Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/5af642ea-225c-38c3-b240-f011c1f0ef11.roa
File:                     5af642ea-225c-38c3-b240-f011c1f0ef11.roa (raw, json)
Hash identifier:          enCtGdXxx7zdG8kiM9yaPfjBvNGbq92FFvWYpEOhkT0=
Subject key identifier:   6D:98:43:86:86:E9:AC:81:FC:62:3D:08:23:4B:55:95:99:C2:ED:5D
Certificate issuer:       /CN=e987b11b-b307-4d95-abbc-a061ff00c004
Certificate serial:       010D0C9F43285849B9A9F7AA215DEA18A35BB4C4
Authority key identifier: B3:3B:F3:8D:F6:92:6B:7F:59:46:57:94:59:4D:5A:EC:FE:75:6B:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/5af642ea-225c-38c3-b240-f011c1f0ef11.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     46601
IP address blocks:        208.82.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/e987b11b-b307-4d95-abbc-a061ff00c004.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/e987b11b-b307-4d95-abbc-a061ff00c004.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:a9:f7:aa:21:5d:ea:18:a3:5b:b4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e987b11b-b307-4d95-abbc-a061ff00c004
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=73823056-f3cc-481d-8e8f-c4b245e5236e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0b:42:77:19:61:3e:77:14:4d:69:6a:5c:7c:
                    a3:f5:60:11:27:e8:87:38:c2:ff:cf:20:55:d0:4e:
                    ef:83:dc:5e:e1:c3:d7:99:d2:bf:2d:67:61:25:ae:
                    1d:cc:2d:c8:dd:60:83:a3:7e:f0:ce:0c:93:09:99:
                    a4:6a:84:8b:ad:cd:b7:05:f8:c8:92:bd:b7:a8:c6:
                    c5:14:09:3f:64:5a:48:20:5e:e4:87:e1:c1:6d:ce:
                    a4:de:99:e1:9e:57:00:67:43:ed:39:fa:67:2c:eb:
                    98:c9:98:20:e3:9b:97:32:c5:c3:f5:51:03:86:55:
                    da:83:9b:74:25:74:a3:68:16:19:56:43:91:0b:d3:
                    e6:f2:5e:4d:78:9d:f0:f0:9e:b9:7c:34:1c:f4:ae:
                    ad:4c:cd:3a:20:bf:f0:5b:5a:17:7d:76:53:86:ec:
                    a3:76:16:cb:60:ec:11:4f:56:b0:d6:7a:6a:b6:94:
                    4c:c4:af:9a:88:5c:dd:f0:85:38:0f:d2:ed:37:b6:
                    f5:62:c6:55:98:f9:41:ab:91:e0:94:55:de:59:80:
                    55:cf:78:42:99:d7:e6:86:55:38:d7:88:1b:f7:ab:
                    7f:50:31:31:aa:ce:ee:a5:43:a6:2f:ab:41:fb:ca:
                    f7:ba:43:b4:d7:35:78:40:a4:66:d7:da:f4:c7:33:
                    17:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:98:43:86:86:E9:AC:81:FC:62:3D:08:23:4B:55:95:99:C2:ED:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/5af642ea-225c-38c3-b240-f011c1f0ef11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/e987b11b-b307-4d95-abbc-a061ff00c004.crl

            X509v3 Authority Key Identifier:
                keyid:B3:3B:F3:8D:F6:92:6B:7F:59:46:57:94:59:4D:5A:EC:FE:75:6B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:5d:f2:f0:a3:6d:b5:5d:67:96:7f:70:15:4d:80:22:67:66:
         fe:f5:f1:e5:de:60:77:b3:2d:5d:c7:5e:d3:b1:9d:6a:36:73:
         59:67:fb:30:9e:cd:d0:c3:53:2e:7b:19:29:ec:30:ab:17:24:
         12:7e:20:b5:fa:fe:d4:e6:7d:28:e5:31:aa:0c:ba:77:94:bc:
         40:7c:c8:a2:c2:8a:c4:bb:31:92:df:73:c9:07:17:d1:7e:59:
         88:7d:09:77:f5:fb:aa:bc:5c:6f:25:69:f6:7c:55:32:a8:5b:
         5d:c5:35:6c:45:7a:cb:11:26:2f:ff:2c:72:d2:9f:5e:81:e2:
         a5:6d:73:a9:17:70:32:e1:ff:31:eb:d2:b8:c8:5f:bc:4a:87:
         5b:f5:9f:5a:3f:11:93:a7:ff:83:29:2d:81:74:4c:c8:a8:b0:
         03:41:76:24:68:0a:cf:c1:c5:34:e4:e6:10:76:62:ca:c7:fb:
         e0:49:c7:1a:3d:32:a2:ca:27:58:74:7d:14:25:84:71:6a:4b:
         57:19:b6:58:0a:89:1e:ec:3c:c3:bc:bb:e7:ae:d6:f0:e9:f6:
         b5:17:b5:ce:f3:8d:f4:5b:59:e3:3d:15:12:e8:09:1d:e3:f5:
         23:9f:a9:96:89:82:c0:70:0b:46:5e:f0:7d:bb:30:b7:65:ae:
         20:f5:70:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:49:17 2025 by rpki-client