Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f23455df-fcf6-3cab-913f-35d5ff4b4b3b.roa
File:                     f23455df-fcf6-3cab-913f-35d5ff4b4b3b.roa (raw, json)
Hash identifier:          s1CYdmJq0ERVph9qo2ZmI1l8ChqdVPlXkrG5m/dAAMs=
Subject key identifier:   A2:DC:FC:A2:37:53:A5:3E:35:1E:64:01:37:F3:C2:6F:82:8C:9F:2E
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848C5822A11C22420E78B531700
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f23455df-fcf6-3cab-913f-35d5ff4b4b3b.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36040
IP address blocks:        208.117.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:2a:11:c2:24:20:e7:8b:53:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=df7d304d-7cb8-4d07-9ba4-a095c0c81872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1b:e0:e7:8e:c9:fd:6c:7f:93:7a:93:6c:83:
                    c3:15:ba:c8:5e:99:37:fa:69:5f:ff:6a:2c:95:13:
                    fb:57:ae:37:a9:27:7b:a1:24:29:5a:78:e1:cc:c1:
                    2d:2c:79:89:cd:7c:a8:34:fd:d0:f8:26:cc:2e:cb:
                    a3:e4:fc:95:a3:77:5a:53:cc:eb:42:a1:7c:e5:a8:
                    1c:de:8a:64:fd:c7:e8:9d:24:ef:ce:fe:53:bb:d9:
                    1a:3d:ee:11:21:43:79:cc:8c:00:80:7a:c1:af:89:
                    4d:ce:49:53:cf:04:5f:4d:fc:02:be:d7:ab:9d:16:
                    a5:a8:cd:49:94:15:6c:41:be:e8:89:be:72:f5:bb:
                    2c:ba:89:15:bc:f0:76:49:85:c6:30:34:2c:e8:0d:
                    39:65:8b:40:55:f4:03:3e:61:97:61:54:27:d8:5d:
                    3c:3a:e2:0f:86:3c:9c:58:44:fb:14:45:eb:ec:cd:
                    5b:fb:45:2e:2a:c7:cd:f2:6d:0b:fa:83:0a:4a:8b:
                    b8:1e:55:73:a9:a3:60:88:ff:8f:b4:ba:67:3e:54:
                    22:61:4b:3e:cf:da:55:0d:c3:52:b6:84:4d:ee:bd:
                    c1:a6:3e:2c:a6:29:e9:45:62:e6:64:70:e6:e3:e2:
                    c3:1f:e6:75:48:aa:4f:c1:0b:f7:92:a4:5a:de:76:
                    6e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DC:FC:A2:37:53:A5:3E:35:1E:64:01:37:F3:C2:6F:82:8C:9F:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f23455df-fcf6-3cab-913f-35d5ff4b4b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:a8:c0:2a:d2:17:e3:b3:6d:74:59:40:99:cc:ac:9e:33:f5:
         ce:10:4c:09:be:d5:fa:68:3e:4a:25:85:66:e3:2c:11:ef:46:
         64:ca:32:4c:62:57:6e:22:7b:bc:5e:f1:70:f9:b1:47:0e:03:
         a8:0d:d6:64:a6:b0:f0:c5:48:aa:f1:3e:eb:72:af:9c:7f:2c:
         b5:30:56:00:fe:9a:8b:bd:d7:43:93:34:01:c1:0d:24:e5:9d:
         69:5e:34:87:db:3e:c7:96:b0:54:07:78:d5:aa:9a:92:8f:0f:
         ec:cd:4c:b1:92:b9:6d:39:78:a5:3d:06:82:92:bf:fa:d6:ba:
         2d:e1:c7:b3:e3:c4:29:ed:a4:b0:6c:db:37:64:88:97:6f:67:
         28:80:aa:46:4d:28:4d:58:e1:ce:6a:68:d8:10:d4:7f:0f:a2:
         a3:c3:c1:60:6c:f6:4b:a5:74:35:1d:67:99:ae:65:fe:a5:35:
         54:b8:d5:3a:90:1b:2e:e4:81:6d:92:e8:cd:fc:52:5c:2e:25:
         05:94:21:93:c0:49:9d:d1:40:e9:a3:4f:04:84:2d:f8:2a:85:
         e5:1b:5d:b9:14:39:c0:5c:3a:99:77:9a:a4:a1:7e:29:e6:87:
         fb:02:bd:eb:18:0b:42:d9:45:c6:b2:be:64:fb:c0:4a:1c:a3:
         80:19:ca:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:32 2025 by rpki-client