Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/56f3e93e-b3e0-3418-8927-e93a84e74d01.roa
File:                     56f3e93e-b3e0-3418-8927-e93a84e74d01.roa (raw, json)
Hash identifier:          9Zz/U0fppE/YLhRJIaWyIPiyfZqJkcJ7ZJJb8WhwkeM=
Subject key identifier:   D6:34:15:AC:93:09:7B:2F:6B:B0:98:FA:48:03:75:38:C5:EC:DA:E2
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848F92684548A88E7595BEE3900
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/56f3e93e-b3e0-3418-8927-e93a84e74d01.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     33544
IP address blocks:        208.185.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:84:54:8a:88:e7:59:5b:ee:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=93b6a467-c0f4-4818-8710-d031bb3ab65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:46:a4:b7:4d:e9:12:1d:68:df:a3:1c:16:
                    66:17:6c:b4:a7:06:67:e2:c0:bd:8b:ff:d1:9d:7f:
                    94:6c:6b:5c:6a:76:35:27:cb:b2:3b:2b:cb:d0:a5:
                    87:69:99:93:f8:72:09:b9:15:f5:6a:6d:e8:04:db:
                    44:b4:cc:b5:eb:d3:ea:e3:f8:e4:d9:4a:e6:ac:ac:
                    81:57:b8:4a:7a:03:09:49:99:5b:6e:f0:24:c0:1e:
                    fc:bd:9e:91:ce:d0:31:93:f6:f7:3a:1c:4a:5e:2d:
                    34:15:f9:03:72:c8:b4:bf:1b:c4:5e:8c:88:cd:06:
                    ea:bc:50:c3:f1:76:d1:dd:3a:c8:9a:0b:3e:aa:d4:
                    55:2b:da:99:b3:6b:3d:c2:a9:f4:23:0f:e2:3b:19:
                    b0:fe:b0:b7:af:d9:b9:66:68:07:c2:38:08:68:fe:
                    d2:d2:da:55:6f:fb:9f:1b:d3:3c:8d:30:ab:23:ae:
                    d3:d4:75:e8:6a:46:09:1d:a8:85:bc:33:85:b6:d2:
                    86:7d:bc:5e:2e:d0:1d:e2:57:12:d5:9a:85:6e:b1:
                    07:bd:63:6c:d4:d0:60:1a:07:6e:16:34:b2:3e:69:
                    ef:91:30:61:70:8b:26:e0:dc:cf:e7:02:b8:92:e4:
                    82:9b:b8:f1:9e:9c:53:cd:87:7b:a2:71:56:4c:a0:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:34:15:AC:93:09:7B:2F:6B:B0:98:FA:48:03:75:38:C5:EC:DA:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/56f3e93e-b3e0-3418-8927-e93a84e74d01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:64:26:8b:cb:80:21:5e:87:a8:9f:17:d0:dc:e4:23:35:d3:
         8b:0b:4f:1d:46:6f:3f:6d:b8:56:96:d7:1a:fe:3b:4b:53:06:
         c3:82:75:89:37:7c:7d:da:81:fe:f5:62:83:b4:da:fd:04:bc:
         64:b5:af:b3:36:8a:8f:b8:2c:74:ed:d1:ae:04:7a:5c:db:f0:
         cc:b7:a8:b2:7f:6e:6c:2d:6d:ef:14:dc:40:84:c7:44:49:38:
         dc:e3:ad:5e:f4:08:14:8e:f6:b6:75:d4:5b:70:ad:99:a9:f5:
         91:69:af:cc:3e:68:86:18:07:7e:c8:96:ec:d7:23:86:97:e2:
         2c:b1:3a:34:d8:eb:b3:70:2b:a5:1e:19:58:ab:9f:ea:21:02:
         0f:a6:8a:ac:47:94:07:fd:6f:97:83:17:53:a9:73:a0:02:7b:
         c9:70:af:a6:66:f0:25:36:86:c5:42:41:ea:dd:0a:9f:c0:91:
         0a:e6:27:f6:f6:6d:bd:30:73:99:81:25:3d:05:9c:b6:b0:e7:
         18:ff:76:72:04:e5:54:81:97:3d:4c:3d:4c:e7:ac:d5:33:05:
         88:5c:6c:6e:86:00:4b:5e:cd:68:cd:1a:0c:c6:92:c1:24:96:
         6b:4f:fa:15:5a:66:a6:1d:4e:5c:95:a7:5d:73:d2:f6:9a:44:
         d9:66:e5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:49 2025 by rpki-client