Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/ab0ebfa1-0df2-37d0-b376-8b5936cb300f.roa
File:                     ab0ebfa1-0df2-37d0-b376-8b5936cb300f.roa (raw, json)
Hash identifier:          ejp2yvrevkgFbJQlMPMqxz4CiieZ9cR8z+H2wYlN/Z4=
Subject key identifier:   8E:6A:1A:E1:95:6B:F7:C6:92:0D:F9:7A:48:9E:D8:E6:24:1A:16:49
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F432858496A19A8F9DEDA1E29285F9CF0
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/ab0ebfa1-0df2-37d0-b376-8b5936cb300f.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     25697
IP address blocks:        209.151.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:a8:f9:de:da:1e:29:28:5f:9c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=49558084-de28-4f94-8975-a8d0105dcd6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:93:bf:a9:8b:da:5d:bc:46:c5:a4:bb:aa:
                    f1:32:51:e6:49:9c:cc:d0:00:45:f3:e8:10:41:fa:
                    b4:84:af:d8:f5:7e:c6:cd:4d:04:9b:7c:4b:aa:89:
                    8c:1e:93:93:eb:e5:ff:86:3d:ab:2f:42:2d:16:3d:
                    1c:24:f5:33:e5:ad:e3:a7:05:2b:5a:98:a2:1b:bb:
                    07:64:15:76:27:b2:be:af:58:29:f7:5b:4e:b8:65:
                    9b:ae:c4:3c:55:e2:99:ff:c0:cb:a7:16:fa:87:61:
                    0e:46:29:85:36:8b:28:f6:9c:ee:c6:c5:39:79:9b:
                    25:a7:4e:cb:24:2d:0a:bf:41:38:3a:a6:b7:6b:0f:
                    e7:12:3a:19:af:0f:d7:4d:14:3e:55:25:a2:b6:e8:
                    9d:2a:74:95:f4:3a:f6:58:f0:7e:ac:15:71:5e:c2:
                    cf:e2:b3:39:e2:0c:bd:21:27:8e:8e:fa:af:c9:60:
                    78:69:8c:c1:99:39:01:6c:e6:35:d0:fc:b6:a6:e1:
                    46:1f:a4:c5:fc:ce:a4:56:8d:fe:09:e5:ff:91:28:
                    4f:95:57:7f:c6:96:52:e0:50:72:b0:ca:f9:bc:f9:
                    c4:70:1d:72:7c:07:f0:bd:84:5c:32:e1:73:6d:fc:
                    c8:de:56:72:1b:9d:62:4e:6e:94:8d:74:c5:43:1d:
                    27:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6A:1A:E1:95:6B:F7:C6:92:0D:F9:7A:48:9E:D8:E6:24:1A:16:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/ab0ebfa1-0df2-37d0-b376-8b5936cb300f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:97:72:f6:d2:d6:96:64:e3:59:cd:f9:cc:e8:4d:f8:c5:64:
         12:80:ff:57:b7:d9:92:7d:71:cf:f3:8b:ec:20:27:ed:e1:6b:
         3f:60:8a:81:be:ae:40:b6:05:8f:1b:bd:48:6a:f0:da:86:82:
         2b:aa:ec:f0:fd:7c:4d:38:34:8b:b5:05:9b:62:54:d5:20:53:
         c7:a0:7e:70:75:a2:32:f7:0f:5c:35:24:fa:a8:e8:72:cc:dd:
         d2:59:69:57:c5:61:6a:0a:78:01:3e:4b:61:78:2e:16:9e:6e:
         3d:b9:a6:bb:a5:f5:86:19:2f:3f:b1:85:03:7d:8e:ef:e0:8e:
         5f:8d:88:68:e4:a5:f2:fd:09:be:5b:de:33:df:da:6d:97:e6:
         8c:21:cd:03:5f:0b:4f:be:05:24:47:83:96:01:7c:ad:77:3c:
         c4:08:6b:06:e3:fa:3c:e5:a3:30:53:e0:45:56:88:59:dd:86:
         7b:ad:38:13:57:ce:16:f7:43:86:3c:6d:27:68:f4:14:90:84:
         66:9f:04:09:ce:b4:d9:49:ee:62:e2:97:bc:92:a0:ad:22:57:
         02:3b:5c:fc:13:f2:bb:38:2b:42:37:22:7c:0a:8d:33:e0:d5:
         ce:21:03:86:a9:7f:ef:50:9f:02:f1:91:9c:f8:a4:09:c6:2f:
         87:50:4d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:11:12 2025 by rpki-client