Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/bb2f14dc-a3ff-3363-90ef-6771a8a01593.roa
File:                     bb2f14dc-a3ff-3363-90ef-6771a8a01593.roa (raw, json)
Hash identifier:          YJjrZLBAQLojtnEdxEyCr/nE60j/p99mwOfuY2r+1EE=
Subject key identifier:   DB:89:F8:B8:1B:E6:30:CF:6C:FC:D5:A6:94:24:E0:BA:A3:1E:05:60
Certificate issuer:       /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial:       010D0C9F43285848DA70FD0650551EABF8CFC4C0
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/bb2f14dc-a3ff-3363-90ef-6771a8a01593.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     19137
IP address blocks:        208.70.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:fd:06:50:55:1e:ab:f8:cf:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=b603a081-ecae-419e-ad10-fd13528a5d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:85:a8:18:5f:a5:3f:46:e2:94:8b:ab:b1:
                    36:7e:7b:89:0d:e0:4d:f0:19:c6:11:4a:99:ef:ab:
                    76:37:ac:ee:bf:4b:f0:f9:36:79:1b:6c:f7:13:60:
                    75:2d:89:08:39:2e:59:79:cc:79:12:49:b0:f3:79:
                    8d:96:38:80:58:26:c2:9f:77:8f:31:4c:d1:5b:ad:
                    3b:03:67:5a:2c:96:81:7b:b2:51:c3:49:f2:cd:59:
                    d5:a5:f4:f6:9e:aa:24:41:62:02:45:ce:9a:3c:8b:
                    b1:ad:45:19:65:8c:ad:80:ed:0d:fc:54:67:d6:01:
                    7c:ab:84:64:a5:28:2f:50:13:f9:62:4e:2e:32:d9:
                    a0:9d:21:0f:5d:7e:b4:1b:a5:f2:66:00:b7:15:dd:
                    d1:00:55:cb:dc:39:45:c5:22:28:6d:e4:f8:81:33:
                    24:3e:0b:13:22:49:09:cb:ca:15:6d:f9:dc:c1:db:
                    78:6c:81:ea:eb:1e:73:91:7b:9a:67:be:26:9e:1a:
                    36:69:54:15:bd:9c:49:70:34:f7:b9:fd:72:db:a7:
                    c1:c4:03:4c:d6:01:a4:64:29:b1:f5:69:81:fd:51:
                    54:49:2f:1b:d9:c3:1c:1e:ad:ca:e8:32:7a:ad:ab:
                    2e:5b:bb:41:05:69:51:2a:b8:9c:9b:2a:15:45:35:
                    26:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:89:F8:B8:1B:E6:30:CF:6C:FC:D5:A6:94:24:E0:BA:A3:1E:05:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/bb2f14dc-a3ff-3363-90ef-6771a8a01593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:05:d1:9a:07:4a:e1:f1:02:c5:a0:56:27:7a:29:b4:8c:4d:
         65:e4:31:03:ae:74:ca:52:52:4c:22:61:1d:b8:ec:34:fd:af:
         87:b8:22:81:22:8d:ff:e0:74:9d:01:67:18:f7:2b:a7:f5:a8:
         c6:b3:71:e6:f5:5a:54:d8:10:d0:5e:d0:20:d3:d4:e4:56:60:
         f5:bd:8c:5b:02:3f:db:27:dd:31:11:5a:d5:76:f5:7e:ac:f1:
         e7:d3:21:7c:7e:fe:6d:cd:dc:3b:30:ef:36:e9:87:25:12:b4:
         6b:c3:5c:de:c4:d7:f1:f3:17:b1:08:58:e2:0b:4b:49:37:2c:
         ca:ea:2f:32:ed:c9:da:7b:81:00:69:48:44:db:a3:1d:5d:8c:
         6a:4f:71:fc:f7:8e:e6:2b:7d:e3:c5:1c:1d:75:50:44:f5:13:
         2c:78:96:d3:fa:9e:86:d9:c1:9f:1c:b0:9a:a1:e8:d2:8e:85:
         17:d7:71:4c:51:6e:a2:26:d6:c8:e4:c9:2f:0c:45:ad:d7:d8:
         23:da:6b:c6:3b:0a:15:8e:e8:81:8d:a3:ed:f9:72:bc:0a:26:
         fe:69:94:0c:44:35:6d:43:61:67:17:b4:c1:17:91:13:1a:17:
         77:be:07:10:bd:1d:38:21:45:21:de:3a:86:62:1d:de:f1:6c:
         88:52:77:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:53 2025 by rpki-client