Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/08907099-391f-3bc0-aa7a-ec8730b3de2a.roa
File:                     08907099-391f-3bc0-aa7a-ec8730b3de2a.roa (raw, json)
Hash identifier:          le81P0KSPu6yklNIGgiAkGE95PVR1P9pjqWtepDCQbM=
Subject key identifier:   F8:20:DB:1D:C0:F0:AD:D3:23:73:41:63:81:8B:A8:AD:90:50:FB:48
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F43285848EC96ADCF7DABEE13533550C0
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/08907099-391f-3bc0-aa7a-ec8730b3de2a.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     203724
IP address blocks:        208.81.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:ad:cf:7d:ab:ee:13:53:35:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=e2d79689-894e-4f5e-ac40-3810d42b97e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e2:8e:cd:79:39:f9:ed:34:00:87:44:23:e4:
                    2f:2f:c7:5c:0f:e2:ff:de:f7:dc:7b:2d:9a:c6:b5:
                    82:47:88:8d:5d:df:cc:7f:6f:ac:07:76:6d:e1:fe:
                    aa:e8:1b:44:c5:60:65:b6:81:b1:f3:cb:37:15:6b:
                    43:65:2d:15:12:fd:dc:4a:4e:94:d7:e8:3b:a3:a2:
                    32:59:b4:34:05:9e:3b:db:af:25:25:45:e8:3e:af:
                    88:8e:ec:04:8a:92:03:cd:a1:17:10:d9:02:a3:70:
                    0e:cb:8b:bd:10:3b:dc:04:a6:7c:a2:fc:83:74:76:
                    8b:0d:ef:bc:ab:ae:2b:23:58:ab:a7:67:a0:55:29:
                    3e:d1:f8:25:be:be:4e:15:59:c5:80:5f:f2:a2:53:
                    80:31:c4:24:12:5a:c1:f7:e4:23:de:32:80:86:b9:
                    12:ec:a4:4f:26:4b:2e:30:fd:29:82:ab:bb:37:4e:
                    b8:8f:ce:af:ae:64:d4:7e:61:30:7d:d5:af:cd:90:
                    40:49:8f:c9:a4:15:49:b5:a0:9f:c0:aa:da:db:a9:
                    f1:ab:24:33:50:14:97:9e:93:8c:ff:d5:4e:7e:d5:
                    92:70:e4:d1:b4:c4:dc:f9:46:06:66:e5:53:64:e1:
                    20:3e:3f:d2:82:72:0b:3e:64:db:96:11:a5:f7:b3:
                    7c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:20:DB:1D:C0:F0:AD:D3:23:73:41:63:81:8B:A8:AD:90:50:FB:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/08907099-391f-3bc0-aa7a-ec8730b3de2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:ab:b5:ca:2d:23:31:d2:2a:3e:77:0f:38:5f:8e:e5:5d:ad:
         22:73:92:40:f1:00:9c:66:04:88:24:c5:31:88:73:8a:b3:98:
         5e:9b:45:c8:25:02:46:e6:2a:d1:39:2a:26:41:3c:78:d3:53:
         72:53:26:24:20:10:49:33:6a:fd:b8:97:00:a0:87:fa:83:ea:
         ba:f7:cd:68:e7:1d:2a:73:5b:6f:5f:45:0a:40:53:40:8b:64:
         b5:2a:6c:c1:57:34:b1:09:3b:63:d7:d0:e3:a6:65:9b:17:ad:
         9e:73:d2:3e:1c:35:1d:a4:77:07:f5:44:b3:7b:ce:f9:62:ad:
         42:bb:32:99:11:67:0d:44:54:1e:1e:b3:6e:cb:01:ce:c7:d6:
         3a:25:3c:8a:24:f6:e3:1a:a4:33:a0:30:7f:f3:c6:45:09:29:
         f2:2a:25:e7:63:e7:ae:9f:73:c8:b2:99:7e:d6:cb:1a:8c:c8:
         d2:97:7b:f4:77:54:36:57:b6:eb:6a:49:d7:db:06:ec:65:c9:
         65:28:42:22:c8:15:79:bb:16:e3:5e:73:d2:df:b5:4c:31:df:
         b7:2b:77:78:de:b5:9b:92:7d:c3:3f:e7:c3:c1:3d:1a:e7:b8:
         4c:25:75:57:be:b7:60:9a:ef:c6:4a:72:ad:3c:6b:60:94:28:
         20:af:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:23:17 2025 by rpki-client