Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1cada4f6-e996-39b1-b7c8-47a33c62fb32.roa
File:                     1cada4f6-e996-39b1-b7c8-47a33c62fb32.roa (raw, json)
Hash identifier:          2LDqyToHY6uqk09KykkfYTdC1HU5D1kf3EovkN3c2f8=
Subject key identifier:   CB:4D:39:5F:1A:22:A4:3D:A4:61:5D:C0:18:A3:8B:6F:68:E5:18:92
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849D85F96CCA36CAFE501B18100
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1cada4f6-e996-39b1-b7c8-47a33c62fb32.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     4997
IP address blocks:        208.39.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:96:cc:a3:6c:af:e5:01:b1:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=876b7b5d-7fee-4a7c-8577-e0d1774a1d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b6:60:67:6b:5c:94:70:05:8a:a8:e9:26:c6:
                    8a:8a:9d:ab:19:63:f4:20:7a:d7:c6:fa:d8:48:a0:
                    42:38:ca:e1:67:31:37:68:9c:2d:63:df:0b:dc:4d:
                    05:72:54:f4:55:93:ef:e3:c2:75:11:e3:a8:87:7e:
                    d3:d8:c4:33:37:16:25:0f:13:8d:17:c9:ff:bc:93:
                    9d:18:b1:38:ab:34:86:64:d3:c5:a0:31:e4:ca:ae:
                    18:ad:ac:40:61:bd:fd:16:c4:58:7c:01:98:f7:78:
                    34:83:8f:9a:dd:ae:e2:30:42:dd:4e:af:42:e1:29:
                    d4:83:8d:ae:71:f3:86:a8:d7:59:ba:58:fc:7d:bb:
                    af:2a:2b:2f:9b:47:22:5d:df:63:8e:c1:5e:64:2b:
                    0e:24:52:d5:e4:2f:df:4a:6a:01:82:a4:ac:27:36:
                    a7:db:c1:fd:09:8a:46:d8:5c:9b:82:33:0a:cf:e0:
                    d4:95:9c:2c:b8:d3:e2:30:ee:67:a9:ff:e9:62:f1:
                    0b:d1:8b:85:e3:32:4e:dc:0a:7d:f6:4a:74:86:4d:
                    6d:06:25:1a:1c:1b:ce:d0:35:8a:d4:c7:37:8e:84:
                    15:91:c4:8b:29:d2:d6:35:5b:62:a2:c5:2a:47:ab:
                    29:35:d8:2d:22:0a:5d:60:c7:0c:4a:7d:60:ab:5c:
                    c7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4D:39:5F:1A:22:A4:3D:A4:61:5D:C0:18:A3:8B:6F:68:E5:18:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1cada4f6-e996-39b1-b7c8-47a33c62fb32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.39.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:28:13:44:3d:8c:72:f5:88:41:ba:21:8d:99:ef:42:1f:20:
         d6:a8:a0:0e:8b:4d:23:cd:06:82:bb:4e:3e:86:5e:d5:35:a9:
         5d:23:00:87:64:4c:74:78:e4:d8:83:76:eb:68:6d:b1:82:d9:
         4f:c7:70:51:ef:22:62:72:c0:c0:a0:ff:c8:0d:a8:1e:eb:d4:
         4d:f2:61:6e:41:15:3a:c7:11:1e:ab:47:21:34:c6:3c:1f:65:
         64:84:fe:5e:99:dc:96:a1:c7:27:84:2d:66:ec:5c:96:67:9d:
         d8:92:02:e4:06:ef:41:30:57:73:d0:4e:24:e6:c5:bc:f6:89:
         38:3d:99:de:ec:5a:a0:64:39:c7:6a:17:f2:8b:f7:6c:c0:be:
         a7:b9:ee:a9:b9:74:17:82:a4:75:46:84:a8:9b:e1:9e:be:84:
         5f:60:cb:44:f9:cb:0c:ee:07:43:21:fb:f8:f7:db:07:a5:99:
         d7:40:3e:7f:57:b9:f2:f9:e0:80:80:5b:ee:52:31:d1:4b:94:
         e6:51:d2:2e:36:ae:8c:d7:4b:1f:83:64:1e:f6:35:9b:6f:75:
         26:9e:27:87:9e:2b:35:85:80:01:af:d7:d7:63:28:e8:9e:3d:
         48:bb:fa:15:60:02:45:f6:c4:b6:7d:14:41:23:5e:51:fd:e4:
         e1:7a:8c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:37:37 2025 by rpki-client