Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/595f8af2-e8d7-3e25-814e-3372d4edac5e.roa
File:                     595f8af2-e8d7-3e25-814e-3372d4edac5e.roa (raw, json)
Hash identifier:          2m5zBR4Dwfo5FyNs/Ik+rUqWGSW1+DBiAIt2Elr5dL0=
Subject key identifier:   5E:D9:E1:DB:A7:1E:68:90:27:4B:5E:45:8F:6B:3F:51:39:CD:DF:4D
Certificate issuer:       /CN=a278da28-82b3-48fe-bc76-7859a82f5651
Certificate serial:       010D0C9F43285848292A9D7F5A47F790C3561E00
Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/595f8af2-e8d7-3e25-814e-3372d4edac5e.roa
Signing time:             Tue 10 Dec 2024 14:00:52 +0000
ROA not before:           Tue 10 Dec 2024 14:00:52 +0000
ROA not after:            Mon 10 Mar 2025 13:00:52 +0000
asID:                     38082
IP address blocks:        209.209.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:29:2a:9d:7f:5a:47:f7:90:c3:56:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651
        Validity
            Not Before: Dec 10 14:00:52 2024 GMT
            Not After : Mar 10 13:00:52 2025 GMT
        Subject: CN=3dbd3c18-d3fd-4265-a617-e86c104c15f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:08:6d:0a:c4:0f:cf:33:a7:f6:b5:ae:93:00:
                    46:04:18:95:a2:50:27:04:b2:7d:ba:a2:f0:37:45:
                    76:ed:52:fb:e3:e7:a0:ac:46:78:32:14:1e:c7:46:
                    ea:3a:93:44:e4:0c:cc:3f:9e:dc:48:70:75:0b:05:
                    82:78:cf:6e:8b:dc:b9:44:a1:60:60:b2:51:d5:47:
                    8a:db:b2:69:88:50:8a:77:ba:8d:1d:77:d2:4d:0d:
                    22:41:fa:6a:71:60:5c:04:1e:bc:7e:49:1b:29:ef:
                    8b:71:78:67:04:19:a4:1a:34:77:2a:47:02:ab:eb:
                    34:6e:4d:da:60:02:82:5b:db:e2:0b:9d:b0:68:49:
                    86:33:ba:9f:f6:94:10:2c:c6:e9:e0:ea:09:27:37:
                    1b:43:be:f6:65:3c:49:84:34:16:af:19:46:31:e1:
                    f6:e7:5a:ad:14:84:f2:e7:a1:53:5d:1d:37:dc:e8:
                    98:bb:63:81:06:0c:33:98:38:48:23:f1:95:ef:f7:
                    51:9c:3e:ca:d9:ac:f4:ca:5d:82:bb:c1:83:a3:f5:
                    b0:4d:22:0a:25:c2:63:0e:01:e0:7b:c2:c2:a3:4f:
                    6c:53:69:95:7f:91:bc:97:42:99:df:39:19:3b:d9:
                    33:9c:75:8c:aa:d1:2d:be:4a:38:ed:24:ff:44:ce:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D9:E1:DB:A7:1E:68:90:27:4B:5E:45:8F:6B:3F:51:39:CD:DF:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/595f8af2-e8d7-3e25-814e-3372d4edac5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl

            X509v3 Authority Key Identifier:
                keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f6:08:d8:ff:67:b8:ad:ca:b2:56:58:1b:5e:ed:b1:91:b9:
         c3:d6:fa:f9:51:73:57:e3:83:3c:81:1f:1a:59:a9:18:e0:b4:
         f5:d7:a9:f2:06:0e:ce:7f:8c:89:98:89:95:cd:64:62:b3:22:
         a7:48:e6:95:3d:cf:b6:bd:a6:27:1a:b7:f0:e4:42:59:b0:f1:
         0e:c8:48:69:5d:b5:d0:6d:5f:ad:04:6a:4c:16:c6:65:52:c1:
         0b:65:f3:4f:1b:f8:85:12:92:25:0d:67:b3:67:5c:75:6f:cb:
         68:e3:b4:78:85:bc:e6:f1:3b:2a:30:fc:8c:f7:8c:47:c5:7b:
         e2:bb:ea:52:ff:71:0a:35:e9:eb:d1:84:02:84:2a:22:d6:fa:
         87:d7:61:f1:d3:30:2a:23:1f:b4:21:41:50:29:8f:3f:63:a2:
         bf:4b:97:39:f4:5b:d4:50:b6:bc:a4:97:cb:47:19:7f:09:68:
         a9:ad:33:b6:fa:2b:01:52:75:9e:47:d2:37:0e:8e:9e:4e:10:
         5a:10:b4:a0:75:7e:0d:21:01:d8:81:00:37:b0:25:1a:46:c7:
         1f:d4:b0:8c:82:18:7a:04:7d:55:5e:4f:f0:dc:2b:51:a9:80:
         d3:7a:a7:cf:6e:1d:75:54:b8:b7:09:fe:ea:1e:23:97:84:50:
         18:61:7a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:30 2025 by rpki-client