Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d489ae39-5520-30da-9134-1add845ade35.roa
File:                     d489ae39-5520-30da-9134-1add845ade35.roa (raw, json)
Hash identifier:          uWG7svCxG4cokSHIBNeoxLmNePrN/jBZ2ZKLgJQwrAg=
Subject key identifier:   E8:5B:C8:43:76:1E:EC:D8:E7:36:1A:34:5E:B3:28:2B:ED:9A:1A:9B
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848F926848CE49CF067558635C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d489ae39-5520-30da-9134-1add845ade35.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        208.185.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:84:8c:e4:9c:f0:67:55:86:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=7cc2df5a-224e-4cdb-b190-d2cc00cb1c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9a:a7:59:62:3b:36:19:2b:a2:a0:2e:41:73:
                    a6:74:11:21:ab:90:20:50:cc:d7:7e:79:cf:e8:64:
                    a3:22:23:26:3a:28:47:f5:f3:45:17:bb:fb:1d:7d:
                    d5:d4:65:c1:55:b3:52:7b:70:35:1c:47:7a:21:31:
                    d6:71:50:ad:7d:83:46:31:96:2d:93:fd:62:c3:66:
                    b8:55:62:10:3f:60:49:18:a9:01:d8:7e:ba:87:40:
                    56:33:b5:3d:1a:d7:cc:39:9d:15:1b:57:4c:cc:a1:
                    af:39:fa:5b:c4:d3:5e:0d:ee:eb:64:32:32:15:41:
                    c9:4e:60:78:44:b6:f8:c4:8e:cc:62:0a:e8:f8:ae:
                    74:3e:71:45:90:14:d9:e8:2b:71:4d:fe:ba:76:0c:
                    94:1c:01:b0:b4:5e:62:a4:b7:8b:c2:98:66:3f:fe:
                    66:e8:76:19:d1:86:3e:96:cf:ad:85:e9:88:e0:46:
                    66:f3:24:3d:39:75:91:23:03:d0:42:98:5a:5a:f6:
                    5a:0b:c0:4a:60:1b:47:dd:3f:f6:5a:92:0e:32:b6:
                    83:04:93:6f:55:7e:29:af:4e:39:b1:05:9c:dd:35:
                    12:f2:b1:8f:69:36:08:7f:84:be:27:a5:1d:32:67:
                    d3:47:1a:3a:a9:da:1c:46:9b:41:0e:ec:95:86:f8:
                    78:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5B:C8:43:76:1E:EC:D8:E7:36:1A:34:5E:B3:28:2B:ED:9A:1A:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d489ae39-5520-30da-9134-1add845ade35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e6:99:c5:65:8d:a5:5f:86:16:51:30:27:0c:41:84:04:09:
         50:de:4b:8f:ac:9a:91:8b:3a:04:fb:40:21:b9:81:5b:06:aa:
         ea:0c:51:00:c9:05:39:f7:43:a1:9a:f4:9f:ea:c8:42:45:67:
         41:0c:11:04:7d:a1:7c:6f:eb:d6:56:3a:e5:d1:b2:b8:6b:59:
         68:b5:eb:c1:28:9c:d8:f0:90:5e:e2:42:76:33:a6:d5:24:0f:
         6a:0e:7d:8c:50:ce:ea:5d:22:9b:86:3f:ed:fd:e0:e6:37:ae:
         9a:a4:d3:52:f4:4b:9e:55:2f:32:c3:79:23:be:41:c2:ef:f9:
         5d:31:fa:26:0d:47:be:6f:92:c1:c0:2f:46:46:6a:7f:e4:46:
         56:de:e3:10:34:72:48:c3:ce:c0:3c:47:65:07:3b:fa:01:b6:
         4f:b4:d4:ac:e6:e2:d7:4a:d8:54:f8:dc:0d:39:d2:97:ce:f3:
         8f:c6:8d:d4:56:2e:0b:aa:a6:66:a3:94:c7:b4:1b:9a:70:b7:
         75:36:11:27:5e:96:53:77:aa:f4:2a:d4:23:57:7c:ce:0f:cb:
         d8:d8:b7:fa:5d:65:3c:c4:a8:53:11:92:54:d4:c9:32:63:bb:
         3b:12:b2:65:59:e7:e2:be:43:66:db:4e:6e:58:0a:7f:26:c7:
         98:97:69:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:41:51 2025 by rpki-client