Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c85839d5-299c-37cf-977c-33f89a7291fc.roa
File:                     c85839d5-299c-37cf-977c-33f89a7291fc.roa (raw, json)
Hash identifier:          v+ALH9WYbF9bi4CmdJZw2yQR+xGE1QyCvQIz6mRCq00=
Subject key identifier:   74:1C:19:F7:A8:CA:B8:F1:D1:3E:69:3B:E2:D2:64:82:5D:02:CA:B2
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848FBF12E001137917ABB072100
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c85839d5-299c-37cf-977c-33f89a7291fc.roa
Signing time:             Mon 24 Feb 2025 02:00:38 +0000
ROA not before:           Mon 24 Feb 2025 02:00:38 +0000
ROA not after:            Sun 25 May 2025 01:00:38 +0000
asID:                     26476
IP address blocks:        208.185.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fb:f1:2e:00:11:37:91:7a:bb:07:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 24 02:00:38 2025 GMT
            Not After : May 25 01:00:38 2025 GMT
        Subject: CN=d9ee22a7-1370-4cab-8634-21c53918faef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:62:6b:83:22:94:1d:db:e1:b0:b1:fd:cb:29:
                    6c:7d:7d:34:1b:40:d0:8e:2c:33:67:2d:f2:34:22:
                    9f:21:dc:4a:6f:a9:46:8d:cd:ca:0a:59:b8:2e:4d:
                    aa:40:56:0e:db:3a:56:05:64:ed:32:17:56:d7:05:
                    3a:c1:cf:07:39:9f:30:a7:5b:3e:97:20:a5:2c:11:
                    af:a0:53:24:e4:02:23:7a:c3:b4:5f:c6:cc:91:41:
                    51:c1:16:5d:1e:02:2d:76:64:60:54:ef:49:b8:18:
                    79:62:34:80:08:9e:79:cf:89:ac:c4:b9:06:00:31:
                    74:d1:c4:a8:21:77:0b:25:57:e3:61:27:ff:7f:82:
                    bd:b1:9c:03:8a:72:50:f6:b1:cc:43:0c:9c:4c:f3:
                    5d:0c:75:dc:5e:e7:99:d8:7b:e3:81:20:7f:51:80:
                    45:e2:6b:08:d7:4e:d2:55:f8:0f:2a:b0:68:30:68:
                    a9:1c:63:f9:d9:7d:93:99:61:77:4c:53:45:ef:5b:
                    76:86:f7:05:fb:07:f4:a4:39:f1:e2:c2:a5:5e:13:
                    a3:ee:5b:e4:87:72:ff:dc:22:84:8b:33:67:8f:d9:
                    ef:ed:9d:7a:2e:44:fc:76:c8:43:8f:59:8d:1e:a2:
                    97:1f:d5:4b:39:88:62:51:f1:f7:5a:2a:49:65:bc:
                    33:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1C:19:F7:A8:CA:B8:F1:D1:3E:69:3B:E2:D2:64:82:5D:02:CA:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c85839d5-299c-37cf-977c-33f89a7291fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:f1:26:ab:8c:db:05:c9:3a:cc:86:cc:8c:a7:83:8d:12:26:
         4c:63:c0:f7:ca:ba:5c:1f:b7:f2:b2:29:f3:ab:29:7e:fa:15:
         ed:7c:f1:06:84:d3:53:ba:e1:dc:84:4f:97:80:73:08:8c:e2:
         04:5c:5e:22:c3:c6:6c:26:bf:8c:8f:50:aa:0a:73:91:0f:3b:
         a1:b2:ba:7f:a4:0e:98:04:3e:4a:ea:2b:84:c1:57:f3:ea:92:
         85:85:7f:7b:f3:29:92:ef:58:1a:a0:7a:e0:79:0b:83:bf:6c:
         35:4f:4d:a1:1d:2b:2a:64:20:00:ea:66:c7:45:ed:97:35:a6:
         36:b1:a4:1e:3a:d5:43:9a:a3:cb:53:2f:05:66:8e:20:33:27:
         d4:97:19:0d:06:6e:b4:14:7e:0d:12:c1:8d:82:fe:8f:e8:49:
         a8:c9:e5:c4:82:a4:f0:4e:2e:d8:3f:c2:3e:7b:fd:13:80:76:
         fc:0f:f5:03:4c:c8:3d:d3:5d:37:91:f9:40:17:18:eb:67:9a:
         29:90:c0:0c:f0:83:80:0e:4d:e1:b0:f8:cb:09:15:a1:7c:f1:
         ff:37:1e:11:9a:6e:c4:53:cf:41:a3:1a:03:bf:90:e1:47:7d:
         60:06:0f:79:6c:64:4e:87:6a:b5:b6:12:b4:b4:98:6f:0e:57:
         48:1d:40:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:56 2025 by rpki-client