Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ae2663db-f58b-3f90-9758-cb93c52b55eb.roa
File:                     ae2663db-f58b-3f90-9758-cb93c52b55eb.roa (raw, json)
Hash identifier:          5TIxT4cAVyWbQd+OK7UCqb8ro6ZjeZ7YGHoafUZMgss=
Subject key identifier:   AF:1D:FB:28:48:E8:2C:C8:D2:10:CD:79:4B:17:1E:49:60:20:A1:1B
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285849B57A1613B62CE42AA3898040
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ae2663db-f58b-3f90-9758-cb93c52b55eb.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     55246
IP address blocks:        209.237.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:16:13:b6:2c:e4:2a:a3:89:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=2ba4019d-5104-4977-a453-4e9634135f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3c:b8:41:7c:05:03:7b:05:7f:ab:0f:85:24:
                    34:ed:28:95:b0:94:d5:3b:39:66:b0:7f:c7:f4:c6:
                    0c:8a:aa:e0:81:29:71:a4:bd:8d:87:5d:27:5e:f4:
                    4e:32:3f:45:91:86:ed:f4:7d:42:3f:43:db:9b:5c:
                    68:87:bb:52:e7:de:07:7e:24:6c:cb:7d:e2:84:dc:
                    e5:50:ba:51:1e:18:e1:5b:41:23:d1:34:55:76:bc:
                    5e:11:d4:79:b7:ef:97:97:20:e2:0d:cf:dc:b6:8d:
                    15:db:3d:56:c0:65:d7:ea:db:f4:3c:cb:02:66:a4:
                    9c:0e:de:78:a2:e5:19:e8:bb:b6:a8:71:af:82:4c:
                    9c:f6:d0:34:93:a5:b9:8a:1e:9b:13:5f:53:11:42:
                    f4:34:69:a8:f2:90:e7:2b:14:61:85:e2:9a:d4:47:
                    d6:b0:ae:99:7f:d6:13:75:77:fc:0f:29:ab:3d:b4:
                    63:a2:59:47:ed:47:09:8c:9c:be:81:e2:3c:d7:30:
                    ee:e3:67:ee:90:01:8c:8d:32:fc:c1:b1:15:54:44:
                    95:ce:9d:8d:1e:71:85:d3:3a:b0:04:3d:6d:7d:d8:
                    40:6b:6e:8e:f5:8a:fb:a9:5b:a4:2c:7d:ea:f4:ac:
                    43:15:7d:bb:46:a6:bd:a8:8b:7c:32:4f:50:ca:5e:
                    37:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1D:FB:28:48:E8:2C:C8:D2:10:CD:79:4B:17:1E:49:60:20:A1:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ae2663db-f58b-3f90-9758-cb93c52b55eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:ca:6d:02:5c:e7:a2:73:a5:f6:ac:b3:f2:4a:fa:09:0d:1e:
         4d:09:09:24:6c:68:a8:d0:bf:62:da:77:c1:f6:53:44:a8:0f:
         58:46:83:98:2a:77:03:95:84:e0:4e:b2:2b:79:4e:27:7f:29:
         92:bd:99:8e:98:8f:40:0a:82:c6:48:d1:e0:aa:81:2c:6c:2b:
         7f:51:8c:1c:8e:04:73:89:bc:10:ca:76:7b:18:a8:74:ba:d7:
         70:d4:57:65:07:a4:cb:f5:6b:39:e1:5f:ed:6e:f9:85:b4:9f:
         e7:3e:5a:da:82:81:eb:b0:85:2a:f2:b7:d8:f4:f7:43:d3:aa:
         b3:81:35:78:d4:59:32:23:89:b5:25:a3:b4:c8:f5:5a:f2:5f:
         cf:7c:95:83:3b:7c:6a:d2:7f:03:b0:20:4d:06:07:eb:3b:94:
         df:35:38:88:2e:00:54:21:99:7e:93:97:14:b3:ad:d6:43:d3:
         34:b5:b2:53:52:e7:12:ba:79:3f:85:f5:94:8c:44:07:6d:8e:
         9e:82:db:5b:76:63:59:ea:01:9b:62:66:10:9b:3e:38:0c:30:
         4e:d7:f0:34:c7:d0:09:e1:f9:89:55:1d:79:69:ee:4a:c7:ec:
         8c:9f:6e:d7:5f:8a:21:dd:3c:bf:30:75:48:2d:69:0d:6e:b3:
         36:ca:a3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:53:35 2025 by rpki-client