Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/280c0791-6419-3a0f-85b2-6d0bcc9535f0.roa
File:                     280c0791-6419-3a0f-85b2-6d0bcc9535f0.roa (raw, json)
Hash identifier:          B4jFPNkRzZeXmM8goGktbuaqHnY97GvVOKlXyPSpZkk=
Subject key identifier:   26:F2:A5:87:9C:74:3D:0B:16:F2:74:20:28:EE:B9:2E:CC:D2:41:1D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858495ABEE632EF8CC76FC7A0DF80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/280c0791-6419-3a0f-85b2-6d0bcc9535f0.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     9009
IP address blocks:        174.140.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e6:32:ef:8c:c7:6f:c7:a0:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=0a5a60e4-f07b-4042-bac2-d72563bd1c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:75:53:eb:00:e0:e2:35:ff:52:72:27:9c:5b:
                    01:ac:f3:9f:7b:35:03:83:45:f5:df:73:e1:d9:53:
                    58:b6:9a:6b:3c:ab:33:91:8a:fd:e5:23:27:1d:a1:
                    5d:83:bf:3d:6c:ee:7a:4a:e4:b6:e9:51:0a:8f:a9:
                    14:3b:ea:7e:78:e5:34:b2:5b:86:74:f4:d9:09:98:
                    ef:69:c0:fd:d7:69:3d:23:58:f7:ea:d3:b6:1b:4c:
                    a0:9b:e4:1c:7e:b4:d9:ce:e4:23:28:a7:a2:e1:4e:
                    c9:21:fa:fa:e1:a9:07:e6:ad:0b:29:16:61:0c:84:
                    f4:86:b1:ba:c4:7a:f5:37:21:bf:34:c4:1a:e3:c2:
                    7d:83:a3:d8:32:58:cc:cc:32:29:77:f6:10:65:01:
                    a4:30:fc:9b:85:a0:16:92:0e:db:8b:74:5a:f5:34:
                    41:c4:bf:57:ee:4d:dd:f4:eb:9a:c3:b2:08:59:83:
                    b7:0a:41:da:b7:57:60:83:d0:3d:1f:ab:64:fc:8a:
                    b9:dc:b1:1c:ed:07:25:74:40:b1:21:7b:3f:13:7a:
                    f5:66:1f:7e:81:c5:53:18:e1:fc:00:19:e8:e1:15:
                    1f:de:c0:e4:ab:fa:39:41:f0:26:0b:bd:d6:65:89:
                    be:99:73:24:dd:fe:27:99:69:eb:b0:72:54:50:18:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F2:A5:87:9C:74:3D:0B:16:F2:74:20:28:EE:B9:2E:CC:D2:41:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/280c0791-6419-3a0f-85b2-6d0bcc9535f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:a6:a2:19:bb:05:ff:f6:f9:81:05:05:c9:91:a4:1c:48:2a:
         00:bb:29:f4:eb:d9:ea:f0:96:78:5f:3e:20:6e:71:12:a1:0d:
         f0:55:cc:2e:c7:14:0e:ee:2c:53:74:73:c1:6a:f3:3b:1f:ff:
         9c:7d:99:a1:e4:90:cd:3e:d2:ef:7b:64:d2:c7:20:4b:dc:6d:
         67:ec:94:a3:86:09:86:ad:c6:40:96:f6:85:1b:56:ea:13:2e:
         5a:f5:bf:c6:f3:6d:72:43:44:19:96:2e:07:79:2c:88:ee:b8:
         ed:af:1f:ba:90:8f:92:39:dd:49:43:05:ae:86:19:3c:41:a8:
         40:a9:6b:d8:02:ee:07:2c:5d:a9:2c:57:dc:7d:79:0b:30:fa:
         20:da:62:12:db:65:94:b3:80:ef:26:61:1f:94:29:ea:d0:cb:
         d1:7b:04:90:e4:c3:34:5a:2d:3a:03:b0:61:bd:0f:c1:c7:ed:
         d2:ec:7c:3e:21:94:8d:41:f5:e0:3c:f4:c3:e3:07:4e:36:16:
         a1:1a:30:f6:63:b3:df:d4:86:db:96:d9:09:a0:ac:97:57:52:
         d8:b6:29:ff:5c:95:af:28:b3:c3:88:65:cf:77:d1:24:32:76:
         b6:83:41:41:41:9f:41:6a:09:a5:1c:72:5f:75:90:83:f1:38:
         38:6d:d2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:40:28 2025 by rpki-client