Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a5b7be38-d001-3a7f-a90a-42bc5394d4a7.roa
File:                     a5b7be38-d001-3a7f-a90a-42bc5394d4a7.roa (raw, json)
Hash identifier:          UbeqDxndSSIi1wu3mH25iaWRtrO3lP9e7lrcZ/twvSg=
Subject key identifier:   79:1E:93:D7:B2:C1:C2:5B:7A:17:4A:28:19:90:85:F5:37:74:00:82
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848F92685ABA44008AB42ED0EF0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a5b7be38-d001-3a7f-a90a-42bc5394d4a7.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     7767
IP address blocks:        208.185.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:85:ab:a4:40:08:ab:42:ed:0e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=aed198cc-a9f0-43c7-a046-4a46357dfa3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:86:35:36:08:4a:1d:64:d0:4f:3a:f6:f9:
                    be:f5:d6:56:84:e4:4e:20:dc:1d:c8:9e:3c:89:7f:
                    ba:43:6e:63:2d:69:87:7d:1a:6f:75:60:2c:d7:54:
                    85:91:dd:93:3e:0b:9e:0d:1e:e7:97:22:a6:89:cf:
                    e1:89:f0:d8:ce:58:b7:f1:17:4e:8e:54:2e:4e:e4:
                    f7:1e:11:b0:b3:bc:aa:2f:4e:ac:30:88:87:df:a8:
                    7e:33:60:60:6f:d2:50:34:5a:b0:94:76:06:ff:da:
                    4d:5e:0c:21:b1:32:00:62:2c:c5:90:c9:5f:bb:bb:
                    1f:3f:df:c8:b0:49:74:92:18:55:74:0b:a3:ce:7a:
                    51:8f:67:06:69:21:7b:75:96:86:09:28:00:64:21:
                    dd:5e:f9:ce:08:23:35:86:35:0f:a1:93:b0:67:9d:
                    af:4b:33:43:3a:84:87:27:79:99:c0:39:de:d4:3a:
                    58:56:27:86:e7:4a:62:d2:4f:d3:18:12:d1:07:31:
                    c6:4e:32:4d:72:83:c1:ee:fa:3d:c7:17:ea:b7:17:
                    7f:2b:2c:c2:42:cd:b1:34:4c:17:76:22:9e:a2:57:
                    d5:f8:5e:8b:65:28:8e:e3:7d:07:9f:4b:53:67:f3:
                    e5:92:4e:1f:d1:f7:ce:f8:b7:dc:13:cd:18:22:a1:
                    1f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1E:93:D7:B2:C1:C2:5B:7A:17:4A:28:19:90:85:F5:37:74:00:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a5b7be38-d001-3a7f-a90a-42bc5394d4a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:5e:e5:e9:51:4d:d0:3a:24:d6:ed:7e:90:1e:e1:70:98:e9:
         f1:31:f6:65:59:7c:4f:91:1a:e0:ae:32:d0:cd:02:75:6e:90:
         3e:67:66:00:39:4c:69:54:16:94:dc:f3:3a:f8:ae:3f:76:76:
         eb:dd:a0:fd:3a:c1:ac:f1:24:40:13:5c:2b:71:66:2f:24:e0:
         e0:c8:1c:da:33:bc:04:84:20:6d:dd:24:70:8e:12:58:3c:1a:
         44:90:3d:9c:ab:33:1a:a2:d9:44:4d:b2:a2:40:d7:57:30:63:
         70:df:ca:83:3f:b3:01:a3:cb:70:8e:35:91:7c:9f:77:93:f1:
         20:77:a9:0e:8b:b8:83:f2:2d:14:5f:fd:95:85:b6:66:23:72:
         96:ee:81:c4:68:ae:05:9c:9c:5a:09:16:0c:63:7c:01:de:7c:
         a9:f4:96:53:e1:2a:10:fc:73:f5:61:db:22:94:b4:c3:aa:20:
         d5:f3:2b:2b:49:ce:f5:87:35:ab:9e:b8:b1:e2:aa:5c:75:d7:
         c6:9a:e3:b7:36:9f:97:59:c7:c6:dd:b0:71:7c:d6:62:aa:9a:
         ab:f3:10:35:7b:8a:00:38:62:57:b1:8e:59:82:62:ac:a8:93:
         5b:f0:1e:ef:a4:43:ee:ef:e8:aa:c0:ae:35:b0:29:4e:15:cc:
         8b:3c:d7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:58 2025 by rpki-client