Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cea122a8-c512-38e8-9d32-3a24d3f89c6d.roa
File:                     cea122a8-c512-38e8-9d32-3a24d3f89c6d.roa (raw, json)
Hash identifier:          8Bl5lA3leFpNmrj26LCCOHObn8b6rPDdWUwH2LvTTOw=
Subject key identifier:   6C:11:53:E0:EC:B3:53:E1:7A:71:50:90:F9:48:96:96:70:EC:82:6D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848F926847B0745898514EAA600
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cea122a8-c512-38e8-9d32-3a24d3f89c6d.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     47063
IP address blocks:        208.185.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:84:7b:07:45:89:85:14:ea:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=925678ad-08b0-4440-a4ad-00dfa4b4b9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:b4:95:89:97:64:ab:a3:36:83:02:4f:b6:
                    cd:59:ba:01:d2:78:7f:c1:85:59:3a:b9:59:9d:8c:
                    d3:5f:d8:f7:82:22:50:62:84:51:60:a2:2c:60:ae:
                    1d:7f:58:ea:5a:4c:21:dd:46:da:25:7a:1c:66:e8:
                    3d:83:df:b5:c3:fd:52:49:be:49:c8:04:73:26:4f:
                    ed:e0:2d:d0:c6:e6:ff:22:d0:4a:4d:98:21:d5:38:
                    2d:aa:21:ef:b0:2d:dd:e7:25:59:d2:db:ad:0e:8f:
                    a9:4d:62:26:7b:cb:f0:80:06:2c:4c:9a:b9:ce:5a:
                    38:af:df:d4:5a:60:44:9d:89:a9:7d:87:13:0c:0f:
                    3f:00:1f:37:df:92:8d:59:37:79:ad:d7:22:25:d1:
                    fd:15:a4:97:67:2a:91:b1:d0:2d:f5:4f:a9:f3:19:
                    95:e5:a5:81:71:b6:a4:8a:9f:f3:ab:79:8d:2d:41:
                    4e:b1:a8:f9:bf:f5:59:6b:73:1b:d0:b1:83:af:75:
                    45:94:d8:77:0c:69:4a:f6:40:12:42:6e:3c:0c:1a:
                    ab:10:04:45:30:31:b8:ec:1a:e7:20:83:9b:56:bb:
                    d7:aa:b9:15:38:c1:97:4f:f4:01:bb:67:b4:78:4e:
                    9f:5c:96:11:35:39:09:04:5b:ce:90:92:a7:a4:11:
                    06:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:11:53:E0:EC:B3:53:E1:7A:71:50:90:F9:48:96:96:70:EC:82:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cea122a8-c512-38e8-9d32-3a24d3f89c6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:f8:5d:12:bb:04:02:5b:ab:0a:ca:44:8b:ba:de:bd:4d:68:
         b7:8e:f7:7a:09:bb:12:44:64:1c:1b:bf:90:54:cb:99:f7:b3:
         88:61:71:41:af:46:00:f7:2e:8a:68:96:be:92:bb:dd:2f:bf:
         81:00:41:85:5c:9c:df:34:9d:59:a2:82:45:8d:9b:59:98:e1:
         1f:e9:1f:2c:f0:00:c5:f8:82:54:15:c7:95:fe:6d:f4:c9:ce:
         d3:23:ef:92:cd:4d:3b:55:f5:29:dc:1b:20:dc:00:57:ee:2f:
         e3:43:8a:b4:76:6e:33:11:82:48:13:a0:ab:1d:ea:6a:fc:6d:
         96:24:64:1a:18:bb:e5:03:32:59:cb:b2:38:c6:bd:ce:d7:54:
         57:eb:bf:b4:b7:61:88:95:90:da:2c:db:e5:72:9c:24:e4:3c:
         3d:37:03:40:70:0b:5a:a1:e3:d3:85:fb:cf:c3:f0:c9:0e:24:
         7b:4c:cc:e2:89:d7:43:f7:c6:3b:31:16:36:2b:9e:17:cc:81:
         ea:b5:9b:1d:d4:39:21:90:c0:3a:92:ae:3c:47:47:7d:ea:d7:
         53:af:9f:73:8f:a5:6b:74:bf:4f:88:8b:90:70:4b:0b:8c:ac:
         fd:6c:a8:0e:c7:ab:5b:44:71:0f:83:a3:84:fe:f7:ac:fe:96:
         13:7b:77:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:59 2025 by rpki-client