Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/0fc8f4c5-ceae-33f4-bb61-e2384f2eaf5d.roa
File:                     0fc8f4c5-ceae-33f4-bb61-e2384f2eaf5d.roa (raw, json)
Hash identifier:          9nWrAoSRAhzAibaTCX5N1r06E9TuXvVurq5L7Ct67Aw=
Subject key identifier:   D9:8F:68:AB:A4:6E:A9:6F:F9:3C:7E:75:16:EB:42:EE:8D:B3:0F:61
Certificate issuer:       /CN=cbe51a2e-768b-4b93-baac-8cae43186078
Certificate serial:       010D0C9F43285848E9CBD8AEF6741EF3438D4100
Authority key identifier: C9:95:CD:3F:9F:7E:84:04:FF:F1:FC:17:A5:0C:DC:3F:E2:2F:56:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/0fc8f4c5-ceae-33f4-bb61-e2384f2eaf5d.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     394923
IP address blocks:        185.90.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/cbe51a2e-768b-4b93-baac-8cae43186078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/cbe51a2e-768b-4b93-baac-8cae43186078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:d8:ae:f6:74:1e:f3:43:8d:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe51a2e-768b-4b93-baac-8cae43186078
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=ea5c66ac-2cdc-4873-99ab-6548da1dc1b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:fa:20:b4:ce:26:4c:ca:cd:06:04:91:98:
                    1a:05:80:8e:c9:86:46:9a:36:a5:92:da:81:cd:41:
                    3e:f8:24:68:e4:eb:e7:bc:53:06:12:e0:d7:d6:f9:
                    03:59:cf:0d:4a:5e:5e:00:da:40:c2:f5:48:98:36:
                    db:b7:41:56:51:ad:e6:e8:cf:1b:ba:17:77:c3:fb:
                    3a:ea:ed:39:d0:40:4e:56:5c:85:ea:7a:f6:ec:84:
                    8f:0a:5e:14:c7:4d:18:d5:8d:1e:1e:e2:0d:92:94:
                    7d:e9:b1:61:53:f3:f1:59:46:20:04:14:50:61:a3:
                    a0:5e:37:7f:8d:87:2b:7c:6f:06:23:03:e6:99:37:
                    1b:29:3f:e4:97:78:e5:ea:cd:a3:c8:02:39:42:b9:
                    6f:42:3f:de:88:6c:9c:5b:94:c7:78:6f:0c:f7:a9:
                    fb:bb:6f:97:e9:c5:5c:d3:fc:0f:cb:72:ff:44:34:
                    67:0c:6b:7b:fe:7b:44:b3:f0:19:57:8c:8d:64:ed:
                    b4:81:7c:10:c9:a1:45:d8:b7:8e:3a:68:8e:76:88:
                    51:e7:7b:35:a2:0a:23:11:e4:ef:6f:c7:6c:cb:28:
                    c9:50:3a:31:3d:fb:2c:76:57:d1:85:ba:bd:3a:d4:
                    48:df:93:a2:d4:7c:85:52:cc:dc:f0:3d:7c:98:8e:
                    13:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8F:68:AB:A4:6E:A9:6F:F9:3C:7E:75:16:EB:42:EE:8D:B3:0F:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/0fc8f4c5-ceae-33f4-bb61-e2384f2eaf5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/cbe51a2e-768b-4b93-baac-8cae43186078.crl

            X509v3 Authority Key Identifier:
                keyid:C9:95:CD:3F:9F:7E:84:04:FF:F1:FC:17:A5:0C:DC:3F:E2:2F:56:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.90.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:f4:a9:38:46:c6:e4:fa:5d:1f:b7:51:14:61:55:92:15:29:
         74:bc:09:38:76:87:0e:ef:f1:f0:61:5b:c8:3d:b6:f2:70:99:
         93:87:dd:2e:89:a2:01:09:c6:68:40:f9:e5:25:bf:21:21:98:
         ed:12:d1:9f:3c:dc:29:af:fb:70:9a:41:15:d9:33:47:db:bb:
         a2:b7:34:5b:ce:43:bf:0d:fb:70:07:ac:c4:33:9d:1e:7d:16:
         8b:04:ea:41:a8:b6:fa:5f:3d:e1:42:bb:cf:b5:a6:f7:90:f5:
         47:30:37:3a:d2:a0:89:e0:51:83:d1:8a:55:fa:24:8f:97:02:
         be:a9:66:56:7b:d3:74:20:0b:56:ff:34:ae:4b:f8:57:18:f6:
         51:b1:7e:b8:1f:04:85:0b:9b:e5:ef:72:36:22:70:bb:82:87:
         e7:b3:e4:82:b9:63:55:5f:9b:0a:98:24:bd:5b:78:e2:df:48:
         0c:c3:01:49:ef:27:0e:ab:c3:96:c2:18:f8:03:f5:75:f0:9a:
         8b:4e:41:0e:d0:7e:28:60:c5:56:82:b7:af:cc:d4:f2:fa:a4:
         0d:76:fb:50:76:16:2e:93:48:7e:19:09:d6:2d:8f:e4:7f:71:
         2f:fe:3d:41:fc:92:94:a1:f0:d7:83:95:39:9e:3f:d1:88:b7:
         23:0a:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:42:22 2025 by rpki-client