Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/ba153ac6-43d8-33de-a7d2-95b590eb4ada.roa
File:                     ba153ac6-43d8-33de-a7d2-95b590eb4ada.roa (raw, json)
Hash identifier:          /u/FU7jiUYtb1RmPVfXfYIT4TYLrnenYWgVYf4h0tnI=
Subject key identifier:   C3:28:FD:03:F9:0B:F4:20:20:EB:E6:38:E7:8D:EC:4B:B6:F3:C4:00
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F43285848FA8BEBF4EE646CA435ECC980
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/ba153ac6-43d8-33de-a7d2-95b590eb4ada.roa
Signing time:             Sun 23 Feb 2025 14:00:51 +0000
ROA not before:           Sun 23 Feb 2025 14:00:51 +0000
ROA not after:            Sat 24 May 2025 13:00:51 +0000
asID:                     26383
IP address blocks:        207.90.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fa:8b:eb:f4:ee:64:6c:a4:35:ec:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Feb 23 14:00:51 2025 GMT
            Not After : May 24 13:00:51 2025 GMT
        Subject: CN=b91653b2-d425-42bf-ac82-c38d458290f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:12:e1:0e:b6:00:ed:56:e0:f2:15:56:5d:78:
                    63:86:12:5f:c0:b3:64:cf:57:3b:de:31:e7:66:e2:
                    ed:bb:ef:0e:0e:f6:8f:a7:dc:b2:01:d8:9b:38:28:
                    fd:45:b4:c2:fc:0a:eb:2f:99:0d:b4:e6:54:f4:8b:
                    ef:13:46:71:f7:06:42:e7:22:ef:f6:8b:a5:94:b5:
                    08:cd:cb:e1:a9:d5:41:52:b5:74:1c:fe:79:4c:08:
                    e9:fe:86:26:f8:5e:5d:5d:d8:7a:9c:60:bf:a4:94:
                    43:30:5c:bc:03:cf:ca:df:4b:0c:db:fc:a0:94:2e:
                    38:44:ac:dd:96:fb:bf:b1:de:7c:11:96:8c:8e:9a:
                    f2:a2:ab:30:02:ff:2a:57:f1:ee:68:2b:87:7f:dc:
                    0d:f9:e2:6b:30:a1:85:54:59:75:28:6b:0b:17:4c:
                    ea:86:0f:ca:00:d7:79:6e:bd:65:e4:5b:4e:03:dd:
                    79:ba:e2:e7:5d:40:96:f9:a9:0e:8b:f1:6c:35:1c:
                    43:c7:01:58:d7:a8:d6:9a:1c:58:f2:2e:35:d3:f6:
                    ce:d1:b6:30:1f:f6:48:97:ea:06:92:6e:27:3f:30:
                    d3:68:ed:88:e6:3d:a6:53:54:63:75:20:ef:b8:63:
                    82:91:3c:33:66:ec:a1:30:da:68:0a:c4:8f:ea:5e:
                    0b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:28:FD:03:F9:0B:F4:20:20:EB:E6:38:E7:8D:EC:4B:B6:F3:C4:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/ba153ac6-43d8-33de-a7d2-95b590eb4ada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:16:e2:51:71:96:ae:47:ab:fe:23:45:44:bd:d2:b1:1d:fb:
         10:03:f2:c1:c3:3b:48:a9:d3:8e:c9:3e:f3:f4:b6:36:55:91:
         84:d2:1c:38:07:87:5e:9d:98:d8:37:75:03:20:e7:e2:6c:d0:
         9a:34:a6:ea:ee:76:be:29:08:da:54:8d:c7:8f:b4:ba:89:f7:
         ee:b7:a5:48:7b:1c:a9:6e:0a:e0:89:7d:f0:4f:ba:39:9e:bc:
         41:fd:89:ae:ec:75:c4:e7:48:7c:43:31:f7:ce:7f:ad:e3:2d:
         57:2e:4e:0a:44:08:0b:33:29:80:fd:36:48:83:dd:d9:fe:3f:
         c8:55:b8:1b:c4:cf:6a:c4:1f:6a:30:22:f3:0c:28:f3:de:e2:
         8a:fe:21:d0:72:81:58:29:3c:aa:d4:10:5d:4f:40:e8:08:79:
         a8:98:c9:13:54:6c:d6:43:3e:e8:a7:26:e9:13:dc:91:6e:52:
         6a:f8:9e:25:19:b7:71:58:3e:3f:9f:17:e2:99:94:5b:fd:3d:
         08:03:15:04:7e:a7:1a:d2:86:e0:63:21:fc:8e:a3:a0:83:3f:
         e5:1b:ec:09:61:26:41:79:50:12:0b:28:de:5a:f5:72:ee:4d:
         96:ee:5e:c9:95:20:9b:7c:81:38:e8:18:bb:55:86:d7:10:42:
         6b:71:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:48 2025 by rpki-client