Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b023409-61ad-3e7c-a6f4-7ea5cb8925bb.roa
File:                     8b023409-61ad-3e7c-a6f4-7ea5cb8925bb.roa (raw, json)
Hash identifier:          J+3gmFgVHVd0grHXgmmRbh3lMw9aZEZEyIL2AoE+8IU=
Subject key identifier:   4F:EB:CC:2B:91:77:CF:CB:89:70:DF:9C:67:2D:3B:31:92:82:4F:51
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F432858498769B97B04314C6A32555000
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b023409-61ad-3e7c-a6f4-7ea5cb8925bb.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        108.179.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:b9:7b:04:31:4c:6a:32:55:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=3050b6c9-9e42-4795-82c3-8df87b9bc053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b7:7b:21:c0:b2:6f:52:46:30:89:02:1d:be:
                    9a:ac:3d:b6:99:05:26:7f:4b:53:4e:c3:fd:e5:f3:
                    5b:79:25:e0:ca:ba:a6:1d:27:8e:e6:5b:84:8b:95:
                    c1:db:a5:02:05:a6:e0:e7:eb:7f:56:ee:c0:a3:d3:
                    8e:c8:7c:4d:e0:19:b2:24:25:2d:c5:5d:3c:ad:39:
                    2e:e2:08:7a:85:63:f9:fa:ca:be:e3:6d:35:b3:bc:
                    c4:e6:16:34:b9:ca:90:31:c5:87:61:e4:24:f3:ed:
                    94:fb:36:d4:31:e3:01:a7:24:e2:a0:ab:8b:1a:08:
                    34:2b:ee:e5:40:49:dc:87:0e:58:d5:36:6d:90:20:
                    9f:71:16:19:e3:a9:21:85:1f:38:50:bb:82:7f:2a:
                    45:c8:4b:8c:ca:29:a5:d5:e7:09:47:10:8d:38:97:
                    54:60:0c:39:a8:a9:0c:9a:f1:a2:22:ae:65:db:f3:
                    f6:e2:62:f6:a7:ab:31:f7:5c:94:91:e4:ec:b3:08:
                    0d:03:d4:5c:4c:cd:fc:1e:d7:2a:33:44:c9:ff:cd:
                    e9:53:38:1c:f4:db:c2:77:9a:f7:78:ee:eb:e3:d6:
                    8d:b1:fb:a4:7b:4a:56:93:7c:9f:9e:78:43:7e:f4:
                    c8:7b:d5:af:c1:a4:b9:b3:9f:5b:47:d7:12:11:c5:
                    22:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EB:CC:2B:91:77:CF:CB:89:70:DF:9C:67:2D:3B:31:92:82:4F:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b023409-61ad-3e7c-a6f4-7ea5cb8925bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.179.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:9f:33:52:12:02:d2:c3:c9:97:9e:73:75:e3:09:05:63:da:
         7e:94:7a:d3:e6:a4:0f:f9:b5:5a:6e:34:d5:0c:70:1b:bb:0a:
         8d:3a:84:3d:9f:67:57:0a:36:0d:85:c2:c7:b5:10:6b:db:30:
         da:45:5f:4e:cd:c0:a7:e9:7a:49:f4:0c:8b:99:83:4d:e7:82:
         34:91:29:c4:d4:b5:60:0b:4b:28:6d:d7:cd:a8:35:d9:ba:93:
         96:30:de:cf:9d:ec:75:ac:ef:fc:1a:b4:6a:09:ef:08:f2:e0:
         ea:b5:26:8b:e5:f5:cb:39:1c:7c:4b:77:2e:45:64:6c:20:c4:
         75:7b:c9:a5:70:52:94:41:04:ef:7f:de:bc:4a:cd:94:e0:39:
         7e:70:e5:fb:cc:f5:b0:69:c5:57:06:3d:f0:e4:84:01:27:d2:
         42:e8:e9:53:d1:a9:e7:31:86:07:1f:4e:95:56:85:be:2b:e8:
         f9:95:07:8b:05:6a:9b:14:96:ff:16:46:73:f0:44:f4:12:77:
         45:83:3a:1d:42:05:4c:64:de:7e:f8:73:f4:ad:f2:89:4e:e3:
         70:38:69:92:51:59:10:1d:98:fb:f4:75:40:53:53:55:9c:ee:
         b9:b7:24:db:19:c3:12:af:e0:31:f1:20:d4:80:ca:52:58:ca:
         ef:6e:c6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:22 2025 by rpki-client