Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a483f43a-3fd3-389c-8713-88b9b8d8ab0c.roa
File:                     a483f43a-3fd3-389c-8713-88b9b8d8ab0c.roa (raw, json)
Hash identifier:          weuDJLpPWc73QiJcT2Ttf9qknGG697GuRNGVb+N4ECI=
Subject key identifier:   DE:F8:C3:D8:03:CE:95:E2:C1:C7:4B:B4:30:D3:56:87:50:01:05:66
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849071BEE1C714B84098E2A39C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a483f43a-3fd3-389c-8713-88b9b8d8ab0c.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     11011
IP address blocks:        209.249.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:ee:1c:71:4b:84:09:8e:2a:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=1e21e887-8564-488d-a82a-84a3a2541344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a1:dc:5c:d3:3b:8b:e4:02:35:57:16:8d:ef:
                    27:0f:31:7d:7e:5a:1f:91:da:9d:32:df:ca:e7:63:
                    a8:06:eb:69:00:70:31:c0:a0:ce:fa:d7:14:c3:30:
                    36:b7:35:b1:92:43:15:97:62:ce:5e:e2:94:3a:3c:
                    85:8b:e3:e5:c2:2a:06:03:b6:a2:97:92:72:e0:1c:
                    ce:95:8f:29:da:de:3c:f9:08:6e:01:78:f2:3d:c8:
                    b4:07:ae:54:a9:ac:9a:1e:5e:36:06:e4:70:ab:1a:
                    f9:ce:e4:26:7c:a6:ad:d5:9d:f2:a2:a7:6c:ac:2e:
                    3c:ab:ea:37:5c:c0:d3:24:39:12:0e:c7:aa:80:16:
                    9e:57:20:9c:34:f1:ac:e1:25:b7:b8:a5:21:9e:56:
                    fd:ac:5b:c3:f3:d3:c8:8a:88:5e:95:c2:4e:28:6a:
                    40:39:47:d9:c2:8f:d7:c1:c7:f3:09:ae:6c:6c:1a:
                    56:52:2d:b5:da:c1:8a:ea:dd:be:d4:8a:5c:84:88:
                    f5:ad:00:a9:fb:e0:4a:04:4e:f5:02:81:6a:3b:70:
                    19:a9:2d:01:63:86:72:0f:c7:10:2f:30:3e:9d:da:
                    c0:d9:13:b1:4a:9e:06:2e:aa:3e:63:64:6d:32:3d:
                    a5:d0:a5:51:3e:2c:83:aa:b2:ca:08:26:38:78:d3:
                    30:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F8:C3:D8:03:CE:95:E2:C1:C7:4B:B4:30:D3:56:87:50:01:05:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a483f43a-3fd3-389c-8713-88b9b8d8ab0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:84:d1:41:3d:63:b1:09:0d:65:4d:a6:7d:85:40:03:7d:ba:
         c3:28:ce:19:35:f4:f0:53:3b:5e:4c:4b:2d:4d:a3:9e:db:dd:
         79:35:87:08:f4:7e:f4:02:17:eb:14:ea:01:ab:fc:21:38:19:
         f7:eb:15:53:e5:41:6d:b8:d2:68:3e:e0:2b:05:2f:b7:b9:31:
         fc:d0:00:88:54:f4:39:2b:1b:36:33:51:61:16:2a:cb:03:61:
         b5:64:20:53:77:23:03:36:a6:df:da:42:51:e7:e4:ee:28:50:
         4a:a5:25:40:1d:c6:bf:ed:47:0c:20:9e:04:2b:ed:40:20:31:
         35:1a:c0:ee:45:6f:07:4f:99:5b:13:be:e5:3e:06:11:99:42:
         41:be:1d:aa:38:6c:4a:ca:c7:f7:23:64:11:51:a0:cf:83:ce:
         fc:76:b5:0d:2e:ee:cb:f4:25:91:42:ef:46:82:aa:07:a1:a6:
         e7:3a:ed:89:36:96:52:67:87:cf:1d:7f:6f:40:f1:02:e0:be:
         ce:e9:d3:d3:d6:de:1f:52:3c:0b:d0:59:7b:a4:65:23:5d:a8:
         45:a6:0f:fd:66:aa:98:f3:03:af:21:4c:79:ab:24:37:77:0a:
         74:7d:0c:cc:55:ff:b2:39:aa:eb:4f:4b:25:63:1f:26:2f:3c:
         b3:27:39:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:54 2025 by rpki-client