d5:e0:fd:4b:56:e9:c9:df:de:8b:80:
                    b2:69:33:91:b7:64:dd:72:e2:19:3a:ed:13:eb:72:
                    08:6e:9d:05:ca:dd:d1:04:40:84:1d:d8:0d:32:ea:
                    f7:7d:5d:32:be:5e:77:9d:f8:85:69:37:e9:f6:85:
                    71:10:21:fe:63:0d:79:cf:b6:e9:44:f2:41:33:1d:
                    cb:d9:b0:50:36:51:56:9a:60:9c:9e:48:b8:c4:8f:
                    10:96:1f:fb:33:b3:d1:b2:71:ff:e7:3f:b6:1f:9c:
                    11:dd:92:6a:81:66:a0:5a:9f:5e:1d:be:fe:54:25:
                    d3:fd:af:8f:5d:e0:f9:04:7e:92:66:97:41:20:70:
                    a9:10:26:c2:0e:cd:fb:e9:1d:5c:35:a3:7b:f5:59:
                    73:f0:53:ee:4d:d2:ac:23:0f:b0:83:5a:64:50:8e:
                    97:0c:57:37:a2:61:84:45:ef:96:af:9b:bf:67:8d:
                    21:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:30:05:22:21:E5:E8:D4:A7:53:32:90:9D:B4:AD:18:21:6D:FC:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3af58970-ed68-3030-ad52-5a7b13c5d79c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:98:cb:48:e0:b8:81:af:86:1e:ce:62:bf:37:d4:26:03:af:
         fd:36:c5:72:99:ab:72:f7:ac:d4:cd:c2:49:33:ca:d2:7e:04:
         de:09:e2:45:5c:71:14:e5:7e:4f:c8:86:f6:84:30:f7:8d:b4:
         d0:8c:dd:4b:c5:75:c4:1e:fc:01:3a:ca:7b:af:d9:a0:70:cb:
         6f:0e:d5:36:15:7f:e8:a3:b8:f6:de:bd:7d:7a:3b:1c:23:ff:
         d2:67:e3:2a:f3:ef:c9:83:3c:bc:5c:32:3b:48:a3:bc:60:f9:
         39:f5:b2:12:99:0a:a9:ac:8f:5f:0d:8b:2b:54:a5:ad:42:70:
         e5:67:e8:6b:c1:ca:89:f2:80:e6:14:05:9e:e9:eb:fe:a7:22:
         c0:0c:09:fa:41:17:a7:43:1f:b7:07:a5:1f:f8:cb:09:fc:46:
         f0:4c:15:34:82:6a:ef:a0:62:91:c6:6b:e7:22:c4:d6:2a:a6:
         fb:54:53:28:9e:55:83:14:f3:4f:68:a6:e9:69:1a:d3:95:73:
         9f:01:a3:82:27:fb:14:81:19:f5:0d:29:9d:cf:1a:b8:e5:b6:
         16:b7:3c:ce:ef:a1:38:ea:64:5c:ee:38:da:ba:1f:66:ed:b9:
         07:90:3c:b6:1b:3f:11:7d:48:1e:0a:22:36:f6:82:5d:67:a2:
         26:28:07:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:50 2025 by rpki-client