Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0f203ebd-3bfb-3ddd-97b9-da84a81c72c0.roa
File:                     0f203ebd-3bfb-3ddd-97b9-da84a81c72c0.roa (raw, json)
Hash identifier:          mDBIZoZCQqS9dicewWFmCBQvnNxrJ7tVyNRGpeq/43s=
Subject key identifier:   2D:FE:B7:77:6A:27:5D:A0:60:0E:3A:0A:03:DB:F4:5F:92:B1:B5:88
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F43285849203C164BD15E46E96000F580
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0f203ebd-3bfb-3ddd-97b9-da84a81c72c0.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        108.179.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:16:4b:d1:5e:46:e9:60:00:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=198f7054-20ba-430b-b768-6eb3db0b4974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ee:9d:13:12:81:1b:66:0b:e5:55:72:97:e8:
                    b6:f9:08:de:8c:ac:3c:ec:e1:f1:79:f7:30:5e:e2:
                    9a:79:0d:f5:14:9c:c6:df:a8:00:35:95:67:dc:e8:
                    2e:8e:75:a5:62:74:05:f5:4a:51:f3:70:86:1c:68:
                    1e:a8:f9:5d:a9:ae:42:76:d7:d4:7c:5e:12:83:bd:
                    21:ef:b7:e4:ad:59:b9:4b:74:5c:28:c9:da:69:f3:
                    5d:42:b5:36:5b:45:6c:a1:53:e6:89:0d:46:70:76:
                    92:01:ef:75:d0:0b:a6:5d:e0:85:a6:2d:c6:54:74:
                    5f:95:90:e0:e1:38:d5:e7:c6:f1:72:1a:de:8c:7e:
                    a4:78:3e:48:e7:71:8d:b2:af:64:c5:ba:b6:74:b7:
                    70:a8:bc:e0:f3:56:4a:ae:8b:6a:ae:4e:1d:4b:7c:
                    34:36:46:69:fd:24:1f:ea:83:73:ce:64:7a:8e:e0:
                    3d:f9:25:fc:84:57:20:86:bf:92:f0:67:55:24:e4:
                    f5:0c:56:98:ad:a4:96:44:c5:84:a6:a6:b2:d3:c3:
                    fc:cd:da:b2:2a:ae:4a:38:ea:48:a2:d4:7a:ab:a7:
                    e8:5c:3b:e5:ef:14:c9:42:11:df:c3:8f:ae:46:ba:
                    6f:5e:83:6a:db:7f:03:6e:08:ef:ad:57:25:05:f1:
                    3b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FE:B7:77:6A:27:5D:A0:60:0E:3A:0A:03:DB:F4:5F:92:B1:B5:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0f203ebd-3bfb-3ddd-97b9-da84a81c72c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.179.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:dc:7f:98:b0:89:01:cc:34:f2:1f:88:79:65:30:42:d4:64:
         79:c0:d2:db:6e:ca:df:d3:9f:76:e3:4c:5e:19:d8:73:2e:88:
         7c:d6:fa:ad:57:39:9b:58:74:07:68:0c:6b:81:c2:eb:74:b9:
         37:a5:da:57:d0:23:70:c0:d8:7a:37:74:74:b7:7a:b8:ae:56:
         0c:da:d8:a6:05:7f:fb:c4:58:5b:53:38:b9:e9:ee:b8:7d:53:
         7b:0c:1b:53:37:55:e0:cd:45:a0:14:30:58:45:07:ed:cc:d4:
         df:ec:f7:c7:cb:02:69:c5:bd:d2:9c:92:ba:43:01:53:b2:4e:
         29:7a:b0:d0:39:a7:c4:88:14:da:09:88:f0:23:e0:0b:5f:67:
         bf:1c:33:67:48:d2:c2:69:2e:bb:ae:07:5f:58:31:b4:36:56:
         22:5b:51:d1:a5:b5:85:03:b7:37:af:b8:b4:46:10:fc:6f:ed:
         32:5f:2f:58:83:45:c4:bd:69:36:35:dd:b4:75:b1:31:4b:4c:
         16:e0:f3:31:1c:b5:3a:39:62:86:5f:a9:98:eb:90:30:cd:ea:
         48:3f:33:ab:00:e7:b5:1a:85:3e:d4:6e:c1:c6:cc:b4:56:d7:
         ad:6d:19:7a:f8:37:46:98:37:21:3f:2a:1c:9d:f0:10:f2:2a:
         79:a0:e1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:23:58 2025 by rpki-client