Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/99234564-a30a-38dc-9d43-b8279b2d4e62.roa
File:                     99234564-a30a-38dc-9d43-b8279b2d4e62.roa (raw, json)
Hash identifier:          PJdXO81Vfp5RGDMsZcFe36hovDxudS+s5kZ2URIlCrc=
Subject key identifier:   5F:E0:C2:2B:89:0B:78:43:38:17:CE:6A:8F:3A:7B:0D:9D:C8:4A:B8
Certificate issuer:       /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Certificate serial:       010D0C9F4328584908817080F7786CF03CE1DC20
Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/99234564-a30a-38dc-9d43-b8279b2d4e62.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     11659
IP address blocks:        169.147.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:70:80:f7:78:6c:f0:3c:e1:dc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=143652e9-cbbf-41ce-bd2e-0fca7a653e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:49:b0:bf:39:62:9f:6f:9e:8f:ae:0f:59:5b:
                    93:47:63:ff:0d:d4:06:77:b4:c2:ef:07:6c:ee:b6:
                    66:b8:39:a3:a4:59:49:4b:a4:b6:a3:0d:1b:19:f5:
                    69:7d:d6:eb:f6:15:bb:c6:a3:4e:7d:67:35:be:0f:
                    d3:5c:c3:9d:79:eb:17:cf:ea:5e:de:b9:47:45:2f:
                    ec:80:c3:77:00:3e:d0:fe:c1:9a:2b:db:86:29:1b:
                    fb:64:b8:cf:d0:99:fa:ae:79:73:bb:54:ae:de:d8:
                    67:9d:ac:f3:50:69:c5:ad:c9:3c:7b:5e:59:a2:e7:
                    d1:56:bf:2c:2c:70:50:f6:44:1a:78:5c:38:8e:a8:
                    22:bc:6b:97:64:e5:e4:5e:71:9e:ee:bc:8b:3d:97:
                    cd:df:aa:24:4b:86:db:9f:18:c7:cf:49:cb:48:f9:
                    ac:10:86:8e:24:84:83:0d:ae:c0:ce:4a:b1:b4:94:
                    5b:b7:e6:b9:52:fa:72:3c:b9:96:cc:29:b1:1a:9a:
                    f1:b5:f9:a6:71:74:ca:fb:81:8a:d7:1f:49:83:b5:
                    cd:9b:a9:1b:0d:d6:a4:61:b2:69:32:c0:14:d2:b8:
                    33:db:29:d8:ac:b6:98:ee:33:bd:e8:95:7c:b2:2f:
                    8f:7c:2c:59:ad:f2:8b:85:a5:7e:b9:b8:32:9f:68:
                    72:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E0:C2:2B:89:0B:78:43:38:17:CE:6A:8F:3A:7B:0D:9D:C8:4A:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/99234564-a30a-38dc-9d43-b8279b2d4e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl

            X509v3 Authority Key Identifier:
                keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.147.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c4:65:a9:a0:77:d6:ad:18:cc:3a:8e:a6:7c:ce:d3:b4:ff:
         bf:03:c3:46:60:ad:16:71:4e:a3:e5:98:50:7b:53:2c:0e:8a:
         a3:c4:3e:06:73:61:d2:7b:ad:b7:cc:d9:e1:81:f3:09:9e:6d:
         b0:2a:58:a0:14:65:64:4a:58:5a:85:cf:bb:0a:8d:b4:31:e9:
         3e:79:82:4a:ca:bf:31:88:9f:62:7f:9d:fa:fd:b3:49:d4:10:
         c8:ce:24:bd:ff:5b:0a:5b:f2:03:b1:86:ae:35:f7:58:37:05:
         f6:74:5a:48:f7:b1:31:f0:39:93:0c:9e:27:0d:52:09:4e:0e:
         3c:31:a8:c2:e2:b6:55:a2:f7:24:ff:a2:bc:23:4d:b0:e3:46:
         b5:b6:7e:d3:05:17:5d:8f:60:fc:ff:f5:54:3c:3a:e3:0a:8a:
         1b:d8:fc:3d:d1:8f:0c:be:6a:0d:e0:f0:92:50:b4:1f:6d:a5:
         db:34:f9:9f:9f:dc:e1:83:29:70:da:58:23:39:99:ca:82:f0:
         c7:a8:50:d9:64:48:16:eb:45:e9:e0:10:3f:29:8b:17:43:49:
         21:08:08:9c:2b:88:c2:e8:09:66:08:43:a0:68:9a:58:40:53:
         60:98:09:42:40:e8:91:db:14:4d:e9:fb:bd:1f:ae:80:c1:86:
         29:13:40:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:54:09 2025 by rpki-client