Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b329ccb4-4c8d-3081-80c6-39113fd63696.roa
File:                     b329ccb4-4c8d-3081-80c6-39113fd63696.roa (raw, json)
Hash identifier:          Qt1xudJEd6SYrJ0yyUAOsYU3nrfAhzXjQMSA2iEdUY0=
Subject key identifier:   A5:35:78:CD:66:81:C7:47:25:37:CA:89:66:66:7C:12:6D:E3:B9:BA
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285849A4BACF1308EF4AB1BBE06500
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b329ccb4-4c8d-3081-80c6-39113fd63696.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36040
IP address blocks:        208.117.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:cf:13:08:ef:4a:b1:bb:e0:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=edf97eeb-106e-4008-a29f-5ec4ddf40087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a1:34:ec:cc:1b:f4:7b:ca:f3:5d:d7:5f:bc:
                    44:7b:98:54:05:32:6c:36:56:82:68:42:f6:c3:38:
                    a2:bf:41:9a:f8:37:0b:07:39:0b:82:01:1e:98:e1:
                    ef:55:12:bf:d6:be:46:ed:fc:f0:4f:66:2c:29:77:
                    96:7e:f7:77:f1:85:03:f8:0c:59:e8:71:c4:c3:ea:
                    b3:00:97:6b:cb:d7:0c:2e:73:fd:c2:8f:ed:d7:61:
                    7e:7c:8b:ed:d1:22:eb:c7:af:b7:ab:d4:0d:df:53:
                    51:1b:4e:64:3d:c0:ce:c8:a8:33:fb:0d:42:cd:9e:
                    a6:25:84:15:4d:b6:15:0b:d7:a7:dd:21:a4:f4:4e:
                    3f:89:b2:30:33:86:ba:92:e8:8d:2f:6f:34:28:1c:
                    19:c7:31:67:19:8f:5a:71:6d:14:b1:0a:a4:82:0b:
                    21:5e:72:09:bf:46:92:dd:a0:4b:35:e6:84:96:bb:
                    6a:dc:aa:1a:fa:2f:d4:a6:b8:8d:03:67:44:c8:24:
                    09:82:91:b1:f4:d8:9a:16:8a:e0:30:b0:f6:c1:27:
                    54:a1:8f:99:bb:c6:5b:d4:43:86:53:36:d7:3d:ec:
                    7f:69:d1:6a:62:90:1b:15:5d:87:40:7e:ab:bc:9e:
                    fe:ae:c9:2f:8f:ef:8b:04:4d:ff:fa:0a:60:8a:5e:
                    95:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:35:78:CD:66:81:C7:47:25:37:CA:89:66:66:7C:12:6D:E3:B9:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b329ccb4-4c8d-3081-80c6-39113fd63696.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c0:b0:af:98:b8:b5:75:b5:b9:67:6e:90:df:e3:82:b9:4b:
         7c:3f:65:71:66:16:0f:00:a9:93:8b:76:74:cb:a0:78:66:3e:
         40:ec:15:4b:12:08:25:96:41:a6:79:bc:a2:ac:ca:32:2b:62:
         e7:9f:9d:f4:ee:d0:9a:29:29:3d:b1:7d:70:52:6d:72:ef:c5:
         67:b2:73:40:bd:11:87:e6:15:58:5d:0a:29:79:29:e0:0c:41:
         5e:0e:e3:73:b3:72:c1:3b:f2:de:82:5b:82:3d:7d:12:fa:aa:
         34:8f:28:29:4f:7e:f5:0a:fc:35:9e:97:08:fd:f1:26:40:ad:
         f8:d3:16:bf:5f:b8:e8:e5:79:93:93:78:e5:36:9d:48:35:a3:
         53:a6:fb:14:f2:98:ce:a3:34:d9:ae:d7:03:ab:c4:48:40:6a:
         0c:7a:aa:55:9b:7f:b0:27:ae:3e:41:d9:58:50:f8:27:ea:5b:
         e0:b0:0e:d3:1f:51:cc:58:88:86:aa:99:78:0e:f9:bf:61:65:
         b8:af:9e:15:17:87:5b:55:cf:c8:66:79:77:6f:ea:37:ba:57:
         7b:ff:90:dc:c9:c5:49:1f:a8:0d:10:af:c7:82:b1:50:f4:8e:
         65:48:6f:71:d7:b6:e1:bf:d3:95:32:d1:73:9d:95:c2:61:37:
         f7:ba:77:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:44:05 2025 by rpki-client