Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/77026aec-a6c7-3339-9364-ade3cc39f353.roa
File:                     77026aec-a6c7-3339-9364-ade3cc39f353.roa (raw, json)
Hash identifier:          FQuvh6LxvXtN06igwwX4mfSpHKDqu8nAwqROFQHlaUs=
Subject key identifier:   53:A3:98:D1:8B:86:34:45:D3:4F:65:64:3C:1F:93:AA:83:58:E8:3A
Certificate issuer:       /CN=8c902da3-488d-44d9-9833-f1295a9fd887
Certificate serial:       010D0C9F432858493C09304D761043C3FAA97580
Authority key identifier: 1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/77026aec-a6c7-3339-9364-ade3cc39f353.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     5670
IP address blocks:        209.165.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:30:4d:76:10:43:c3:fa:a9:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c902da3-488d-44d9-9833-f1295a9fd887
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=8ec1f1a4-f505-4db0-aefe-e5aac3800603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:fd:80:4a:b3:0b:18:77:9a:92:6b:21:2e:
                    8d:d7:58:04:a2:91:2f:16:56:4f:a8:fa:3e:a9:03:
                    ef:89:30:92:5b:6c:0e:8f:c0:c9:82:3e:5e:b2:9c:
                    3e:d6:c4:7d:f5:d0:10:15:48:84:a0:fc:82:3f:85:
                    55:2f:ee:52:b5:af:f2:84:2c:df:98:ed:ed:35:f9:
                    1e:b8:97:31:0e:9f:bc:31:22:4b:15:c1:9f:dd:bf:
                    17:14:64:85:6d:e1:55:f5:78:19:d0:fb:6e:3c:7f:
                    f1:9d:f6:ad:42:c6:2e:08:16:f4:03:14:8c:40:18:
                    b0:01:b2:02:4f:ac:81:8b:bd:36:e8:7b:f8:c7:57:
                    b5:93:81:b2:af:28:72:00:22:5f:73:62:5e:5f:ad:
                    f9:7b:77:4c:a6:bb:4b:2d:9c:92:50:4c:e0:3a:c0:
                    9c:07:3f:db:0b:ba:51:a0:13:e1:8c:40:56:2e:fe:
                    48:cf:db:ec:17:0e:21:a3:57:3b:f4:54:23:aa:38:
                    6d:7d:63:94:9b:0a:47:65:8e:1d:8b:70:52:c3:8c:
                    03:0a:3c:6a:16:71:84:3d:51:9e:28:ac:dd:fb:35:
                    11:4e:fc:39:fe:c1:2e:03:c7:95:59:13:d7:2c:09:
                    5b:e3:41:9d:87:01:2f:fa:32:c3:8b:92:8a:38:11:
                    21:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A3:98:D1:8B:86:34:45:D3:4F:65:64:3C:1F:93:AA:83:58:E8:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/77026aec-a6c7-3339-9364-ade3cc39f353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl

            X509v3 Authority Key Identifier:
                keyid:1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.165.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:0b:46:81:bf:80:26:66:7b:b8:ca:be:bb:2f:7c:cf:6a:fd:
         d0:b4:e9:8e:8c:b9:a0:1b:d5:ac:6b:b2:b5:77:0b:f8:24:0c:
         fb:51:b8:a2:90:04:ee:93:bc:f1:0f:a1:68:d8:49:74:d5:30:
         62:c6:92:d1:bf:83:6b:5b:d9:e5:cd:ea:24:ce:1d:65:53:99:
         6a:67:58:19:3d:3f:9c:fe:58:21:d3:3a:7d:eb:2a:b0:f6:94:
         9f:2b:02:2c:be:fe:f7:3c:70:51:20:b3:5d:15:0f:6c:01:96:
         0d:c4:db:d2:66:b9:b5:a6:ba:4c:01:d2:07:74:e8:49:7d:13:
         65:29:94:59:bc:39:16:ad:e5:8a:ee:82:38:4c:b9:80:05:05:
         0f:6c:40:fa:c1:c7:31:1e:0c:2b:37:e7:74:a1:06:ab:7c:7f:
         3c:86:cf:36:97:83:5a:ea:0e:94:c4:42:ca:d9:b8:3e:69:8c:
         57:13:5c:82:92:9a:f0:40:15:dc:c5:2b:23:06:f5:5b:77:9b:
         8d:4a:2f:83:53:0b:5c:14:95:b4:8b:bf:b7:40:6b:36:22:0d:
         50:5f:0b:d7:6a:1d:70:1b:48:d7:68:d6:e1:ed:d3:97:60:21:
         64:99:a4:3f:70:66:90:f8:51:ab:9d:5e:9e:f9:e9:36:b0:6e:
         ce:c4:08:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:41 2025 by rpki-client