Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0e8c18ad-4f4a-371a-8120-974a5bc06273.roa
File:                     0e8c18ad-4f4a-371a-8120-974a5bc06273.roa (raw, json)
Hash identifier:          glEBxUJbqUhkFy9IRG6N1MRknkKZ0xVWP0cWqDPEgeU=
Subject key identifier:   D5:ED:B3:0C:D6:75:EC:19:F5:BB:96:C1:1D:EE:6A:C2:1A:85:AA:6F
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F432858490E16CBB947A13BD2B62CAC00
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0e8c18ad-4f4a-371a-8120-974a5bc06273.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     12261
IP address blocks:        137.119.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:cb:b9:47:a1:3b:d2:b6:2c:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=3b9dc006-5cc1-468c-aeea-f08505315637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:42:aa:91:2c:2a:aa:dc:be:f3:f7:38:43:
                    de:17:4a:c5:e9:23:bb:2f:75:9f:4a:82:ad:f2:2c:
                    32:1f:84:1e:dd:32:1d:28:9e:8d:7b:1f:04:b1:f4:
                    48:9f:b8:62:fe:17:2a:0f:ee:f1:08:d7:e1:f5:42:
                    41:3a:67:34:bd:f3:61:4f:b7:e6:93:ff:39:d8:10:
                    03:a3:18:5f:d4:1c:66:f8:0e:f5:e4:84:81:cb:5d:
                    06:9b:a4:f3:00:ce:55:dd:41:97:6b:57:a5:b1:99:
                    9f:7c:63:2d:ce:e8:91:56:50:4c:7c:52:3a:48:bd:
                    d5:f4:e2:80:85:bd:0d:09:6d:15:27:8a:6e:7e:fa:
                    e4:72:eb:ab:ed:b4:b0:7f:82:20:8c:db:4c:45:b6:
                    12:23:8b:88:ff:68:8e:8b:11:ba:ce:82:df:68:3a:
                    ac:57:ad:50:97:e3:89:e5:6c:83:ee:0b:c5:74:05:
                    1f:f2:a9:32:37:0b:ba:05:2f:fa:a4:f2:8b:6f:95:
                    c4:d5:19:09:99:45:55:27:43:16:94:3f:6c:85:4f:
                    e3:10:13:1d:81:b1:1b:02:d6:c2:3d:99:69:1c:72:
                    89:28:2d:f6:b9:91:e6:80:38:7d:4c:d9:59:4c:03:
                    af:2f:8c:85:8c:4b:da:38:7c:59:76:59:d4:09:ed:
                    b6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:ED:B3:0C:D6:75:EC:19:F5:BB:96:C1:1D:EE:6A:C2:1A:85:AA:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0e8c18ad-4f4a-371a-8120-974a5bc06273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.119.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:31:cd:0d:ab:b2:59:bf:dc:44:95:13:84:93:20:22:2c:e3:
         b5:e6:3f:db:ad:63:0b:d2:04:3d:d5:46:42:49:11:d0:5b:0f:
         6a:53:27:ae:f6:7b:5d:f7:da:9f:ff:1e:18:c4:4c:1c:90:a6:
         e9:56:b4:2f:c9:c5:a0:50:2d:f2:1b:28:5f:35:4c:0c:ae:84:
         51:65:45:62:d3:6d:d8:9d:36:d3:d2:95:67:3d:4d:d7:16:af:
         5c:4a:e0:f3:a9:5c:86:c9:f7:60:b2:eb:b5:30:0b:82:02:6b:
         a3:eb:68:93:e4:ff:d4:6a:57:4a:57:e5:8d:27:b1:b3:33:ae:
         7a:80:0a:dc:65:f6:bb:e1:84:6f:25:e0:c9:c5:a8:28:19:06:
         a2:ed:8c:5c:6a:43:0d:93:31:f8:9f:63:2a:9c:8a:65:35:6c:
         a8:f0:77:c7:2e:03:b8:33:cd:e9:27:a1:27:9c:70:5a:2a:ab:
         1f:ad:fd:81:2b:fd:bd:1e:6b:55:89:bd:62:22:b3:d7:06:7f:
         8d:c5:57:5d:f4:6e:cd:8b:64:05:f7:7b:ac:15:5b:0b:5d:ad:
         0c:4a:38:0d:32:12:aa:49:8a:61:fe:25:f9:c7:14:bf:3d:f4:
         fc:5a:41:2f:0c:94:be:be:93:6c:b9:08:e2:3e:c4:f0:f6:d0:
         2d:25:c3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:19:49 2025 by rpki-client