Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9452a88-6ebc-3d4c-8810-c191bce079bd.roa
File:                     a9452a88-6ebc-3d4c-8810-c191bce079bd.roa (raw, json)
Hash identifier:          ooSmSGAX6rH+Nybao5Nflmyfg8/mSdQNr/uz32fuUG4=
Subject key identifier:   7F:62:78:C6:AD:CB:16:BD:12:BD:ED:2F:2B:39:E0:A1:C9:DD:8B:DE
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F43285848E59BB1B24534D239C2807900
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9452a88-6ebc-3d4c-8810-c191bce079bd.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        209.169.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:b1:b2:45:34:d2:39:c2:80:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=a66ae66a-4a31-473b-a4cb-dcc6cf6584bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:52:0f:3f:11:5e:8b:31:45:4d:46:47:66:
                    3e:d6:f6:25:ee:cc:d0:e6:3b:40:0f:8e:a5:5f:23:
                    8a:ea:c3:1a:15:c4:11:58:5f:54:70:91:a0:df:70:
                    da:87:25:3a:87:2d:12:ab:4c:fe:cd:42:c5:1c:fc:
                    f7:e8:51:e8:4b:e7:fe:b3:e1:56:1d:f6:f9:8f:78:
                    cd:45:7a:58:06:a7:cd:f3:ca:98:43:72:a4:c5:bc:
                    5a:1d:d9:d4:3c:44:42:56:f0:b4:19:67:16:a4:a5:
                    76:45:a0:2a:99:13:ba:f9:8c:ac:80:60:1e:ca:96:
                    63:d6:ab:bf:d0:24:58:3d:cb:c6:5e:fc:ee:47:47:
                    c6:db:c9:34:b7:db:cc:8e:24:37:ae:23:7c:54:61:
                    d8:fd:4a:da:7e:55:d4:10:64:61:b2:29:24:3e:aa:
                    75:33:26:27:3d:9b:76:f7:4a:4c:96:77:42:e2:4d:
                    83:8d:51:2d:8a:29:f9:4f:e0:c8:9c:d6:fa:18:52:
                    df:e7:7a:11:0b:35:d2:92:96:f4:58:29:6a:4c:86:
                    07:c2:15:02:df:89:c1:ac:32:71:70:4f:f9:01:72:
                    8c:42:af:b9:26:1e:6f:d5:ac:58:b5:c4:bc:8f:1e:
                    a6:9f:ce:a5:2b:df:3b:eb:10:72:ed:96:84:ac:a6:
                    ad:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:62:78:C6:AD:CB:16:BD:12:BD:ED:2F:2B:39:E0:A1:C9:DD:8B:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9452a88-6ebc-3d4c-8810-c191bce079bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:5b:a7:bf:07:48:82:c1:59:01:24:23:2c:da:47:95:00:ee:
         f5:c2:68:4b:42:82:25:87:39:28:29:86:f5:66:e7:a4:79:1f:
         87:99:b1:64:0f:ec:69:b9:85:67:91:38:12:4a:54:e5:aa:56:
         a3:9c:3a:27:bf:cb:de:fb:dc:97:88:a0:0e:26:1a:df:40:ee:
         a7:ee:eb:d9:21:cc:fa:4b:f5:b7:0f:2e:a1:a4:ee:fa:7c:d4:
         ba:b8:3f:5f:8b:b6:49:c8:4a:74:ed:c4:84:ff:56:7a:fb:49:
         fc:62:25:23:06:fb:54:7d:c5:c6:24:20:5b:30:c7:8b:2c:49:
         c1:b0:87:09:40:77:4d:c7:5e:60:67:f4:2e:0d:ee:0b:c6:61:
         02:20:71:e4:43:d7:c0:d5:cd:68:3c:f0:04:15:8b:68:24:f4:
         02:71:03:31:6f:e5:a6:91:e9:55:da:4f:be:3c:3e:a9:b5:c3:
         2b:89:af:2b:32:7d:dd:37:2d:79:62:be:20:b7:fd:57:ed:10:
         25:c4:51:14:85:32:92:50:f8:b8:ff:89:40:e6:50:45:14:2e:
         b2:8f:d9:64:82:a0:9c:8c:32:70:c6:36:fb:83:1e:79:5e:ec:
         e3:3b:98:7d:ea:c4:ed:72:9a:ec:0e:b1:e5:8e:12:54:b7:ac:
         4f:61:86:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:32:45 2025 by rpki-client