Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e134cc5-1e78-4920-b929-62214080c938/b721eeae-8d8f-39bd-85a1-5061f7cda70d.roa
File:                     b721eeae-8d8f-39bd-85a1-5061f7cda70d.roa (raw, json)
Hash identifier:          vSOoBPbqGllK9CPVGNhlVASIWzQHJih48hAKXfdhM2o=
Subject key identifier:   9C:73:EB:6C:A1:94:B4:8C:4C:1C:B3:B8:38:1A:89:AB:7C:90:A8:02
Certificate issuer:       /CN=8e134cc5-1e78-4920-b929-62214080c938
Certificate serial:       010D0C9F432858491D7188C1863775B92B082A80
Authority key identifier: 42:A6:F6:E5:AA:AA:D5:B2:75:45:5F:2F:D7:FF:BB:CF:91:E0:91:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e134cc5-1e78-4920-b929-62214080c938.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e134cc5-1e78-4920-b929-62214080c938/b721eeae-8d8f-39bd-85a1-5061f7cda70d.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     903
IP address blocks:        209.112.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e134cc5-1e78-4920-b929-62214080c938/8e134cc5-1e78-4920-b929-62214080c938.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e134cc5-1e78-4920-b929-62214080c938/8e134cc5-1e78-4920-b929-62214080c938.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e134cc5-1e78-4920-b929-62214080c938.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:88:c1:86:37:75:b9:2b:08:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e134cc5-1e78-4920-b929-62214080c938
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=9ecde444-22f8-45d0-b3c8-54c33976ac6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:b2:0c:6b:69:d7:6f:a9:b9:54:b9:6b:09:
                    56:00:ed:31:68:61:a7:0d:5f:24:bc:86:f8:1b:c9:
                    d8:23:92:e1:e4:3c:3c:a6:7c:20:e6:57:d2:1c:02:
                    dc:d8:ce:65:54:15:fb:51:52:8c:43:0d:02:50:92:
                    f0:14:a2:74:48:83:52:6b:e2:71:50:db:88:fe:9d:
                    2a:58:8b:ba:9f:1d:33:9a:84:65:b3:5e:3d:4c:7f:
                    55:6c:7d:5d:bc:49:30:76:7f:be:0c:fe:8e:6b:cb:
                    6d:1d:17:e1:73:d9:81:27:39:ff:17:de:cc:f6:1f:
                    9c:46:8f:dd:67:0c:9e:ca:ab:8d:f6:91:1b:b1:5c:
                    f1:99:a6:88:e1:0d:58:33:5f:44:8d:ed:eb:8c:88:
                    a7:52:37:9f:e7:9e:ec:b9:91:a5:b9:71:fa:8a:d6:
                    4c:75:33:7c:f2:d2:27:05:95:f0:a5:95:91:8c:46:
                    60:b8:89:14:21:44:03:59:55:38:6c:e8:0d:06:58:
                    8a:47:00:c9:b7:04:df:c4:f0:07:9f:4b:79:0f:21:
                    a1:5b:b9:13:b6:f6:2d:69:c6:0c:ab:b8:eb:ae:8b:
                    c2:6b:d4:26:27:99:57:f2:76:52:70:80:a9:57:eb:
                    a0:e8:40:e3:f6:7f:d6:ac:84:16:c4:5c:98:a9:2b:
                    e3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:73:EB:6C:A1:94:B4:8C:4C:1C:B3:B8:38:1A:89:AB:7C:90:A8:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e134cc5-1e78-4920-b929-62214080c938/b721eeae-8d8f-39bd-85a1-5061f7cda70d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e134cc5-1e78-4920-b929-62214080c938/8e134cc5-1e78-4920-b929-62214080c938.crl

            X509v3 Authority Key Identifier:
                keyid:42:A6:F6:E5:AA:AA:D5:B2:75:45:5F:2F:D7:FF:BB:CF:91:E0:91:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e134cc5-1e78-4920-b929-62214080c938.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:32:1b:03:d4:68:49:28:db:d7:b3:df:4c:4d:aa:3e:fb:d0:
         8e:13:70:14:58:aa:fc:12:fb:5c:01:2c:b4:e0:c7:a7:75:51:
         76:63:20:af:22:cc:8e:62:0b:37:75:7e:e9:04:c2:73:59:8b:
         af:21:af:e2:ef:a3:b7:4c:43:05:98:3e:56:fa:54:13:99:e7:
         fb:e5:8c:75:76:3e:5d:70:cf:7c:d2:f8:a4:42:3d:55:51:c9:
         24:cf:08:98:2a:a5:75:99:51:70:a2:73:aa:7b:2d:0a:fe:7a:
         09:1f:e7:cd:0a:c1:c3:1e:d4:21:13:6b:74:aa:c0:01:a3:85:
         e7:73:52:15:db:0f:bb:b4:fa:19:a4:d9:a2:fe:03:73:f9:0c:
         96:80:1e:2b:a9:4a:27:e3:68:fa:5e:b1:f4:72:e1:cc:7f:a3:
         66:1f:91:dd:e5:5c:9b:cc:2c:1c:28:22:b0:e1:51:fd:00:5e:
         a6:7a:7c:3a:65:23:dd:2a:1b:63:60:3b:f9:e6:bd:fd:cf:e7:
         db:1a:c6:bd:4c:d5:c0:4e:5f:20:fd:4f:49:d4:bc:70:01:d8:
         02:9b:24:c9:87:db:bc:8e:04:2e:f2:4b:08:bb:ec:1e:56:73:
         ca:51:e4:00:88:61:a7:8d:17:60:0a:1b:49:73:6c:6b:38:6c:
         b6:9a:56:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:54 2025 by rpki-client