Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/eee9a1cc-67f2-364e-9f13-3dc6866f87dd.roa
File:                     eee9a1cc-67f2-364e-9f13-3dc6866f87dd.roa (raw, json)
Hash identifier:          Zl8dBETCrXwJZg4u5zwPJI4noxUkzUr81sGiBW34Tp4=
Subject key identifier:   59:8E:30:6B:3D:35:BB:F1:0C:A0:E9:65:4A:28:EE:C3:5E:73:45:55
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285849244E781F0D90314C44995580
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/eee9a1cc-67f2-364e-9f13-3dc6866f87dd.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     16904
IP address blocks:        209.237.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:78:1f:0d:90:31:4c:44:99:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=cd44c0f1-9083-4a6f-9337-0e9dcdee08bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:33:f9:6d:3c:26:2c:9a:dc:e7:61:69:88:3f:
                    47:24:b1:0e:cd:ba:51:f5:be:a2:76:3f:b2:13:72:
                    ea:2a:7a:67:bf:3d:70:9c:10:b2:18:78:0e:9b:f3:
                    3d:cc:3f:00:df:76:ac:03:ba:12:c8:46:1e:d1:54:
                    0c:ff:f0:4e:84:d6:77:1c:32:ac:e7:e7:99:19:49:
                    0b:cd:4e:c6:84:2c:14:e6:82:22:12:6a:87:bf:2f:
                    b6:0b:17:24:a4:60:af:1d:5a:4e:ad:dc:31:cb:99:
                    c3:4e:4d:a7:71:63:67:f3:7b:1c:33:4d:47:3c:93:
                    34:9e:60:8e:3f:78:e0:4b:b9:51:72:a7:89:cd:46:
                    c5:c4:88:65:e8:2b:dc:d2:5e:ae:83:b2:48:08:4b:
                    8a:16:15:ea:f9:f0:28:79:4a:0c:39:61:6f:10:32:
                    a7:03:3d:a9:c2:2e:50:cf:2a:48:49:4f:05:be:2d:
                    6a:8a:ea:0c:35:2b:0f:d9:da:96:d0:94:cd:55:9a:
                    20:8a:58:08:7d:af:bd:40:5a:5a:47:65:ee:5c:c1:
                    ee:b1:71:02:b9:cc:18:67:ad:91:67:57:4d:89:5c:
                    1c:80:cc:15:f5:19:16:c2:fa:c9:53:f8:45:fd:24:
                    63:cc:89:e0:a3:3b:a8:e4:7f:7d:12:88:02:b2:76:
                    49:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8E:30:6B:3D:35:BB:F1:0C:A0:E9:65:4A:28:EE:C3:5E:73:45:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/eee9a1cc-67f2-364e-9f13-3dc6866f87dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d3:5f:45:56:53:f0:83:35:bc:78:2a:3b:cf:1a:42:f4:52:
         9e:f2:3f:99:d5:4f:0c:8e:82:90:62:eb:73:c1:5a:24:fb:12:
         8b:0f:01:39:3d:09:82:15:1e:ca:84:be:40:79:1e:80:87:98:
         cf:b1:38:e3:82:58:dd:87:07:82:74:7c:33:ec:67:e9:d7:36:
         60:dc:f6:92:53:54:c9:99:a6:85:2f:46:de:d6:7a:47:20:bf:
         0e:40:e1:4b:5c:e4:c7:d3:cc:e6:7e:2b:b5:33:c3:74:38:69:
         a2:9a:bf:55:a6:6b:95:13:51:ff:b6:e2:a1:e0:de:3d:a4:9f:
         db:5a:dc:12:86:f4:51:6a:c1:a4:36:d9:64:78:c5:99:84:c9:
         42:2b:4a:a5:68:ac:70:9e:4b:40:9e:5c:ff:6d:99:e7:53:2a:
         5b:9d:3a:9a:59:75:2c:c3:45:c3:7a:72:e0:ef:04:e5:c7:dd:
         42:38:70:bd:28:06:d4:7d:54:ff:cb:d6:ad:e9:95:93:a3:c9:
         56:da:63:54:2a:93:de:3f:49:82:15:71:9e:9a:15:af:8a:94:
         2c:bf:67:f9:81:20:10:9a:98:95:8f:eb:4c:42:27:16:d7:d5:
         44:de:d8:be:19:37:2a:07:29:33:f2:44:3b:ab:7d:a6:fd:72:
         ee:f3:8e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:07:04 2025 by rpki-client