Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/7d8ad61a-3568-305d-b11c-06347f5b968c.roa
File:                     7d8ad61a-3568-305d-b11c-06347f5b968c.roa (raw, json)
Hash identifier:          q5NpfQ50ALxmTN1+lipBxBEKx7TrMB0H7zH3rf4nzMQ=
Subject key identifier:   14:9D:1D:B1:4F:8D:A5:3E:D3:DB:42:DB:90:9A:E5:89:65:60:83:81
Certificate issuer:       /CN=85ab0b8f-e87f-4660-83cc-46c357202ed9
Certificate serial:       010D0C9F43285849C20A0BE69CE7465B86039980
Authority key identifier: 9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/7d8ad61a-3568-305d-b11c-06347f5b968c.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        209.222.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:0b:e6:9c:e7:46:5b:86:03:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85ab0b8f-e87f-4660-83cc-46c357202ed9
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=24ff06df-cde0-480a-b7fc-dc21207aa786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:97:97:b9:fb:76:56:d0:43:81:c0:73:6c:86:
                    de:b3:4b:e7:c9:3d:21:9c:72:9f:a2:52:24:ab:06:
                    5c:0a:29:58:81:4f:5e:04:91:3e:19:be:7c:4e:d5:
                    41:f0:22:e2:3c:a0:6d:59:eb:aa:22:78:93:bf:34:
                    c7:b7:e7:e7:5e:3c:eb:8f:94:ab:91:ef:9a:f4:01:
                    c2:c9:f5:b9:4b:e9:9b:ff:3f:4f:3e:de:1c:d8:b1:
                    df:17:2c:9d:ef:a3:a7:0f:8e:d0:44:2d:f3:86:cc:
                    80:40:11:95:3b:d8:94:69:fe:8f:7a:5a:90:67:ce:
                    cc:54:d1:44:5a:fc:67:81:a6:e5:eb:b0:1f:3c:52:
                    6b:a2:99:c4:32:11:6c:0f:e6:31:83:fc:72:59:3a:
                    74:31:fc:c8:bc:b1:e5:e6:58:03:66:06:32:e1:b6:
                    f2:b3:7c:5a:42:7c:07:a2:3f:29:94:ed:f6:30:7a:
                    71:1e:81:fc:6d:c2:17:4b:f1:ff:bb:43:c4:a0:2a:
                    80:c7:ff:ea:bf:c5:a0:6a:b5:67:8a:6e:de:91:cf:
                    df:17:18:42:43:4c:44:b5:be:dc:2a:76:31:9f:5e:
                    9d:1b:4b:5b:e4:02:5f:09:49:af:a6:f1:14:69:6c:
                    e6:0e:4f:b1:46:d1:ab:e0:a5:13:72:ac:69:d5:ba:
                    e6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9D:1D:B1:4F:8D:A5:3E:D3:DB:42:DB:90:9A:E5:89:65:60:83:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/7d8ad61a-3568-305d-b11c-06347f5b968c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.crl

            X509v3 Authority Key Identifier:
                keyid:9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:59:47:d8:e8:77:e8:54:48:0a:e9:43:37:63:1a:fd:00:28:
         b7:5a:8c:6f:a9:4f:ff:90:d7:b1:88:b3:9c:d2:23:d4:db:8b:
         51:62:6c:51:d9:4d:ac:a5:74:e2:bb:26:39:bc:f8:78:49:55:
         33:f0:8e:04:3a:b0:d5:3e:10:d3:ad:49:02:25:ac:74:db:2c:
         b5:1f:f8:89:e7:d3:be:2f:5f:d2:65:5f:21:02:aa:fe:46:47:
         89:ee:fe:af:d2:a6:d7:1c:92:13:85:ed:b3:b3:3d:bc:80:64:
         84:56:16:52:b6:36:52:c6:57:bc:5e:75:e1:b4:f0:ce:52:c2:
         bd:35:84:f7:6c:03:1a:0e:4e:92:f4:33:c5:02:9a:78:89:c4:
         51:1e:e3:dc:93:07:d9:38:fb:cd:3c:6c:0b:a3:85:24:3f:44:
         66:d8:1b:ba:22:95:4d:bc:f7:e5:85:ea:bc:0e:36:b5:89:5e:
         33:e0:9f:d1:5e:de:62:6b:5a:be:d4:a9:db:f5:a4:ea:5d:d7:
         e5:cc:a0:89:96:38:a0:2d:7f:fd:1a:7e:69:c4:a3:73:9b:d9:
         31:fa:98:b5:1e:cd:1b:61:94:10:63:ba:07:f7:32:df:e9:03:
         af:39:44:fd:7e:37:78:6e:46:7f:6c:fb:d5:67:23:d7:87:9b:
         cf:29:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:42:47 2025 by rpki-client