Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9872dc64-0988-3b5c-9553-f5d1b290496b.roa
File:                     9872dc64-0988-3b5c-9553-f5d1b290496b.roa (raw, json)
Hash identifier:          ayWekPV9ax7afXS8/q6jy/Gm7vfhli75bNwpmA3tobY=
Subject key identifier:   A7:8C:B1:13:C2:32:86:9E:7E:80:00:8D:8F:88:94:A9:88:71:28:C8
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F43285849C20A0767318CF5B9E176C7C0
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9872dc64-0988-3b5c-9553-f5d1b290496b.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     397514
IP address blocks:        208.109.153.0/24 maxlen: 24
                          208.109.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:07:67:31:8c:f5:b9:e1:76:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=ff012ac5-c5c3-4305-8f74-ee0092332ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:c5:d9:6c:33:ad:78:19:ce:7c:c2:9d:1f:
                    9d:ac:6c:4d:33:f9:25:c4:53:ef:96:59:f6:f7:ff:
                    d9:58:48:a4:82:d5:2a:35:32:3f:b4:9b:c4:0d:a0:
                    53:9c:4b:8f:24:c8:98:ad:77:fd:88:56:2b:89:4f:
                    02:fd:ba:56:e3:46:69:8b:9b:e2:e5:c3:7c:92:6b:
                    e4:da:af:7f:8f:6f:9d:18:51:15:8f:57:09:72:c2:
                    56:17:30:4a:af:90:97:27:e5:7f:38:06:e9:b5:00:
                    f0:b0:29:f0:a3:8b:f8:51:3a:75:67:6a:38:ac:8b:
                    04:1a:00:b8:dd:ab:cb:d8:8e:32:ce:d3:9e:5e:e3:
                    c3:a3:47:2e:fc:03:9a:bd:82:7b:e7:84:38:b4:cd:
                    81:3c:c4:af:4a:2e:9b:e8:cd:43:1d:f3:1b:af:0f:
                    80:c2:28:e5:d6:13:d2:31:38:94:9d:b2:15:46:8f:
                    61:95:ac:8a:0b:71:bd:6e:fc:44:e3:3d:6c:45:95:
                    5f:a1:57:fb:e2:14:d9:27:16:61:98:51:c6:36:94:
                    00:ad:47:88:6b:90:85:6d:d0:3b:fb:87:b8:ba:17:
                    2d:8c:fd:e0:aa:53:63:a1:50:49:c1:dd:d8:9e:4f:
                    e1:21:82:57:03:b6:55:2b:b7:8e:ad:5c:cd:f6:1c:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8C:B1:13:C2:32:86:9E:7E:80:00:8D:8F:88:94:A9:88:71:28:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9872dc64-0988-3b5c-9553-f5d1b290496b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.109.153.0-208.109.154.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:03:7d:f7:1d:cd:a7:ad:3d:07:6c:8e:c5:e7:83:60:f3:8e:
         91:a6:11:fb:96:44:d5:b5:91:a2:74:3d:d8:cb:3b:6b:09:8a:
         fe:ba:07:2b:da:d1:09:7f:3e:e5:f7:2b:6a:ad:09:71:d2:82:
         3b:60:1b:11:30:78:d4:24:92:37:41:de:df:0d:3e:fd:2d:a6:
         e7:dc:27:b8:af:ab:31:ba:6b:f7:d4:c8:cf:85:0a:56:7c:6d:
         a6:33:d2:84:a2:97:bd:8f:c3:74:a3:2e:be:38:71:cd:83:44:
         36:15:45:92:a0:9f:44:8a:47:90:9f:e3:d7:57:7a:32:0a:15:
         6d:0d:84:f2:9c:b3:f2:9d:7b:08:19:e5:ed:60:9f:d5:46:f4:
         e5:73:fe:50:cc:ac:fd:80:72:12:dd:85:86:d0:5c:99:1d:9f:
         08:23:8b:8a:f2:d7:04:09:12:53:b0:da:f1:34:97:45:ac:29:
         cb:91:2c:09:b4:94:c4:77:68:8d:a3:b7:b5:f1:be:9c:ef:fd:
         d3:08:8f:4e:50:8a:cc:32:93:34:cd:28:4c:0b:bb:b3:1c:c7:
         a8:d1:ab:eb:cb:2c:15:e5:0d:02:32:fc:04:d0:f0:1b:19:ed:
         e7:fb:8c:d8:48:08:a7:90:0a:48:ec:e7:3d:51:65:7e:2e:a1:
         38:c0:6b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:13:47 2025 by rpki-client