Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa
File:                     5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa (raw, json)
Hash identifier:          f+Cg1qtUTOjUPdJjWtQeseExGgJsoywV+XmXAbzi2Yw=
Subject key identifier:   B0:75:C6:90:F7:D1:FF:13:A5:44:D1:F8:BE:58:B9:43:B1:CA:E2:1C
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F43285848B6261E6DF3CDED5F16742840
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     198949
IP address blocks:        192.135.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:1e:6d:f3:cd:ed:5f:16:74:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=cebae127-cf98-4eff-ba5f-dcabad5122b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3f:ba:bb:0a:36:d0:51:c8:9e:64:8d:a1:37:
                    f5:6f:27:5a:9d:af:2e:a2:96:6f:21:90:95:2f:30:
                    40:37:85:66:35:71:48:4b:57:57:55:77:e7:59:dd:
                    61:b7:59:7f:b4:93:d8:e7:cb:c1:33:9e:b0:64:01:
                    61:b4:de:77:65:3c:5e:c9:b8:a1:0e:4a:b3:75:97:
                    97:01:b4:f5:fb:15:28:a7:7c:b9:0b:09:ca:04:c6:
                    a5:12:af:d2:d1:dd:f7:9c:fb:66:58:b9:06:06:67:
                    39:be:e4:0f:37:14:ba:91:22:8f:3d:f5:bf:00:b7:
                    38:14:c8:a5:ff:9b:90:50:87:b1:47:e0:a0:02:f7:
                    c7:ef:cf:e6:01:82:02:57:be:59:e8:23:b2:59:06:
                    c3:84:68:94:91:d1:f3:cf:bf:af:57:f1:ab:63:d5:
                    56:da:13:94:1c:85:29:0f:af:9f:5b:d8:0a:a7:c0:
                    1f:f1:b8:0b:84:e8:ca:89:f0:84:d2:f0:88:1b:a9:
                    44:41:0d:4c:3c:74:d3:0c:3d:42:f7:ab:cc:b1:a0:
                    30:e0:35:42:a9:07:bf:ee:a2:8d:d8:c1:bd:c5:00:
                    86:c7:8d:b1:ff:2e:10:2a:00:58:9f:a1:9a:79:95:
                    3e:d0:5c:b2:5c:97:bf:ac:84:da:0f:89:b5:81:81:
                    9f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:75:C6:90:F7:D1:FF:13:A5:44:D1:F8:BE:58:B9:43:B1:CA:E2:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:3d:f7:4d:1e:02:ef:11:45:3c:17:32:c8:d7:55:51:9b:d6:
         f6:67:1f:df:62:10:d3:4d:9c:cf:5c:ab:5e:08:a1:86:ea:99:
         d9:93:3b:a1:b1:b7:b1:26:b7:33:2f:0c:56:0d:60:6c:e2:bf:
         06:da:e9:88:c1:7f:e3:71:f2:0d:28:40:d1:d6:db:52:32:e9:
         c6:44:b9:cb:20:50:e9:5c:9e:7e:97:d1:f8:52:c5:52:cc:d2:
         f6:e7:0a:69:43:4b:19:33:44:00:d9:dc:50:5c:b1:cf:e2:1a:
         4a:87:c3:8c:74:35:02:76:57:02:92:f6:d0:e0:ea:06:2b:09:
         ed:81:cf:c3:ab:e2:8c:63:70:a1:bb:15:55:84:3a:d9:de:e4:
         6d:be:1f:e1:bf:65:f3:2f:47:02:ba:1e:c6:d4:26:7f:1f:af:
         8c:1f:7f:70:85:52:ee:31:4a:ac:1c:05:8a:ab:fa:fd:36:54:
         18:9f:9e:d2:d1:96:a2:ba:29:e6:1e:6d:d9:31:98:51:ea:f1:
         76:47:a1:2d:82:18:59:8f:a8:e3:e5:ce:9b:5d:e9:63:ed:cc:
         65:df:a7:48:cb:8f:9d:2d:19:a9:95:a4:a3:39:e2:84:11:57:
         a7:e1:1c:da:76:a2:5c:71:fd:a6:c8:bb:ef:6a:9b:02:81:dd:
         8a:f7:28:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:37 2025 by rpki-client