Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/6088769e-3429-32bd-88b7-3ac8d54f15a8.roa
File:                     6088769e-3429-32bd-88b7-3ac8d54f15a8.roa (raw, json)
Hash identifier:          7nA06UfpGLg4k4TFL31TK/fqAHknhkP8J/9N8LFXXtk=
Subject key identifier:   5E:FC:97:9F:6D:3D:97:B6:22:F3:7E:59:3E:20:B3:76:E2:59:0A:F6
Certificate issuer:       /CN=c58f92f8-4d8d-41da-af9d-d8fdec2e3025
Certificate serial:       010D0C9F43285849BB0F71CBF54D04D7D1B8F800
Authority key identifier: F5:28:F3:E5:4E:A6:20:65:57:C7:7A:3E:38:AA:D0:31:93:86:0B:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/6088769e-3429-32bd-88b7-3ac8d54f15a8.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     33359
IP address blocks:        208.89.28.0/24 maxlen: 24
                          208.89.29.0/24 maxlen: 24
                          208.89.30.0/24 maxlen: 24
                          208.89.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:71:cb:f5:4d:04:d7:d1:b8:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c58f92f8-4d8d-41da-af9d-d8fdec2e3025
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=58b6a674-1502-44e2-bc5c-981daa0a0a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3c:cc:6c:f6:df:52:5a:27:af:e5:cf:61:7b:
                    87:fe:f6:4d:ba:cf:79:e2:f7:75:75:51:73:03:bc:
                    63:35:80:20:51:54:fd:c9:38:52:37:6c:91:9e:1e:
                    02:21:95:ae:82:d2:7a:ab:9a:62:03:8b:de:64:3c:
                    81:cf:82:8b:81:c4:90:59:29:32:6e:88:c7:a5:6e:
                    c0:76:61:42:3e:17:24:13:f8:3e:56:6d:2e:c7:80:
                    e4:82:aa:8e:9e:72:50:3d:05:8a:78:4a:d2:97:91:
                    28:62:f4:39:d6:f2:3c:1e:32:aa:54:f9:8b:30:76:
                    7f:50:4a:7b:15:8b:9d:28:b1:fd:d9:62:35:54:7d:
                    d6:8b:99:22:67:78:74:71:9a:e1:d1:7b:c8:c4:c8:
                    3d:e3:48:ef:8e:7e:7b:9d:c8:64:9c:cf:c5:a3:30:
                    d0:a2:91:fe:43:2a:3d:2b:c9:e6:01:0e:a7:ce:8f:
                    19:a0:b1:74:05:cf:58:cf:20:40:dd:bc:80:8b:be:
                    a9:1c:8d:01:dd:72:fb:b3:d8:41:93:f9:88:32:e9:
                    51:60:82:2d:85:15:17:51:83:25:f4:04:a4:d9:72:
                    1a:85:3e:1a:2c:24:b7:a9:d7:21:97:c2:2d:fa:a8:
                    bd:77:91:2c:0e:c9:b6:ac:50:6c:c8:b6:54:1e:76:
                    d4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FC:97:9F:6D:3D:97:B6:22:F3:7E:59:3E:20:B3:76:E2:59:0A:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/6088769e-3429-32bd-88b7-3ac8d54f15a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.crl

            X509v3 Authority Key Identifier:
                keyid:F5:28:F3:E5:4E:A6:20:65:57:C7:7A:3E:38:AA:D0:31:93:86:0B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:db:d6:da:6a:a8:9d:a8:1a:79:4e:b8:74:34:2c:3e:8b:01:
         52:74:11:9c:75:cc:fa:1e:a9:90:90:0c:da:a7:fb:33:e0:12:
         01:12:02:57:c9:5d:79:12:1a:75:01:f0:08:a5:60:c9:1e:b7:
         05:55:9b:a0:5d:66:1c:7d:12:25:73:5a:93:a0:5f:c6:5d:fb:
         55:68:4b:59:00:f5:96:13:9e:7f:d6:1c:4f:aa:f8:ee:88:b4:
         cf:b8:86:5f:b2:52:15:64:f9:de:bf:7e:a2:54:b5:30:77:b3:
         e0:69:00:12:cc:27:97:48:d7:51:77:93:1f:06:8d:e0:13:7d:
         65:15:41:92:c2:fc:ca:a0:c7:f4:31:cc:f0:71:a9:71:d2:36:
         90:bf:b2:55:8d:7d:98:e0:b9:2f:a1:0a:3b:26:75:a5:42:e0:
         34:8f:1e:05:af:1e:8d:fd:79:7f:b9:2d:46:5f:f5:6b:a0:18:
         ed:3f:51:db:ce:7f:96:ce:33:f9:ec:b7:11:12:52:c4:74:60:
         de:00:4d:91:c8:a7:f7:21:ea:de:cc:08:1b:c5:b9:66:a5:53:
         4e:1c:6a:3d:98:13:b1:37:83:6b:f8:df:e1:86:bd:c6:36:58:
         a7:e3:c4:a7:9a:0c:a4:b3:1e:03:de:c9:be:da:06:fa:8d:9c:
         d9:f2:92:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:53:25 2025 by rpki-client