Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/ea8065d1-839b-363e-9f39-add4461a1af0.roa
File:                     ea8065d1-839b-363e-9f39-add4461a1af0.roa (raw, json)
Hash identifier:          d1WCgprIRFTXv2OQBUrEHglzzmp9+n/cj7FuAlGmrsc=
Subject key identifier:   B2:D0:E9:1B:BD:4F:FB:10:CB:36:E8:52:26:D4:E7:92:2A:DF:30:5A
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F43285848BFEBA8568E7B6FC928D86BE0
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/ea8065d1-839b-363e-9f39-add4461a1af0.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     6508
IP address blocks:        208.83.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:a8:56:8e:7b:6f:c9:28:d8:6b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=e59fb8d9-5f51-4d23-bcce-c46d7a112b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:7b:3b:46:0e:e1:42:5b:9d:f1:cd:fd:05:
                    ed:a7:65:a2:c7:aa:b1:f6:5e:58:65:5a:52:20:62:
                    fe:43:a0:21:c5:84:d8:2a:7e:d5:f4:ed:50:78:a4:
                    28:ad:e1:29:fa:13:8b:46:ec:ef:ba:6e:bd:54:a6:
                    62:2c:78:4e:69:4a:01:f3:1c:ce:28:7d:a0:c3:f0:
                    6b:94:2f:ca:0e:fd:bf:c9:b1:03:4c:0a:3e:66:38:
                    6a:ce:f6:b7:56:5c:dc:eb:d7:d4:bc:a9:ef:fe:3f:
                    a4:d5:f0:b9:c0:96:4d:81:be:e5:c9:d2:60:ed:78:
                    a0:00:be:c7:75:63:8d:b8:f9:b6:ae:d2:46:83:c6:
                    7f:de:7c:47:52:47:2e:ee:bd:e2:de:e6:65:95:ae:
                    6d:3e:3c:fd:aa:3c:73:c5:fa:3f:a3:9e:e7:87:ae:
                    3f:e3:fd:ba:a1:ef:a2:bc:c4:83:49:a0:c8:2c:77:
                    98:6c:a4:46:01:3d:a8:92:66:c7:92:12:51:4f:c3:
                    2a:ba:51:c9:27:d4:89:88:ec:b6:97:ed:27:f5:e5:
                    d3:72:aa:31:ab:a6:c9:e6:5e:70:45:c0:70:6f:ee:
                    60:78:8a:1a:46:12:20:66:7d:04:3b:ba:aa:d9:d7:
                    09:e5:93:6f:d1:e9:66:d5:dc:c4:f6:4e:8f:87:ef:
                    72:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D0:E9:1B:BD:4F:FB:10:CB:36:E8:52:26:D4:E7:92:2A:DF:30:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/ea8065d1-839b-363e-9f39-add4461a1af0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:62:e9:dc:4a:91:f7:03:fa:1e:6d:f7:a0:2a:35:0f:07:1d:
         72:da:52:cb:b7:5b:42:a1:a1:a6:7f:0e:a5:d1:d5:8b:1a:7d:
         e6:1f:8f:8d:55:17:a8:37:50:24:53:ee:86:f9:35:2f:3e:7e:
         b0:e5:6f:21:4f:36:02:2d:2a:53:8d:00:1e:87:6c:68:50:0b:
         6e:9f:0b:5e:93:d9:2f:cc:86:8c:77:04:03:08:f6:6d:53:8f:
         ca:5b:f4:d6:81:ed:0f:e3:bc:7f:c1:8d:6c:ac:47:d6:b6:12:
         e3:f1:2c:25:d8:f4:82:7c:d0:99:46:8d:86:0b:90:ce:57:9e:
         10:0d:71:12:17:2c:c6:ed:d2:52:6d:d0:12:68:a1:a2:e6:9a:
         10:94:b7:1b:48:92:9f:65:fd:c6:aa:b6:65:82:46:b7:e7:73:
         8b:9f:f0:98:f3:22:65:ef:70:ae:39:2f:02:2e:fa:0e:78:b2:
         21:8f:67:11:de:9d:f2:fa:83:30:0d:0b:17:a8:5d:d9:d8:67:
         b7:62:5e:40:36:1b:71:a4:8d:09:92:dc:88:9b:c3:6c:13:8d:
         86:d7:c0:ac:e3:99:62:e3:57:9b:5e:4d:a1:3e:b7:5f:a7:7c:
         09:b8:35:82:e2:0b:25:f2:18:61:df:e8:4d:06:8f:76:6b:06:
         6e:2f:03:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:59:36 2025 by rpki-client