Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa
File:                     276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa (raw, json)
Hash identifier:          Ypp16qAztSIR0wweR31X/f5zcYUNFzXAspgojLW5uU8=
Subject key identifier:   65:8F:34:57:CB:8B:20:67:16:B3:E5:45:A6:D6:B8:E7:99:41:5E:D1
Certificate issuer:       /CN=208dcf74-3dce-4384-beaf-70319895fc4b
Certificate serial:       010D0C9F43285848F65BE6359483EA2EB292C300
Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     8075
IP address blocks:        134.65.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:e6:35:94:83:ea:2e:b2:92:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=9fc427ff-4dc9-4f0f-b338-58d2f5ff8d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1e:9f:7e:c5:49:a3:18:bb:bf:54:6b:97:78:
                    37:06:42:e9:ac:75:05:5e:b7:03:d5:c4:59:04:ae:
                    42:a3:21:0c:85:00:5b:58:38:8b:df:5c:25:d9:6c:
                    ef:b0:27:db:97:be:05:96:ec:dd:5e:77:6c:df:05:
                    45:c0:49:b3:03:6d:1a:bc:23:3a:5c:25:97:55:dc:
                    43:8e:76:7a:3f:00:5f:52:fd:dd:2e:1e:23:99:6d:
                    21:54:71:d6:27:0e:67:58:48:99:31:99:8c:33:1e:
                    fe:dc:8f:bc:a3:5e:1e:4a:c6:7c:a8:3b:db:d3:1f:
                    ff:d9:01:77:b8:60:9b:49:32:84:92:3b:24:40:3c:
                    5c:11:db:0d:82:10:9c:fd:66:e3:ab:dd:c5:6c:e5:
                    b0:46:14:ce:98:03:b1:93:4c:fa:25:a3:6b:81:6d:
                    2b:f5:98:5d:c2:66:77:86:c5:e9:ba:76:e7:35:de:
                    b2:ee:30:80:6a:d1:55:7c:37:7f:36:b0:3b:47:10:
                    e2:78:0a:85:81:66:46:f7:5f:11:55:6b:de:85:27:
                    a1:bb:03:a0:0d:40:91:bf:df:b8:6a:4f:0e:38:a9:
                    00:bd:f5:f5:6c:a0:23:45:4b:4a:f7:7c:83:a2:bb:
                    1d:9b:e3:13:4a:1c:5d:d2:2d:42:9e:fc:fd:ae:96:
                    55:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8F:34:57:CB:8B:20:67:16:B3:E5:45:A6:D6:B8:E7:99:41:5E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl

            X509v3 Authority Key Identifier:
                keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:1f:14:8f:8f:81:b1:95:2d:e7:a7:16:67:65:46:cd:69:9f:
         22:15:cb:18:00:f9:fc:cf:16:41:a8:eb:39:84:5e:3b:3b:1d:
         38:33:89:30:68:37:1a:3d:3e:47:cc:84:13:9f:4e:b3:3f:5a:
         59:d2:cb:f5:d9:09:de:85:8f:1b:95:ef:67:3f:96:05:c3:23:
         6d:af:b8:80:31:2c:dd:12:f1:ca:d0:02:65:da:6a:4c:94:f0:
         85:7c:fb:c9:5f:82:32:16:44:95:0a:bd:c1:9e:41:5c:57:47:
         3e:35:c6:92:bc:de:45:24:1a:23:0f:07:61:e8:76:49:b7:54:
         33:a5:c7:c6:36:9e:7b:b3:15:8d:47:a9:eb:82:f9:02:cc:57:
         5f:5d:c4:cf:22:82:3f:d8:df:a8:e9:27:c1:43:c1:a7:e9:dd:
         81:71:4c:97:f3:56:29:02:a0:42:16:1a:14:f7:e9:14:85:1c:
         96:7c:5c:69:bc:46:18:a0:d5:c1:b5:a2:ef:b2:40:b6:49:1a:
         ef:e2:f8:ef:5e:62:5c:6b:a5:5e:fc:77:4b:4a:81:3f:1c:c6:
         2d:5b:b9:57:e2:76:7d:b8:77:09:6d:0d:0b:b8:46:b9:11:d5:
         72:0e:04:4e:20:15:62:3d:33:d1:7d:a4:65:33:d4:cb:00:53:
         d8:05:ff:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:37 2025 by rpki-client