Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6319351c-fc1f-367a-9cdd-39a38b0f31ca.roa
File:                     6319351c-fc1f-367a-9cdd-39a38b0f31ca.roa (raw, json)
Hash identifier:          bTU7PZrW4ZNnr7lFtP6811y5dqTiz7cNmTaNcMOzbTQ=
Subject key identifier:   9D:7E:D6:3B:CE:9C:5B:13:96:55:04:18:A8:E9:1C:11:8B:96:70:8B
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848F92684DC0EB28E4A5235C000
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6319351c-fc1f-367a-9cdd-39a38b0f31ca.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     53277
IP address blocks:        208.185.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:84:dc:0e:b2:8e:4a:52:35:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=b2cfa153-a754-4a63-a4d0-76e5f6b6f8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9d:c0:3c:c9:39:ae:c6:77:14:bc:d4:d2:00:
                    7a:4a:0e:48:f5:76:93:ba:51:3b:ef:15:b3:b2:71:
                    80:6e:23:aa:e3:73:02:fb:17:b4:21:cc:2d:c9:79:
                    93:13:eb:81:cb:21:5b:27:2a:e8:ad:2f:0c:61:d0:
                    38:56:a0:5b:f4:a2:07:5a:a7:a5:27:54:b7:19:03:
                    2b:99:34:41:d7:60:fe:b0:c6:b8:ce:ae:f2:e8:3a:
                    33:e5:61:fe:d9:0b:c0:17:7e:ee:f9:74:fa:92:d3:
                    7b:c5:6e:e8:74:32:d9:79:c6:c0:9a:24:60:15:cd:
                    39:f8:e9:14:3e:ad:2c:61:c2:27:0a:2b:90:63:2b:
                    24:9d:69:e4:75:18:3c:c9:3f:3b:98:6b:24:aa:00:
                    b8:89:d2:fc:d7:8a:3a:42:98:2d:df:06:61:7f:4d:
                    20:2d:a3:8c:a2:8b:77:e4:22:2f:74:46:a2:7a:27:
                    96:07:16:87:d8:b2:20:99:d7:7e:9d:6a:46:52:f7:
                    17:f6:54:75:c8:1c:79:98:ec:5e:6e:5e:9c:6b:4d:
                    49:2b:53:32:0f:53:9d:cd:2f:cd:4b:74:7c:31:76:
                    7e:a2:26:b1:ca:60:3f:7f:fe:d6:21:8c:f6:d0:3e:
                    ec:23:37:1f:9b:09:9d:19:cf:ef:ed:db:f6:87:f1:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7E:D6:3B:CE:9C:5B:13:96:55:04:18:A8:E9:1C:11:8B:96:70:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6319351c-fc1f-367a-9cdd-39a38b0f31ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:65:76:9c:dd:78:3e:ba:ec:70:2d:cc:a4:7f:5f:48:90:62:
         d8:07:ea:08:57:25:56:0a:ca:61:83:f8:c8:81:9a:5f:20:90:
         c1:0b:2a:5c:55:1e:6d:60:9f:92:98:06:e5:ca:f6:1f:76:5a:
         11:4d:7a:68:7a:da:13:7a:d6:46:8c:1b:50:0e:d3:96:0b:da:
         c4:b1:71:0c:55:37:ec:37:21:20:9f:ac:dc:da:b8:0f:b3:42:
         2a:49:46:1e:36:f5:f6:f7:bb:60:d3:7e:7c:1b:a2:0b:d6:ae:
         7f:21:ce:0f:97:e2:ef:b1:e3:e7:08:45:32:33:62:58:13:21:
         5a:5e:6e:b3:69:98:2e:e6:08:d6:4d:4a:7e:69:9e:2b:f7:82:
         9d:35:f7:f2:0b:6f:39:8f:46:7a:e3:bb:89:a7:24:ff:11:f6:
         35:a5:a9:0c:4a:4b:14:f1:c5:52:3e:ad:59:97:28:b6:28:54:
         83:93:fc:39:7e:c5:c4:34:88:3b:7a:21:df:ea:86:f4:e1:2f:
         66:47:f7:eb:99:78:a2:89:98:e1:7e:63:74:23:25:79:d3:ac:
         55:4f:42:40:0b:f0:d1:be:28:8d:ab:20:54:37:65:0e:a3:72:
         60:95:2f:8f:d4:01:c3:21:78:0e:9d:f0:d8:d3:e4:ef:f5:97:
         51:0b:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:38 2025 by rpki-client