Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa
File:                     0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa (raw, json)
Hash identifier:          uDKyQaphdbTUBVbWOjJ/j9Yt/10Xn/IAuDVeY8zej2E=
Subject key identifier:   87:D7:67:21:5C:1A:94:B7:28:CC:B6:FB:99:34:55:78:A2:06:14:1B
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584957F3FA7BC701884932C00D00
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        208.85.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:fa:7b:c7:01:88:49:32:c0:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=f9b21523-9b00-4dd5-ad58-cbe8f3575765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1f:76:8a:45:d0:53:74:7e:eb:23:d4:51:27:
                    4b:20:9c:f9:2c:64:d7:5c:42:a9:eb:10:c1:ff:1c:
                    fb:a3:2d:b0:57:94:26:63:c6:b2:ce:2d:a1:8f:aa:
                    dd:ea:a6:31:c7:22:79:05:f6:9c:aa:4f:e1:86:cb:
                    a2:c2:33:7e:8c:4c:cc:c9:39:1c:4e:2d:09:b4:1b:
                    d6:89:8b:74:ee:35:94:18:de:27:5d:8f:d1:f5:ed:
                    9d:aa:5f:ad:88:22:1d:25:6b:41:64:6d:9f:53:b7:
                    ca:25:c2:01:46:6f:13:38:0b:80:de:47:09:f3:5e:
                    16:29:b3:7c:b7:8e:63:e1:a7:52:83:a0:6b:e0:c3:
                    83:15:76:c0:67:0a:33:df:d9:11:2a:5b:b2:29:05:
                    58:11:fd:d7:d8:db:a7:ca:ad:17:9b:8b:3b:d2:16:
                    7b:bf:84:42:e3:cd:64:b7:39:23:06:77:04:ce:b6:
                    a7:ed:5f:0e:5b:a4:ca:90:3e:3a:ff:75:d3:4d:74:
                    fc:3e:30:6d:35:ee:77:6e:b8:2a:71:9b:71:b1:d0:
                    62:ff:e3:b6:40:cc:2e:e9:7a:15:0d:0c:c8:e2:24:
                    5b:c3:78:8a:93:8b:1b:3f:54:0b:3b:6c:e4:5b:e0:
                    7a:2a:19:d6:55:02:7a:e3:89:20:ab:c6:cd:fe:20:
                    53:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D7:67:21:5C:1A:94:B7:28:CC:B6:FB:99:34:55:78:A2:06:14:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:40:6b:a4:ff:34:46:84:b2:7c:f8:6d:e1:57:b8:ff:ac:0a:
         10:24:fd:d3:b0:09:30:00:49:8b:42:9d:fc:7c:98:44:34:07:
         43:1c:80:5e:70:dd:d3:06:b5:05:2c:ae:bc:84:6e:f8:96:ae:
         ec:b6:26:59:67:4b:4b:31:02:30:30:df:f5:99:1b:f8:fb:85:
         05:ac:20:f1:4a:6e:50:6b:4e:51:74:f0:5a:1a:f6:7f:ee:50:
         6c:6a:a8:03:35:da:e3:8d:42:d5:db:1d:6c:55:52:a1:ab:aa:
         71:8d:3c:78:21:7d:a6:07:34:af:03:b4:eb:09:85:1a:9b:e4:
         54:18:a6:0b:85:b8:77:8f:d7:ff:8b:93:8d:6f:12:d6:cc:37:
         52:03:2a:db:f8:0b:28:6f:d9:80:1b:42:1b:09:c1:b2:27:1c:
         67:db:e5:0c:19:3e:5c:4e:a9:dd:61:ed:2e:18:71:27:0e:27:
         1c:70:ee:8a:9b:0c:2e:16:16:b0:b5:c0:ec:af:41:fb:cf:e3:
         11:91:a4:6d:cb:0e:9d:3c:d0:a2:d9:05:8f:bf:ca:1c:66:ea:
         55:5f:9d:f4:08:c9:6c:f0:87:5f:24:6e:3a:e2:e5:9a:43:a3:
         4b:81:d4:c8:ad:29:b3:38:5e:ef:98:0e:4c:a3:7f:c9:ce:ce:
         21:38:48:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:18:05 2025 by rpki-client