Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/611a6ceb-0258-3db5-b11b-c977249896f6.roa
File:                     611a6ceb-0258-3db5-b11b-c977249896f6.roa (raw, json)
Hash identifier:          /mhPQ0qTw2VyGcMKXGU2SyTz2iUaRKElyEjAjLEW2uk=
Subject key identifier:   5F:77:3C:5E:03:5A:63:BE:02:52:16:C3:A6:90:09:DB:1D:70:B2:D6
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F432858487755D9AB635507DFBFD48580
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/611a6ceb-0258-3db5-b11b-c977249896f6.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        208.85.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:d9:ab:63:55:07:df:bf:d4:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=9ed0ef25-4c9d-48c6-8ce4-a78af20ffcf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:e9:3e:f9:05:03:e4:99:77:a1:9e:19:80:
                    f2:7a:a7:f6:6b:67:20:f9:63:b5:f6:b0:51:51:5e:
                    d7:2f:b5:fc:a6:60:0b:22:8d:0d:a2:4b:7a:e3:9c:
                    93:e8:f2:57:16:63:13:2b:1b:1f:b3:37:1c:05:09:
                    4b:55:0a:9b:40:1a:69:f3:05:63:9e:05:e2:cb:ef:
                    24:ef:ec:26:5c:a9:8a:6b:03:7d:5e:6b:7b:24:f8:
                    3d:b8:e9:03:8f:20:86:90:54:e8:35:7f:09:d5:be:
                    36:52:a4:d3:30:d6:dd:f5:7e:92:99:fb:9c:7a:bc:
                    8d:f9:24:91:94:a8:a5:38:a9:d5:65:2e:e9:7d:6e:
                    0c:4e:0f:88:8c:59:6a:a0:61:e3:a8:04:ba:a1:38:
                    08:07:b5:31:06:c4:65:d7:7c:27:b6:6c:25:6b:73:
                    16:14:c8:86:51:2d:b2:c5:cb:da:ed:32:e4:84:35:
                    5a:14:b5:9f:67:86:17:04:ad:11:89:68:84:ca:a4:
                    36:9a:39:c3:40:63:83:89:c2:f2:c7:97:7d:13:1d:
                    38:5b:9a:b2:9c:a5:d3:fd:67:65:8f:e6:7c:d8:32:
                    b5:df:31:84:19:e2:6a:3f:05:cb:ac:d8:6d:97:2e:
                    bf:88:2c:96:5b:a4:52:29:9a:00:53:32:af:b9:af:
                    d9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:77:3C:5E:03:5A:63:BE:02:52:16:C3:A6:90:09:DB:1D:70:B2:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/611a6ceb-0258-3db5-b11b-c977249896f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ea:72:37:19:d4:64:a4:94:d7:5a:31:6a:a8:0b:1b:bd:07:
         59:76:37:6d:2f:e9:59:52:a0:de:9f:85:75:9b:9c:62:42:e9:
         a3:15:9e:f1:1e:1f:ac:9a:8a:f8:c7:83:35:e8:b1:22:aa:24:
         c5:77:7a:9d:13:f1:24:94:46:5b:bd:9f:0a:99:1e:72:68:26:
         39:a7:93:47:ed:34:64:88:b3:26:80:9a:16:49:60:bf:40:3c:
         fe:7c:5f:24:6e:fa:98:f6:93:85:ce:a2:96:df:ec:20:78:97:
         fa:c9:f0:a0:f7:ef:b1:ab:17:15:ac:bf:64:0d:0f:7a:a4:0e:
         63:7e:38:0b:98:a9:77:fb:01:78:de:f7:74:c6:24:7d:e5:0d:
         5b:8c:2f:40:1e:cb:73:cd:a6:ad:a4:5c:93:6c:7d:87:6b:db:
         f2:29:ab:99:6d:b0:db:fe:c9:e7:2a:b8:a6:fd:76:77:7f:f7:
         5b:60:c7:1a:98:73:5d:ca:a9:33:05:70:7c:64:1b:72:17:c8:
         a2:f2:fb:32:e6:06:f9:15:1f:ce:60:44:7d:c9:f7:ae:ed:bd:
         c7:9c:9a:3c:ce:b8:df:c4:1e:0f:68:a2:6a:36:48:83:63:0d:
         ca:b5:cc:24:27:b3:53:d6:d2:95:78:84:b9:01:c7:ef:32:ed:
         24:f3:7e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:08 2025 by rpki-client