Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff/9aa22f26-31de-3dd8-869f-d5703bc4e729.roa
File:                     9aa22f26-31de-3dd8-869f-d5703bc4e729.roa (raw, json)
Hash identifier:          lMIX8o2FwhbDRScUi87M3MVdjkue7vEGo1AyFJTAzzU=
Subject key identifier:   60:A4:AF:EB:0A:31:4B:BE:15:39:EE:DA:2E:FC:F2:61:90:C8:33:B0
Certificate issuer:       /CN=80622965-3bef-4e3d-abce-c342f2c7ccff
Certificate serial:       010D0C9F43285848F08A487D17432EBA82B86E00
Authority key identifier: 73:3E:2B:6E:52:F4:24:FD:97:07:4C:B0:9C:16:C5:7E:C7:DD:30:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff/9aa22f26-31de-3dd8-869f-d5703bc4e729.roa
Signing time:             Wed 19 Feb 2025 23:59:31 +0000
ROA not before:           Wed 19 Feb 2025 23:59:31 +0000
ROA not after:            Tue 20 May 2025 22:59:31 +0000
asID:                     31772
IP address blocks:        209.182.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff/80622965-3bef-4e3d-abce-c342f2c7ccff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff/80622965-3bef-4e3d-abce-c342f2c7ccff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:8a:48:7d:17:43:2e:ba:82:b8:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80622965-3bef-4e3d-abce-c342f2c7ccff
        Validity
            Not Before: Feb 19 23:59:31 2025 GMT
            Not After : May 20 22:59:31 2025 GMT
        Subject: CN=4bbe6113-d97b-42f3-bc1c-03c70f1565f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0f:06:1e:8d:28:d7:92:cb:d7:36:ee:da:d6:
                    3e:f1:2c:8c:b2:39:9b:fb:83:82:31:ac:c4:56:1d:
                    da:1a:fe:e7:a4:3a:20:20:05:47:a0:be:a7:85:f1:
                    ee:70:39:86:1b:a9:ed:63:05:c9:ee:1a:48:81:25:
                    dd:ca:33:bc:bb:f1:51:30:49:31:ba:e3:1d:e2:ea:
                    a5:ea:ac:16:d6:fa:96:c2:ec:1a:e0:34:42:9a:09:
                    7f:24:bd:44:9e:a2:be:71:e3:3f:e5:db:12:12:77:
                    ce:f3:6f:50:d7:e2:e4:a7:b8:c1:06:d0:e7:a1:91:
                    d3:c3:df:1b:bc:fd:fc:fd:0b:d2:15:b1:d8:f1:e1:
                    d0:3d:d4:a9:5d:83:7c:ae:d9:96:6f:12:c1:7d:e1:
                    5c:fe:de:d9:91:cb:d3:e4:3c:f5:5d:ef:c7:d7:72:
                    e1:fe:47:ef:2c:f8:24:1f:93:bb:74:24:90:a6:4d:
                    85:1b:b9:a7:d6:f5:9a:0f:47:33:7b:cd:94:50:68:
                    a4:2a:e8:c9:b7:b1:07:35:da:60:bf:a2:42:bf:c2:
                    10:c1:91:49:a5:18:95:ab:d8:44:e3:f7:2d:50:44:
                    4e:03:8e:2c:36:86:09:51:ac:e4:5c:d4:70:06:0d:
                    4a:a3:82:fd:cd:54:70:46:da:f0:b4:49:7d:66:f5:
                    76:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A4:AF:EB:0A:31:4B:BE:15:39:EE:DA:2E:FC:F2:61:90:C8:33:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff/9aa22f26-31de-3dd8-869f-d5703bc4e729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff/80622965-3bef-4e3d-abce-c342f2c7ccff.crl

            X509v3 Authority Key Identifier:
                keyid:73:3E:2B:6E:52:F4:24:FD:97:07:4C:B0:9C:16:C5:7E:C7:DD:30:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:29:69:f9:a6:df:71:92:cb:77:eb:91:92:82:36:65:af:4e:
         fe:a2:5b:e3:f6:41:25:1e:cd:28:c2:b2:b2:0d:d5:f0:74:62:
         3c:65:81:c3:bf:e8:75:a6:5b:52:e3:d6:92:83:fc:cc:ab:dd:
         91:f7:8d:d3:c9:8e:fa:d6:6e:4a:68:3c:67:be:c2:43:a2:b1:
         e9:e2:df:3c:33:44:2b:29:75:c9:6e:42:94:80:80:03:38:a7:
         f0:d5:41:77:fc:23:f7:5b:6c:fe:6c:13:b7:6a:61:ca:fb:50:
         01:4d:90:7a:01:c4:fb:d5:12:7a:f3:8f:82:44:31:de:cc:70:
         83:c1:8b:48:21:80:65:12:dd:cc:6f:1f:e5:1b:01:69:2a:54:
         ba:00:a7:a4:24:d1:54:9a:fa:65:12:1e:b7:6e:95:1d:15:d0:
         2b:06:65:8a:9c:48:42:15:58:32:1c:43:c4:44:d2:47:00:92:
         26:17:a1:b7:81:3c:4c:9e:d5:63:9d:62:d4:a9:fe:d6:6a:0e:
         34:6b:8e:0b:77:8d:ad:5d:ec:ff:b6:9b:21:a3:d3:74:68:84:
         f3:f6:af:3c:9f:ed:88:bf:9b:8a:db:ec:d8:ca:34:7d:fb:20:
         57:9d:34:38:bb:a4:96:29:f3:aa:b5:34:5e:ed:ea:ce:7b:84:
         1a:11:be:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:56:40 2025 by rpki-client