Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa
File:                     ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa (raw, json)
Hash identifier:          gbSW2f2OYpbwSfpBVUY3X9/VFjrdsXdVZDbpWkn0ADs=
Subject key identifier:   72:69:C7:BE:A0:55:65:67:E4:1C:07:5F:B0:94:7A:57:CC:FF:35:A8
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F432858492E13B831A1F132BFF993A5F0
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        85.113.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:b8:31:a1:f1:32:bf:f9:93:a5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=ad8d2f37-0ec3-4622-8669-e148cfe1767c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:cd:b9:1d:88:19:52:9e:4b:d0:5a:16:1a:
                    9a:f7:2d:5a:54:ba:e4:d1:ca:ed:9c:e1:27:02:2b:
                    96:75:47:4f:91:5a:4b:1c:83:f2:d9:3b:9c:d3:a5:
                    42:f6:bf:52:bb:de:89:3e:71:53:db:70:41:5b:73:
                    c0:09:5b:6a:e4:9d:0e:d2:66:8e:47:0b:41:e5:b0:
                    9e:e8:82:ef:71:4e:c5:e4:ff:75:30:06:20:ba:de:
                    4d:a9:42:46:cc:be:20:a2:a4:dc:ea:a9:81:fc:1b:
                    3f:4a:79:41:bb:5a:d0:95:60:4e:b1:db:d2:6a:86:
                    a6:81:01:d6:2c:10:e1:08:e7:88:4a:cc:91:3a:fb:
                    67:23:68:e2:fe:55:18:a2:a0:a5:47:72:bd:14:a2:
                    f7:13:3e:63:2e:72:5a:b5:df:75:e1:9e:8a:69:79:
                    e1:03:d0:72:2a:e2:d4:7b:23:ae:2f:bc:54:33:fa:
                    02:eb:5f:c3:07:ee:d5:d2:73:f8:4d:b0:14:91:0b:
                    c7:ff:ff:01:e4:72:77:0f:dd:5e:e9:56:1f:58:b7:
                    92:a2:9d:af:53:1e:62:70:2e:ca:f2:46:82:3e:5a:
                    ff:6d:a5:df:a2:df:54:fe:03:5a:07:0d:95:11:8b:
                    0b:fb:dc:e6:55:a6:50:a9:ba:00:37:6a:45:f1:91:
                    86:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:69:C7:BE:A0:55:65:67:E4:1C:07:5F:B0:94:7A:57:CC:FF:35:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.113.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:0d:7b:b0:44:94:c2:a5:77:d4:3a:e5:be:fc:3e:14:d2:3c:
         16:81:30:79:f3:01:8b:66:32:4c:df:5c:11:fb:1e:6d:af:45:
         83:34:11:f5:3a:de:c9:11:5a:d4:c5:67:e5:26:f1:4c:0b:f4:
         8d:9f:40:68:97:85:97:c5:e8:11:d9:0d:67:96:f1:8c:79:74:
         91:fc:b7:af:45:cc:01:17:cc:f1:f2:b7:d8:2a:c9:b6:61:59:
         cf:50:3b:32:58:e6:15:ab:a0:e3:96:21:8c:1b:e3:15:02:eb:
         80:7c:fd:84:dc:9b:d3:44:46:dd:f4:4f:b5:2d:e9:f3:ef:48:
         0d:0b:4b:5c:6f:4c:f0:e8:ac:df:54:bb:a5:f0:a4:12:17:fd:
         1b:9c:92:e7:ce:0a:8e:60:08:2c:dd:d2:73:db:04:f9:25:e6:
         3a:51:8d:65:32:61:2e:c4:00:9c:d1:02:ee:53:45:12:bb:dd:
         cc:ff:cf:34:c9:50:ef:4f:27:0f:40:7e:61:61:aa:29:29:7b:
         fa:e5:7a:ec:cb:12:b0:b8:1b:01:1f:84:bf:bb:be:29:9e:ed:
         44:59:ad:21:5c:bd:23:e3:bf:90:33:fe:f7:55:67:23:45:a6:
         4d:5e:bb:a2:b7:14:0e:b9:b9:f3:de:c8:4a:d4:ca:e3:02:28:
         5f:27:f6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:50:00 2025 by rpki-client