Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa
File:                     90a9dec8-a24a-3de0-9901-58e74af63e3e.roa (raw, json)
Hash identifier:          SBfyDSfghV9ii2lsBA7chkzEqEb9uOOX+2RA/kXyBxw=
Subject key identifier:   E8:E0:23:91:FF:5C:5D:38:47:40:F2:3F:F9:1C:57:53:E9:A3:BC:1D
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F432858480BDA6F3A7B40A7556AF25300
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     22147
IP address blocks:        208.118.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:6f:3a:7b:40:a7:55:6a:f2:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=7e07c745-ac6f-41a5-b9fe-7dc60f5ea307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:42:66:cd:e4:ef:6d:54:40:a5:3c:15:2c:52:
                    4f:83:b3:f1:0d:59:bb:30:43:9f:6a:82:6d:4f:6a:
                    54:e0:b8:29:9d:84:01:38:d2:a3:5f:82:d5:91:5b:
                    52:42:18:d1:34:d6:17:8c:4c:65:20:a7:9d:f9:c8:
                    32:8e:f0:64:ea:ef:d8:33:4c:fc:c4:75:3a:6f:18:
                    e8:54:bc:fe:69:07:d6:1f:9e:be:69:43:26:92:92:
                    79:9a:ca:36:63:62:44:22:dc:63:77:d2:17:94:39:
                    c4:41:9d:01:15:9c:6b:3f:6b:bb:f0:a8:e8:26:d4:
                    9c:ee:9c:c3:f2:db:0c:95:ea:d6:e0:1b:3f:b1:df:
                    16:71:83:87:1e:07:1b:57:ad:6d:7c:72:cd:56:99:
                    e5:ae:cf:54:d5:6f:44:7c:cc:c1:2e:13:22:a9:1d:
                    cc:b8:a8:e9:aa:3a:e4:6c:d7:82:0b:e0:21:25:27:
                    73:b4:eb:47:e7:7e:9b:a7:bf:67:e6:39:cf:fb:04:
                    eb:10:6a:04:16:da:ce:f1:d6:a8:c7:44:7f:d4:02:
                    25:9d:63:ba:15:44:66:74:45:11:4f:c3:0d:91:93:
                    9f:7e:df:d0:ad:dd:df:2a:c5:f3:46:07:45:3e:17:
                    cd:a5:f5:2d:37:3e:41:39:48:a7:e0:ce:90:ca:03:
                    f2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E0:23:91:FF:5C:5D:38:47:40:F2:3F:F9:1C:57:53:E9:A3:BC:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.118.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6b:16:48:fd:2c:61:36:73:dd:86:6f:dd:42:db:bb:da:8e:
         24:ac:b2:bb:90:7f:c7:ae:04:f9:80:d2:b2:d8:97:23:13:9c:
         77:05:5b:b4:00:47:68:e5:a0:b0:fc:6f:4d:f2:11:39:dc:f7:
         e2:fa:6b:7c:e5:dd:ea:41:c6:fa:d5:30:35:de:3a:01:7b:0a:
         8b:44:4a:43:6c:60:a5:72:db:af:8d:47:14:19:ec:c2:a2:cf:
         36:4a:ed:6b:a6:28:ff:b9:8b:e2:79:f2:dd:e5:43:3d:79:83:
         a5:b1:16:7e:35:07:23:83:72:af:d0:23:dc:e0:d7:0d:10:89:
         da:a8:8b:c0:08:af:58:14:78:d5:ee:e2:87:72:5b:93:66:fa:
         c8:72:98:31:28:84:8c:a8:be:33:ba:7c:72:75:14:be:8b:72:
         a0:25:24:2c:c9:12:77:f9:56:3c:6d:c7:95:97:27:32:72:88:
         bc:0a:6f:ef:e7:1b:2f:04:be:ac:ab:0f:34:52:fb:e4:48:c6:
         ce:e6:fb:4a:74:3b:b3:db:15:9b:90:5a:d7:6b:2d:7e:d1:5d:
         48:db:ae:26:11:0d:94:0e:1b:3e:61:3c:e7:f2:96:76:53:e5:
         97:01:00:f7:53:5a:4a:48:9a:78:0e:5f:85:2d:ad:56:e0:58:
         c5:a0:ee:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:08 2025 by rpki-client