Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/44f98da8-316e-3e2e-a620-17a85c3d1158.roa
File:                     44f98da8-316e-3e2e-a620-17a85c3d1158.roa (raw, json)
Hash identifier:          7BkMLhxgQ5DJqwc13KUwosnPJRF0r9IKy6hvOhM1FfQ=
Subject key identifier:   A0:D5:15:6A:13:B6:6C:73:97:46:E7:FB:74:50:61:27:B7:8B:15:CB
Certificate issuer:       /CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
Certificate serial:       010D0C9F43285848CB165A846F5E2A40B4DAE800
Authority key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/44f98da8-316e-3e2e-a620-17a85c3d1158.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     912
IP address blocks:        208.93.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:5a:84:6f:5e:2a:40:b4:da:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=a4fef367-0636-43c1-a6ed-6a23616dcf13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ba:a3:50:e7:c2:b4:b5:98:f3:e7:94:db:40:
                    d4:ac:d2:ff:df:31:fb:76:53:72:49:9e:5a:df:48:
                    97:a9:90:07:b0:ad:e5:68:38:e8:e1:6f:58:72:7b:
                    fb:97:21:b3:c1:2e:b8:16:d8:fb:10:90:4f:d8:80:
                    bd:03:97:dd:48:a7:e5:26:0d:13:e3:c5:25:65:22:
                    8d:b6:b0:fc:c2:b1:5f:f8:de:3a:48:f4:69:c1:ca:
                    db:eb:b7:07:65:7e:61:3e:7e:76:35:d0:60:8a:af:
                    64:3c:9e:5d:a6:70:ff:d6:80:e2:c7:5b:7b:dc:78:
                    67:15:e1:53:fb:6c:4e:29:02:33:23:ef:d1:1d:31:
                    9f:ce:7e:ac:78:c0:d2:78:43:3a:07:00:66:b3:ce:
                    5e:bd:73:e4:63:1a:17:10:4d:ee:6e:d8:63:64:4d:
                    68:10:46:8c:44:49:6c:b1:68:ec:94:e6:2b:8b:fc:
                    aa:ea:dc:08:ba:46:52:12:f9:a8:98:b0:74:e0:6e:
                    c9:ac:c2:04:f9:75:60:da:57:bb:db:03:49:a6:8e:
                    0e:e0:5a:4c:7e:ee:f2:c2:10:e9:dc:c4:2b:5d:e2:
                    a0:e2:a4:c4:ad:f2:22:b0:60:a4:b1:6f:cc:14:f8:
                    6c:68:23:13:06:c9:9f:4c:50:99:cc:c9:fe:35:e2:
                    83:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D5:15:6A:13:B6:6C:73:97:46:E7:FB:74:50:61:27:B7:8B:15:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/44f98da8-316e-3e2e-a620-17a85c3d1158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl

            X509v3 Authority Key Identifier:
                keyid:36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.93.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:c3:65:41:e2:3c:f4:77:9c:b0:cc:63:84:81:16:e3:d1:09:
         d0:36:1e:a6:69:f6:4c:61:c1:58:b0:fa:fc:98:3f:23:ce:30:
         05:0b:3e:01:b2:f6:4f:98:0b:c0:d8:63:f6:af:6b:b4:6d:a0:
         95:b2:25:db:79:44:b7:f2:de:22:54:df:70:3c:b4:47:fe:dd:
         83:90:bc:12:79:af:84:d9:41:71:8f:f9:80:e5:a4:0e:52:b9:
         31:c7:cd:ab:24:44:64:b4:01:90:c1:52:1e:3b:79:25:cc:83:
         c7:b5:fc:d5:48:8c:77:14:3c:7b:09:f1:01:75:92:90:4e:06:
         c9:0f:41:0c:70:b0:c8:d1:57:db:85:fa:75:4d:6f:54:75:54:
         a6:fb:8f:64:58:60:5f:35:e1:fb:43:e7:9b:83:e3:82:c1:b8:
         63:fe:f6:a4:2a:54:10:a7:f4:2f:a1:fc:e7:62:f3:71:45:0f:
         c8:cd:cf:47:25:fe:5e:31:6f:22:f6:cd:d7:37:b9:bc:c4:52:
         9b:fe:37:74:30:2a:4f:7c:a9:6d:57:b3:81:b1:03:1a:15:7a:
         72:77:a0:72:6f:d7:35:37:8b:e5:5c:ed:4e:ab:e7:28:ff:af:
         a2:45:a2:80:2d:e9:39:d2:c9:5c:4a:48:3e:28:18:ce:a4:be:
         de:c3:7f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:20 2025 by rpki-client