Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/0896614d-1a16-3f6a-8e28-7d29222fe1d5.roa
File:                     0896614d-1a16-3f6a-8e28-7d29222fe1d5.roa (raw, json)
Hash identifier:          QYNGudo6jaDP8S/RabJniY9r3MepI8P5WEIe1mEqO4E=
Subject key identifier:   D8:33:CE:8A:E4:EB:6C:FC:1A:66:1B:85:AE:A6:7D:0E:0B:89:B0:8C
Certificate issuer:       /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Certificate serial:       010D0C9F432858490881705C2291A22531F5D580
Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/0896614d-1a16-3f6a-8e28-7d29222fe1d5.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     11659
IP address blocks:        169.147.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:70:5c:22:91:a2:25:31:f5:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=c909a35d-b064-412a-9547-91795f945e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:df:1b:6d:c4:c8:3a:e6:c3:4f:88:9a:69:de:
                    c3:38:01:52:cf:09:e8:f1:f7:7e:3a:fb:fc:12:25:
                    77:e9:18:e0:4d:52:55:07:f0:c5:7e:df:d1:e9:2e:
                    cd:57:e4:5e:46:fb:cc:68:70:83:cd:1a:d1:92:11:
                    32:97:77:6a:fc:78:c1:6b:b8:5c:5d:3b:b9:cf:f2:
                    53:c0:25:f5:5e:80:f6:25:36:29:a0:9f:8f:ab:e7:
                    66:df:ad:a1:b0:f0:44:5c:57:2e:65:e5:9c:bd:41:
                    d2:94:00:b8:8e:dd:33:9a:2f:96:4f:eb:58:b1:bb:
                    4f:c6:03:bb:28:c6:8d:66:d3:c2:b4:eb:8e:34:9b:
                    c4:ba:39:3f:ac:20:f6:e1:fc:18:27:f5:60:1f:ba:
                    e0:72:89:46:7a:04:8e:62:c5:cd:4d:ad:9c:19:4e:
                    36:a7:00:70:ae:1f:c2:5c:ca:9e:e3:fc:20:bf:52:
                    c0:28:06:3b:f8:ea:40:19:ac:74:af:99:b3:da:5c:
                    c2:e6:4f:55:94:39:ab:4e:d4:69:c2:27:dd:da:82:
                    24:b1:73:44:c6:d7:c7:33:3a:ca:77:21:70:c8:b6:
                    89:1f:99:ff:c6:97:09:3f:a5:8f:f5:f2:df:d5:96:
                    3d:69:8a:0a:92:9a:f7:52:2d:82:43:67:1d:98:bf:
                    b6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:33:CE:8A:E4:EB:6C:FC:1A:66:1B:85:AE:A6:7D:0E:0B:89:B0:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/0896614d-1a16-3f6a-8e28-7d29222fe1d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl

            X509v3 Authority Key Identifier:
                keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.147.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:91:e6:58:e9:42:52:b8:0f:bc:b4:cf:bb:36:b3:b1:ed:52:
         0e:b6:ec:24:4a:b9:88:a4:15:35:ac:f2:62:1a:34:11:55:c4:
         47:51:62:f9:f2:52:dd:db:3f:2c:66:2c:3f:d9:81:73:62:2c:
         76:e7:44:55:75:ab:1a:25:19:3e:45:de:1c:34:35:1d:cb:58:
         6e:6f:67:81:70:4f:1c:0b:54:99:a2:31:48:30:b3:d6:1b:eb:
         cf:26:34:65:96:57:51:63:75:c1:b2:eb:fa:87:aa:c4:f5:c1:
         fc:e8:a3:a5:e8:21:b4:d9:0e:ae:14:55:9f:ed:21:28:a7:99:
         b5:05:b4:48:8b:55:59:95:c8:a7:ba:ef:6b:00:77:6e:5a:1e:
         a3:5a:ed:88:34:46:72:ad:1e:7b:02:de:26:ae:1c:4d:0a:20:
         ff:d5:d8:47:e5:ef:65:2a:d4:4f:5e:5d:92:d2:b9:61:0a:c3:
         d6:ea:eb:ce:2f:58:bb:36:e8:22:59:8b:be:b5:de:d3:14:f3:
         6c:71:31:52:3d:e5:52:eb:4c:ba:bf:c7:8d:aa:d7:f1:d4:46:
         f5:fe:ac:a9:a7:b1:0c:a0:56:32:ed:4c:8c:83:8d:64:8f:4a:
         31:45:e0:fa:56:39:39:a1:eb:09:c6:e2:53:3a:ca:d9:b1:cf:
         ec:eb:66:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:41:31 2025 by rpki-client