Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/e9012aaf-9fd7-363b-93c1-90f593527490.roa
File:                     e9012aaf-9fd7-363b-93c1-90f593527490.roa (raw, json)
Hash identifier:          FwHNP3NjSP16VKpdH5cjj/vE99jggcFrxVyDh99RoXA=
Subject key identifier:   DD:C6:48:81:C8:72:0F:E6:9D:31:9F:D4:D0:5A:3F:EE:FA:A4:47:25
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849D85F971C55901D06DFCB6F00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/e9012aaf-9fd7-363b-93c1-90f593527490.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     20109
IP address blocks:        208.39.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:97:1c:55:90:1d:06:df:cb:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=10a1cfc0-7f4d-4647-9dc4-5824dbfc31e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:40:cd:47:c3:dd:53:c9:6b:37:f3:e2:e9:39:
                    ea:28:73:e8:bb:78:c5:d5:d9:6d:f6:14:ac:8d:6d:
                    91:d1:3c:65:50:37:e9:ff:3a:d6:3b:a0:78:e4:39:
                    a3:ec:2f:26:e8:df:de:dd:da:bf:10:6b:7d:cc:24:
                    ac:43:00:13:db:ac:1a:ab:2f:35:c4:6a:60:44:aa:
                    e2:b8:28:a0:b6:b1:f2:eb:1c:13:7c:d2:b6:c4:ad:
                    fd:c7:4a:ba:b6:b8:d8:a6:61:5a:0b:d1:c4:6a:80:
                    29:a5:1b:80:ba:d6:30:6f:51:da:76:fe:03:bd:1b:
                    3b:da:a5:86:62:25:c5:9c:6f:1a:41:2d:d5:c7:7a:
                    14:db:c7:ed:54:92:66:da:39:90:56:84:39:d1:d2:
                    a5:d5:0e:11:a5:9c:54:15:90:ec:59:e1:3a:df:35:
                    d9:25:f2:59:55:7a:33:22:ea:95:42:c7:64:e2:9c:
                    3d:7b:1f:c4:45:bb:05:44:8e:89:03:a0:be:ec:05:
                    47:e2:31:b2:86:73:d5:64:90:1e:95:4f:22:e4:5c:
                    18:83:3d:89:9c:d9:7d:60:2b:9f:4f:c9:44:8b:9c:
                    f8:8c:0f:d1:fa:90:d7:96:0c:af:7d:63:b7:0d:f3:
                    82:f7:1f:22:14:6c:91:c1:25:4e:b2:4b:2c:2a:b2:
                    c7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C6:48:81:C8:72:0F:E6:9D:31:9F:D4:D0:5A:3F:EE:FA:A4:47:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/e9012aaf-9fd7-363b-93c1-90f593527490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.39.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:de:11:00:d7:0d:3f:84:7f:c3:27:4c:25:d1:e3:3e:cb:c7:
         70:14:4b:c3:09:19:e0:ec:25:44:7f:4c:a7:7f:a8:9e:2b:f8:
         ea:5d:1e:79:61:f3:08:c5:24:23:a3:e2:38:e2:7d:89:2a:71:
         33:74:36:62:52:0a:dd:96:5b:de:f3:8a:dd:34:9e:7d:a5:2f:
         42:53:40:fc:c2:58:f6:f2:67:32:71:b2:22:a8:7a:9f:86:8d:
         10:09:94:d6:6e:67:56:69:3b:1a:4d:2e:3e:13:fd:10:2c:34:
         c7:c1:b8:a2:7d:fb:97:de:1e:52:4e:a5:69:b3:0d:5f:ed:0a:
         d5:19:a3:46:74:d3:75:24:0b:3a:3f:59:ab:88:f6:ea:70:a0:
         44:c6:b9:93:4f:2e:ed:58:37:6d:09:35:a5:1c:69:66:31:d0:
         a9:7f:b3:01:a8:a9:2f:b7:46:55:3e:5e:f6:ea:47:5d:06:07:
         00:b5:fc:dc:05:55:05:73:e8:64:75:cd:44:4a:cd:82:0b:02:
         83:46:5d:4e:1b:e4:9a:57:44:cb:3f:c6:20:59:ec:cb:7e:d9:
         cc:66:ed:6b:57:64:20:2a:76:84:a8:f4:75:c2:9f:b7:9b:70:
         44:64:f6:31:c5:b4:12:9c:7e:4d:86:f7:a4:18:06:62:40:c5:
         f3:c9:32:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:45:25 2025 by rpki-client