Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa
File:                     5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa (raw, json)
Hash identifier:          v85zn5xPIXNbda3nILNdjTrMji5j/edoqa//78VS/TM=
Subject key identifier:   A7:BD:A1:DB:F8:38:56:32:16:A7:0D:5A:DC:55:12:F8:16:02:A9:6B
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F432858495ABEBD3838C395F7F026DE80
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     19795
IP address blocks:        208.85.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:bd:38:38:c3:95:f7:f0:26:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=6780cb9f-7219-4f20-9f11-d56d4dd96d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1e:90:bd:6f:f6:52:c9:89:37:30:cf:b0:81:
                    fe:c5:ce:9b:13:bd:d5:c1:2b:94:39:d6:e7:45:c2:
                    e0:60:27:aa:89:08:b2:5b:41:8c:d6:29:51:67:f7:
                    f2:f5:c6:ee:b1:4c:0e:45:7f:13:be:ab:6b:9f:fd:
                    e8:13:a8:28:b7:ad:82:fe:79:ae:b5:4f:23:42:8a:
                    96:bf:68:9c:89:e0:4a:af:57:32:fd:fc:01:40:09:
                    99:62:ef:aa:69:02:fb:71:b2:55:7c:b7:fa:bc:e3:
                    d3:f6:fc:e2:7d:0e:39:8b:9e:a2:65:22:b2:d9:90:
                    b8:3c:e6:df:22:e2:80:de:76:37:de:ff:35:cb:5f:
                    f9:30:22:6f:6c:58:fe:c2:75:48:97:f6:5d:3f:8c:
                    5d:96:23:d9:d3:12:27:1a:d2:33:b8:d6:d3:fc:7f:
                    f1:45:ac:3e:81:10:ba:c6:b9:3c:f6:1b:8b:6d:96:
                    a8:49:39:92:28:d1:5e:d9:9e:5e:60:91:6f:af:98:
                    0c:ae:6f:73:b9:74:36:45:90:77:94:5c:92:22:98:
                    f5:c9:51:97:33:7c:46:32:ca:1e:64:35:b5:32:bf:
                    0c:ea:d5:82:95:38:94:3e:9d:42:b4:79:91:cc:9d:
                    44:62:e2:d7:c8:91:a1:75:e9:98:27:29:fa:a0:31:
                    c3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BD:A1:DB:F8:38:56:32:16:A7:0D:5A:DC:55:12:F8:16:02:A9:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:22:12:3d:8e:67:d4:11:98:e5:76:9c:bc:01:79:ff:a5:cf:
         9c:b2:e1:4b:a0:b0:be:91:d1:d5:3d:d4:52:67:c4:34:30:e1:
         a2:62:82:86:6e:04:9f:61:8f:80:f7:8b:56:87:53:cc:2a:10:
         92:61:43:cb:ef:24:62:6d:a5:d9:ca:4a:f0:1b:20:d5:40:42:
         fe:f8:ed:d3:85:09:51:bc:cc:b4:84:13:cf:ab:91:5e:b2:db:
         60:81:90:da:51:6f:c5:51:1f:92:62:90:bd:62:bb:37:18:97:
         14:59:d5:4a:53:59:5b:3e:ec:c4:16:b8:66:71:41:9e:15:5c:
         e4:14:22:5a:f2:49:62:42:4c:d7:6c:1f:85:84:26:60:46:c7:
         59:41:72:29:a7:d2:ca:ef:df:77:cb:bb:54:09:08:99:70:6e:
         b0:c3:e8:e3:9d:ae:19:09:59:fe:e4:af:5f:e5:1d:62:31:67:
         c7:e6:cf:ff:68:8a:99:70:9f:e9:ad:49:3a:3f:c0:82:e2:2b:
         13:7f:d6:e4:31:8b:5b:9d:42:d2:96:68:68:b0:b4:e0:7b:01:
         58:b7:5d:f4:bb:b2:b9:58:08:af:43:f0:ef:0c:cc:67:a6:27:
         85:0c:6b:11:95:82:1a:5e:e9:38:19:03:69:08:d4:9e:b5:78:
         3c:37:8e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:45:48 2025 by rpki-client