Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/85ad693b-7dc1-3ca3-af20-ff3484f43a54.roa
File:                     85ad693b-7dc1-3ca3-af20-ff3484f43a54.roa (raw, json)
Hash identifier:          RTn++lQImLN8modWfDU1nVPsbKHuTeBDzY0uKF1lBM0=
Subject key identifier:   98:B9:95:8E:1D:FB:C7:6E:FF:37:00:3F:2A:6B:BF:3C:39:01:A2:C7
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849071BEB57E7CA7E33312131C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/85ad693b-7dc1-3ca3-af20-ff3484f43a54.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     19955
IP address blocks:        209.82.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:eb:57:e7:ca:7e:33:31:21:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=9d849bc6-41b7-4e8c-a0c2-dd6247338e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:56:00:2f:05:99:e4:26:70:54:1b:d6:2d:
                    b7:05:5f:ac:27:35:0a:01:17:83:7b:4a:8d:07:9f:
                    cd:5f:ea:bd:67:70:86:04:83:5a:a0:63:cf:0a:91:
                    5a:72:05:f5:be:82:f3:59:3d:d4:a4:8b:4e:91:91:
                    c6:1b:3d:ca:b5:61:48:ad:a8:c4:99:88:4b:fe:b2:
                    bf:3e:ec:5a:15:d4:01:2a:bd:85:b4:f6:07:a6:2d:
                    49:63:c8:92:58:8c:29:2f:e9:60:5d:f6:ec:e9:53:
                    34:e7:b9:62:ee:4b:0b:64:26:16:1b:c7:a0:6f:ae:
                    d6:a9:3c:8c:4d:f9:77:60:a6:c4:00:31:c4:4b:80:
                    b7:98:25:ef:e1:00:a4:90:c7:56:a9:05:61:05:4d:
                    a9:e8:79:62:d5:83:df:ff:ce:25:7a:9e:b3:29:6a:
                    74:4e:0f:b9:00:77:99:e8:dd:53:69:2b:10:51:1c:
                    ae:1e:71:cf:a1:52:ab:5f:99:1a:59:dd:71:1a:f7:
                    66:e6:6d:cb:da:68:90:6f:e6:e6:26:d9:d0:34:88:
                    19:0a:d2:ea:fc:e2:92:8e:0f:03:1a:23:9f:d8:cd:
                    4e:ed:58:ec:22:7a:0c:54:68:0c:02:c9:54:4f:9f:
                    bf:20:30:6c:a9:b3:12:3f:b3:04:da:96:d9:70:11:
                    c3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B9:95:8E:1D:FB:C7:6E:FF:37:00:3F:2A:6B:BF:3C:39:01:A2:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/85ad693b-7dc1-3ca3-af20-ff3484f43a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.82.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a2:ce:03:3c:6c:7e:7a:10:d7:53:63:da:71:d3:30:5b:e2:
         8f:09:d9:c0:e1:37:d4:86:f3:56:72:54:39:bd:cd:ed:20:a5:
         e2:6f:06:39:4f:40:01:71:bf:1a:a1:b7:57:ad:f7:fd:df:db:
         e5:3b:62:cd:13:56:af:1c:4d:bd:78:fc:71:77:eb:03:9f:bb:
         7d:63:22:a2:f4:c1:96:4b:47:f1:ea:ab:8d:77:85:85:7f:eb:
         e4:c6:e5:46:f0:29:62:e6:0b:9b:4f:2d:15:5e:21:54:dc:fa:
         82:c7:21:e3:45:df:4d:d0:d4:2f:5d:5c:87:ac:69:8d:dc:ef:
         79:46:b1:35:22:d4:52:ac:8d:6e:e8:08:58:7d:3a:1a:6e:c8:
         60:d9:12:01:40:14:df:9c:aa:c9:f5:e0:10:f9:e0:83:64:72:
         46:32:d6:0b:48:61:32:d0:92:ad:79:7a:cb:80:ff:ed:b3:8c:
         1f:c7:f2:a0:7f:f0:fe:3e:4a:4e:4d:4a:4c:c9:05:f5:2c:9b:
         a7:07:41:60:1e:11:b5:ef:60:9f:1e:1c:31:3a:d8:6f:f9:50:
         02:53:ec:33:a2:8c:c7:b8:46:ae:90:4e:0e:a7:7b:74:de:f5:
         79:7d:2a:2c:9e:e1:3d:8d:bb:7d:1d:a8:18:78:4b:3a:1a:0e:
         0e:c4:08:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:54 2025 by rpki-client