Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ade1f26a-d8b4-3db4-919c-0f1c0d85d820.roa
File:                     ade1f26a-d8b4-3db4-919c-0f1c0d85d820.roa (raw, json)
Hash identifier:          YjZ0ZTOKDosxmxhIc3+v3/fV87oRvV2auG8L6Wn2E3o=
Subject key identifier:   21:13:87:2F:FA:FC:85:D6:46:ED:23:21:50:C9:8F:01:89:7B:CF:7C
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848C58218D3FBB8BC22A105B000
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ade1f26a-d8b4-3db4-919c-0f1c0d85d820.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36040
IP address blocks:        208.117.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:18:d3:fb:b8:bc:22:a1:05:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=90223a2c-5d9a-4355-a355-e85de587625a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f0:e4:ee:a6:fe:03:da:6c:d9:c8:0d:bf:02:
                    8b:a4:64:19:b3:d5:16:9e:b3:c9:a6:34:da:0c:f0:
                    bd:d2:4d:7f:e3:13:8f:cc:b9:fe:f4:21:31:32:14:
                    e4:27:8b:49:3a:69:3c:e0:1f:2c:21:3d:9c:1a:cf:
                    81:bd:4b:a3:eb:e1:8d:6d:df:9a:6f:3b:08:45:49:
                    65:64:3b:01:16:0b:9e:ea:81:c5:6b:ab:ef:7f:e9:
                    c5:a2:db:1b:b3:c0:3a:d7:6c:dd:47:6e:90:0d:90:
                    eb:de:8b:a8:92:ca:00:67:ac:0c:cb:d5:fb:2b:b4:
                    54:42:ff:e3:3d:09:88:88:5a:1c:99:51:37:55:35:
                    53:0d:4f:94:76:c2:89:a3:00:b7:b6:26:73:a8:a1:
                    d6:16:56:5d:44:59:bc:18:84:5e:57:cc:83:12:4f:
                    0f:00:b0:3d:3b:b3:9e:86:4a:d3:ce:f3:c5:08:31:
                    16:c0:3b:bc:0c:24:e3:f8:ae:e2:18:cd:c2:b4:55:
                    b5:f1:6d:d3:86:d2:0f:0c:fe:8c:1d:f9:c6:c8:fd:
                    ff:4a:fd:50:ce:cb:e7:72:5b:b1:09:a4:64:ac:5b:
                    ac:c8:e4:0d:d4:6c:a6:d1:3e:6b:c3:c5:c0:41:85:
                    c2:13:68:7d:65:02:08:d0:e5:b3:69:a8:c5:9f:81:
                    fc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:13:87:2F:FA:FC:85:D6:46:ED:23:21:50:C9:8F:01:89:7B:CF:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ade1f26a-d8b4-3db4-919c-0f1c0d85d820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:7e:6c:83:d3:03:6a:d3:fe:a0:93:c8:cf:02:34:6a:7a:11:
         a0:97:aa:3b:90:db:e6:70:cf:17:f5:ef:9c:64:92:74:79:ac:
         b5:94:c0:04:87:5c:8f:bb:61:d3:bf:bb:3a:ad:b7:e5:21:12:
         2e:ad:ef:50:13:ff:b7:7e:f2:36:6b:68:61:09:89:d0:11:9f:
         ac:dd:88:37:7b:de:28:05:da:4e:0a:e5:4f:cd:13:72:8e:ad:
         92:96:04:47:59:86:9a:80:46:42:28:b2:20:87:a9:1a:73:c7:
         59:54:85:54:0a:f0:dd:59:f1:1d:02:c3:3a:28:da:be:93:1b:
         f3:57:99:16:1e:f1:a0:7a:a1:49:58:c6:b3:ae:a3:ca:97:a6:
         b7:19:bc:38:46:fc:b2:99:00:65:b5:52:49:c3:61:87:1b:b8:
         33:ad:b6:52:e2:d2:1b:7d:73:00:f8:e7:44:ad:ed:c2:25:c6:
         d7:11:78:af:9a:5d:93:7c:e4:6d:55:35:5e:fb:40:f6:ad:30:
         2f:db:46:a1:56:8c:9f:2a:1f:a4:6f:f4:a2:5e:ee:71:44:1d:
         98:68:ba:ed:4f:75:06:51:1d:91:f6:86:18:27:fc:fc:af:85:
         26:35:ff:bf:90:43:68:c0:bb:a3:f6:46:67:f2:4b:82:97:71:
         68:43:c5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:20 2025 by rpki-client