Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/ee10f956-70bd-39e9-96da-f8f78f5b69eb.roa
File:                     ee10f956-70bd-39e9-96da-f8f78f5b69eb.roa (raw, json)
Hash identifier:          EpIEkDSAf7szykWzzbROyme5hrl83FvrNGlw/++0Bf0=
Subject key identifier:   BE:18:24:ED:BC:C9:33:00:64:77:23:95:6B:CC:59:BE:B8:25:7F:86
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F432858492CAE9CD509E4A5F8AFDFB640
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/ee10f956-70bd-39e9-96da-f8f78f5b69eb.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     26768
IP address blocks:        140.235.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:9c:d5:09:e4:a5:f8:af:df:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=9ea1bbf3-1f19-48ec-8058-87ee047727b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:bf:8b:d7:ab:9d:ce:c2:18:b8:05:c3:34:
                    de:e3:c3:d6:06:eb:8e:db:43:a4:10:86:19:30:b1:
                    a3:f2:c5:9c:71:e0:c1:fe:90:34:17:ec:47:18:47:
                    b9:fb:d3:8e:e7:fa:d6:8b:c6:af:d2:f2:f8:21:3b:
                    c1:b0:60:d8:13:ec:fd:83:ef:e0:24:6a:68:b3:00:
                    f9:5a:7f:36:68:fa:9e:e4:fc:c4:3f:ba:da:7a:2a:
                    75:4d:99:7c:c7:30:74:d4:e5:b6:38:4a:be:80:ad:
                    0d:a2:c2:3d:2f:94:76:5e:8c:58:89:d0:02:a2:94:
                    6e:d4:64:0d:a8:8a:69:56:6b:c3:35:6f:4c:38:b8:
                    73:a3:5d:20:8d:86:ad:3d:7a:b5:1f:5b:a6:d3:0b:
                    a0:96:f3:22:55:cf:3d:d6:18:93:22:bc:c5:f5:82:
                    7f:e9:ab:07:20:f0:08:b7:56:16:51:71:f0:a1:d8:
                    d8:ad:87:1e:1b:6b:5a:b1:d5:74:1a:16:00:66:bd:
                    5d:23:3e:1d:6d:fb:4c:47:7c:4b:f3:83:63:77:5f:
                    39:6a:58:b7:5f:8e:d8:b4:a5:3b:c0:44:8e:02:c9:
                    dd:44:7b:a4:c3:01:0c:62:64:c5:b3:cd:cd:e5:cd:
                    12:98:39:67:11:d2:4a:ce:3f:75:b0:10:8a:14:39:
                    69:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:18:24:ED:BC:C9:33:00:64:77:23:95:6B:CC:59:BE:B8:25:7F:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/ee10f956-70bd-39e9-96da-f8f78f5b69eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:43:11:e9:06:99:75:04:9c:e9:f5:9f:c2:54:de:ee:d4:17:
         91:e6:fc:20:99:fe:b4:d0:9a:68:e2:6d:74:eb:76:88:a8:ba:
         4c:7e:e1:fa:25:05:fe:a5:a0:82:64:60:99:b2:53:7e:7e:10:
         2b:0b:4e:29:8d:6f:54:ac:6f:11:78:4c:c7:da:16:c3:19:8c:
         81:29:b7:29:4c:40:59:27:bf:d9:66:99:27:07:c9:b8:10:c7:
         0b:e4:08:c2:9e:77:3d:a6:2b:c9:e0:62:cf:bf:45:15:33:63:
         c9:fa:5d:54:aa:4e:76:da:b7:60:4e:3e:60:4b:af:e8:2c:e6:
         e6:77:41:87:59:23:87:28:e9:14:a3:62:40:08:0b:af:c7:05:
         54:0b:dd:9b:74:d2:07:77:81:a0:5a:9e:68:32:e9:87:dc:60:
         56:ad:ce:65:42:45:19:32:44:63:ab:7a:b4:d9:0c:b5:14:bc:
         dc:cc:21:81:d8:93:18:18:ac:29:68:09:20:b3:0f:a3:6c:4a:
         7c:74:89:fc:e5:d9:95:dc:1f:61:c7:83:09:d3:58:69:01:71:
         3b:dc:68:ec:f4:b1:f2:b0:21:a4:3b:18:52:3e:25:00:07:95:
         8f:8d:ff:f5:7d:df:c1:67:e4:cc:6b:16:68:8b:9e:bd:96:9e:
         2c:3f:0f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:32:28 2025 by rpki-client