Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/e05bca2b-432a-3d27-ba76-a5e2b050cf3f.roa
File:                     e05bca2b-432a-3d27-ba76-a5e2b050cf3f.roa (raw, json)
Hash identifier:          t67dl3uU2M6r0Ju1MsDmuRQ8Ae9Y/cXI9JZyOMubrq4=
Subject key identifier:   62:CE:18:15:21:21:34:06:94:01:64:1F:39:9A:66:37:E1:2A:70:E9
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F43285849ABB49E801F1500B5613CE780
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/e05bca2b-432a-3d27-ba76-a5e2b050cf3f.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     19437
IP address blocks:        208.79.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:9e:80:1f:15:00:b5:61:3c:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=d2d81b17-b947-44d7-ad17-26658c67bde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c0:8b:93:a2:f8:5c:f0:ca:75:76:34:56:dc:
                    bc:17:a0:21:26:ef:0e:31:30:05:b7:13:d8:4a:c0:
                    63:e7:6c:c9:82:10:9d:63:cb:96:21:ff:11:e8:87:
                    8e:c8:fc:dd:31:29:8e:ff:14:c2:4a:37:98:f4:83:
                    37:a0:6e:5e:20:86:59:e9:8d:1c:3e:ed:ba:fe:49:
                    45:8b:a5:f0:78:16:52:1e:6b:2c:52:08:6b:0b:68:
                    ba:29:45:0e:60:97:a8:af:b0:4e:66:c5:6c:3e:e6:
                    a1:c3:ff:06:5e:b6:99:6a:00:59:11:99:41:ad:d9:
                    f2:66:6e:74:15:57:fd:05:4f:92:ec:b5:01:5a:86:
                    34:ef:88:1e:cb:c9:ec:57:26:9b:83:66:5a:d6:7d:
                    1f:3f:3c:b5:0c:8a:59:90:c8:fe:3d:b2:da:0b:54:
                    4a:6f:30:ce:2f:cf:b2:e0:72:cb:c7:c6:bc:69:8f:
                    f8:a9:fc:dd:a1:7b:5e:77:4e:8b:bb:db:45:a0:c0:
                    dc:61:f4:43:c6:08:c3:42:f1:79:74:ae:c3:d3:fc:
                    a4:33:c2:71:5a:c2:23:e7:75:d9:2a:8e:a1:2f:2b:
                    f7:a5:8b:9b:d8:dd:10:16:68:99:e1:b1:b5:10:63:
                    cc:03:b6:df:6d:26:97:47:52:e0:fa:6d:c7:6c:a0:
                    09:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CE:18:15:21:21:34:06:94:01:64:1F:39:9A:66:37:E1:2A:70:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/e05bca2b-432a-3d27-ba76-a5e2b050cf3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:6e:16:23:5f:2f:4d:d5:76:2c:71:b8:28:22:5b:45:22:23:
         64:12:bd:73:9b:3b:a4:ef:48:85:32:05:d8:d0:22:e7:ba:e0:
         a9:ac:66:fd:02:5c:d6:ee:99:82:d5:6b:05:38:a9:8c:10:27:
         c5:d8:ba:81:83:1c:6b:35:6c:fc:ac:4d:6a:23:e2:3d:75:57:
         e4:dd:d1:52:48:c5:47:77:84:e9:bd:51:2d:a0:e7:96:9a:60:
         a9:c3:12:72:af:1f:2d:24:fd:7b:cc:58:fd:30:2d:3b:19:cd:
         43:1d:be:44:cc:e3:cd:1d:5e:1f:65:e3:0a:3b:75:b7:8e:30:
         45:5d:89:74:60:5c:65:4d:63:91:94:c5:f5:39:d7:f3:6d:1e:
         0e:45:1c:ae:b5:92:4c:a7:35:9d:c9:35:35:10:e0:2b:ba:ee:
         1f:8c:57:12:9f:3b:3b:ba:27:94:d3:b5:2b:db:c6:8b:ae:c7:
         ba:a1:51:e5:5c:e6:a7:c1:f7:0e:33:bf:b7:81:b1:77:69:83:
         4f:1f:28:e9:b5:10:49:47:ae:12:ad:84:11:0a:16:96:e0:6b:
         14:b0:30:bf:bc:c0:d2:f2:67:72:20:3d:65:5e:08:b1:65:fd:
         4a:1a:7c:d1:9a:d4:6a:64:ec:cd:4e:04:9f:98:81:6f:a5:da:
         da:4c:99:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:34:35 2025 by rpki-client