Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/09bc33a9-c3ad-3518-882e-c74760a95334.roa
File:                     09bc33a9-c3ad-3518-882e-c74760a95334.roa (raw, json)
Hash identifier:          NNwfp2vHOB/j8lFcj4rj9o2XbKQTKf7Wb/NqnJpG7t0=
Subject key identifier:   BC:82:04:77:05:24:FD:71:9C:EF:BA:08:77:97:0F:C3:50:0E:DE:0F
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584976A98E02FF03693C2777D180
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/09bc33a9-c3ad-3518-882e-c74760a95334.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     13768
IP address blocks:        69.90.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:8e:02:ff:03:69:3c:27:77:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=8f0a53a9-bc78-4653-abbe-770854f6c15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:64:e2:c0:34:79:48:57:ec:54:22:75:97:db:
                    d0:bd:fd:a1:34:d3:3b:56:ee:c1:f9:f4:bc:06:b7:
                    94:c5:84:1a:ce:08:78:3c:f2:92:67:fa:cf:52:50:
                    7e:98:08:fb:85:ba:89:0e:63:da:73:0b:d5:98:61:
                    58:c5:92:93:14:bf:66:8d:99:8f:6f:fe:c1:5d:85:
                    32:c8:55:1a:04:54:74:45:b2:72:de:c5:be:93:cc:
                    b6:2b:b4:f6:94:2e:68:38:3e:ad:61:f1:24:23:15:
                    92:03:4a:25:6c:b8:eb:eb:07:34:40:2d:48:09:e2:
                    d6:cc:d2:55:6d:d3:fa:77:1e:f0:dd:ba:ca:13:15:
                    b3:61:81:6e:1d:de:32:f3:22:60:05:3f:b8:ca:45:
                    0d:13:02:97:23:56:bb:f7:8f:2e:f6:bf:e4:ac:76:
                    d2:dc:0b:54:22:0a:64:7a:7f:95:81:25:a7:6c:4f:
                    e8:ac:19:33:93:7d:ac:2b:3f:cc:36:58:32:95:3b:
                    e2:6c:9c:c6:93:c4:6f:f6:67:f1:8b:a6:27:14:f5:
                    50:40:6b:28:f0:a3:8a:3f:fd:3e:ee:df:f8:6f:3b:
                    c8:7e:c3:1b:df:6d:8d:42:85:c1:5b:56:55:d5:ed:
                    55:e9:09:81:3e:0f:a6:de:35:c0:2c:5c:12:7c:ad:
                    fe:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:82:04:77:05:24:FD:71:9C:EF:BA:08:77:97:0F:C3:50:0E:DE:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/09bc33a9-c3ad-3518-882e-c74760a95334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.90.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3b:5b:56:2f:87:7f:50:a8:53:70:b9:12:d3:82:95:27:0a:
         70:e4:64:3a:50:26:e1:05:d5:89:d5:60:27:52:5b:ed:b1:86:
         47:9e:6f:fe:a4:d4:cf:57:95:d6:b4:30:fb:d7:8b:52:56:a3:
         bf:d2:f4:26:74:a3:2d:3e:e9:4b:52:35:4b:05:85:b8:01:43:
         e5:c9:d0:db:56:e2:17:36:36:0d:99:46:c8:ff:65:aa:4c:68:
         20:c6:9b:a7:04:2f:fc:b1:ab:f3:86:4b:db:2e:a3:8c:c0:24:
         ae:45:19:39:70:1b:b4:9f:6f:7c:bc:c0:d9:23:8a:70:a5:41:
         20:ac:d7:9c:44:91:42:26:39:92:9f:26:41:68:4c:25:dc:ed:
         c2:e0:b3:96:c8:9f:55:42:93:34:a6:c0:f1:1a:f3:83:9f:f4:
         06:2a:fc:ae:2e:8c:40:3d:ad:1f:36:fd:d4:8f:13:25:e7:6f:
         ce:c5:57:93:38:c0:3f:c3:28:3f:12:5a:46:6a:f0:de:f9:a9:
         21:64:13:65:24:4c:0e:c5:19:ee:62:82:8e:5f:f5:75:b3:ef:
         52:c8:5a:51:44:a3:74:2e:2f:d4:9f:fd:e8:c9:c4:50:10:74:
         fe:e8:59:b3:70:f4:ca:2a:98:15:08:ff:5d:87:d2:de:13:de:
         b2:eb:7a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:23:22 2025 by rpki-client