Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/a468dbe4-1f07-3dea-a4b7-e8ba030cfa27.roa
File:                     a468dbe4-1f07-3dea-a4b7-e8ba030cfa27.roa (raw, json)
Hash identifier:          psWYMZpJA1S+5/4849BcrGrjkjgBOwAyB7QeClkbhLQ=
Subject key identifier:   AA:90:20:C2:C5:25:8A:28:FC:89:5D:D6:58:30:0A:DD:F9:26:8D:CC
Certificate issuer:       /CN=16ef9480-24de-4ac2-bd6e-b8d3d5320b5d
Certificate serial:       010D0C9F432858487755D6CEFF1FCDD92A71DD00
Authority key identifier: 9E:40:FB:15:1B:25:50:97:6E:71:50:4B:D8:A5:E9:6A:9E:5E:9D:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/a468dbe4-1f07-3dea-a4b7-e8ba030cfa27.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     46253
IP address blocks:        208.94.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:d6:ce:ff:1f:cd:d9:2a:71:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ef9480-24de-4ac2-bd6e-b8d3d5320b5d
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=0742ddd9-78fd-4e5a-8e76-0cf96926922d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:3a:d5:6b:99:4e:51:81:c5:32:2f:f6:1e:
                    8d:38:58:da:3e:7f:b0:af:c0:69:57:36:c8:00:8e:
                    26:79:1d:2a:e8:0c:13:4a:c0:e3:69:8d:37:6f:8d:
                    86:3a:b4:f6:73:d4:42:61:2b:bb:4f:b3:cd:6c:62:
                    69:a8:b7:42:42:b4:51:39:1d:2e:cf:5a:72:99:8b:
                    e3:ff:2c:9f:c8:a4:2d:39:13:10:00:9e:aa:8c:19:
                    c8:e1:2e:8c:9c:8b:04:c6:78:4e:a8:98:f2:24:d0:
                    96:95:87:a4:f6:ae:41:48:d9:eb:a6:56:86:65:ce:
                    f9:ce:2e:91:99:40:d6:7e:5e:fa:b3:2f:08:b9:7e:
                    e9:2a:66:e9:ab:24:bc:cc:3b:42:ee:c2:b2:3f:54:
                    84:96:cd:46:40:e2:06:a1:b5:4b:b5:fa:ff:51:7d:
                    a7:b7:d5:45:5a:90:d8:cf:5c:b0:fc:b7:ab:44:e8:
                    f5:64:72:f2:e2:6e:66:29:f4:b2:9d:2d:b9:da:88:
                    75:92:3f:c7:d8:ac:be:e4:6f:83:67:e8:57:d9:e5:
                    82:da:ec:41:33:65:5e:20:0a:95:90:b6:56:4d:0d:
                    10:54:70:e9:40:94:60:46:97:f2:ac:1f:1e:99:be:
                    24:79:1b:6a:86:2f:01:12:e3:8c:f0:93:15:2b:63:
                    0d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:90:20:C2:C5:25:8A:28:FC:89:5D:D6:58:30:0A:DD:F9:26:8D:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/a468dbe4-1f07-3dea-a4b7-e8ba030cfa27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.crl

            X509v3 Authority Key Identifier:
                keyid:9E:40:FB:15:1B:25:50:97:6E:71:50:4B:D8:A5:E9:6A:9E:5E:9D:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:dd:c5:7e:3f:fd:b8:39:78:0d:ca:7a:6b:5d:3d:89:eb:6f:
         79:0e:17:dc:f3:c7:86:93:cb:e6:fa:a2:6c:14:ce:2b:07:ca:
         04:a8:aa:d9:33:2a:62:75:6d:59:b3:11:74:07:f3:67:64:00:
         f7:c6:40:70:84:0b:69:1f:db:7d:c9:14:a3:83:bf:bc:c2:2f:
         fe:2a:eb:e4:3d:9e:ae:7e:e3:b4:ab:0c:c5:73:5c:ad:19:62:
         64:64:b9:1c:a7:c5:3e:f1:41:95:1e:e1:74:9c:2a:53:bb:1f:
         c9:b6:b2:59:3f:96:52:fe:7b:ea:39:33:c2:ea:21:da:1d:71:
         cf:48:9d:70:f1:fb:8d:b1:4f:f4:df:94:ce:38:18:42:ce:d0:
         27:5c:34:11:4b:3a:6a:6f:91:27:e6:fb:86:df:5e:e7:75:49:
         51:c7:e7:e6:74:c9:e4:88:96:b8:4f:43:16:02:86:a9:00:cd:
         c4:6e:4a:31:c9:5b:e2:89:5d:f5:1a:7c:0b:08:ca:23:53:f7:
         45:e0:01:dd:ea:21:b6:98:f1:d9:df:59:93:00:38:8e:a5:6b:
         3b:96:14:de:a1:eb:f0:be:a2:86:9f:83:c7:12:eb:81:16:d7:
         dd:10:7c:cd:3d:df:b6:4c:96:04:64:9e:b8:c6:ed:85:9b:26:
         22:be:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:14 2025 by rpki-client