Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ed904ce2-f6c2-3f65-8397-68f7074bfbdd.roa
File:                     ed904ce2-f6c2-3f65-8397-68f7074bfbdd.roa (raw, json)
Hash identifier:          J1uWHl1/Bqp8DEKd8WP+qX43xFILwAiDYWn7My+UKAk=
Subject key identifier:   F8:4B:78:F7:44:DA:86:AF:D6:D3:FC:6A:A6:C6:E4:4C:85:C1:07:5A
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848C58208EBB1FC2B5D91D1CE00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ed904ce2-f6c2-3f65-8397-68f7074bfbdd.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36040
IP address blocks:        208.117.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:08:eb:b1:fc:2b:5d:91:d1:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=b4f0de7c-d3f6-4a94-b5f5-918bbb0d4b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:aa:7d:a1:e2:1d:54:60:7b:30:cd:e5:22:
                    27:5d:7c:01:56:9d:86:7c:eb:e0:69:96:25:e5:0c:
                    ad:bb:2b:24:3d:ef:7d:53:23:74:57:d9:e7:5a:1b:
                    ce:bc:e4:9e:c7:38:5c:6e:37:c1:7e:cb:86:23:03:
                    5f:33:f7:fa:10:93:72:8e:35:2c:99:a7:81:f4:0a:
                    62:d1:28:cb:32:74:7e:4f:db:66:ec:6d:e6:3e:dc:
                    65:6e:f5:3d:47:32:b0:de:d7:d3:7b:cd:4e:ef:90:
                    58:53:a3:10:53:55:cd:9d:92:07:cd:e1:6d:ae:c8:
                    c5:8f:6b:61:ea:76:e0:f9:9c:36:23:d2:30:d5:96:
                    bd:01:f3:fe:62:70:ae:ab:e3:bb:26:31:15:f5:27:
                    b9:81:36:2a:0b:e5:94:2e:1c:32:f3:74:b3:87:53:
                    88:09:8e:5e:8d:61:63:bc:7f:44:ad:50:a8:ca:7c:
                    58:1b:b4:67:1f:22:92:9d:37:86:3b:c9:68:58:bb:
                    d7:3e:35:b0:19:ad:e6:03:86:6c:92:26:5d:09:7a:
                    24:4b:26:a9:02:40:89:0a:4f:ce:b7:91:14:15:d6:
                    3c:f2:3d:66:44:9a:30:34:3d:47:10:5a:e5:1a:03:
                    51:32:93:c0:5c:8f:dd:66:54:b8:78:cd:52:96:be:
                    8a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4B:78:F7:44:DA:86:AF:D6:D3:FC:6A:A6:C6:E4:4C:85:C1:07:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ed904ce2-f6c2-3f65-8397-68f7074bfbdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:fe:96:ee:da:fc:b9:ac:33:77:37:90:3d:a5:e4:42:e0:31:
         9d:f3:14:2b:c7:c6:d2:0c:10:75:14:b8:77:30:bb:38:68:73:
         de:da:e3:6c:46:41:d5:ae:5f:bb:63:4f:30:f2:81:51:a1:b3:
         7b:3b:62:22:82:a6:cb:7a:de:bd:89:86:ce:dd:21:ad:cc:4a:
         9f:87:b6:08:ed:88:99:94:0f:ad:8b:fb:6d:a2:ad:bb:1b:95:
         1f:b9:e7:1a:18:1f:ca:8a:72:87:cd:16:c5:7c:ee:5f:81:77:
         51:4d:e8:e9:4f:30:3f:71:51:c3:ac:ac:50:a9:3d:9e:18:4e:
         c7:2c:85:b7:71:86:40:cf:4a:62:f5:ab:74:8b:80:ac:ad:5f:
         3b:5c:1f:b2:fe:8f:08:ef:03:21:1c:96:69:84:19:90:e3:42:
         37:bf:21:47:cf:8b:64:75:ed:53:c7:f3:ce:82:e0:86:7a:37:
         61:bd:86:42:3e:d7:fa:86:e9:82:58:61:6a:24:e5:74:f5:95:
         1a:d3:7b:c5:8d:1f:6f:6b:12:f0:cb:f2:c8:cc:ca:94:ae:53:
         6a:bb:8d:4a:51:42:c1:9f:9a:7a:f3:66:4a:88:f0:d5:2b:75:
         14:26:5b:52:29:91:a7:2b:9e:30:58:85:7b:f4:03:07:8e:9c:
         dd:e8:54:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:25 2025 by rpki-client