Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0e8d9e3a-4eb9-37d3-8b00-b5072bfed469.roa
File:                     0e8d9e3a-4eb9-37d3-8b00-b5072bfed469.roa (raw, json)
Hash identifier:          NwebcZbTL60A4KzCKdT5G0UwaJx6pqcL4fmXyowkaYs=
Subject key identifier:   97:A6:9F:E1:01:BD:36:C1:4F:C4:99:22:43:99:A9:4A:D6:62:DA:4D
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F432858495ABEB6F4259C629F7CE53500
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0e8d9e3a-4eb9-37d3-8b00-b5072bfed469.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        208.85.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:b6:f4:25:9c:62:9f:7c:e5:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=e4e787ef-c07c-45bb-b401-c84a4f9169a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:de:2f:00:8c:ac:81:e1:e5:d9:38:53:23:8a:
                    83:97:c9:a8:4a:82:c4:63:a6:98:d7:31:5b:45:89:
                    bf:4d:9b:0a:f6:37:68:c6:f0:42:5f:01:94:dc:6b:
                    9c:af:da:d6:a7:b3:e7:e6:96:33:a0:3a:e5:f6:d4:
                    fa:aa:52:5c:c8:b0:92:81:60:60:57:23:6b:df:00:
                    3d:4f:08:78:73:f9:32:78:39:3c:56:f8:6c:0f:de:
                    b4:bb:17:eb:71:74:5b:2a:42:6c:61:d2:fe:ab:18:
                    d6:e7:7f:5e:a4:5c:62:6c:4e:56:9f:a9:d0:de:bf:
                    a9:29:e8:44:da:e7:18:3b:b9:6c:b1:10:c7:97:2a:
                    db:e8:8f:99:f0:f6:20:b1:d3:d3:b9:2c:25:e6:2e:
                    83:5a:2f:02:a2:2b:96:89:c6:71:73:a6:f2:77:59:
                    14:f9:d3:cc:83:0a:8d:68:7d:2a:fe:f9:e8:e4:79:
                    29:24:45:c5:dc:77:2f:e7:dd:24:f0:27:9e:84:84:
                    d7:57:dd:cb:18:a5:8f:08:9f:2b:19:e8:cc:cc:df:
                    46:c0:b7:e6:7e:2e:9e:4f:35:c1:7b:f8:c3:c5:57:
                    ee:2a:ab:b2:6d:dd:af:83:9d:e4:ba:73:da:7c:a8:
                    05:ad:d1:9e:3f:75:12:9e:88:06:00:a2:54:57:52:
                    5e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A6:9F:E1:01:BD:36:C1:4F:C4:99:22:43:99:A9:4A:D6:62:DA:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0e8d9e3a-4eb9-37d3-8b00-b5072bfed469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ad:8e:f0:37:58:10:6a:49:f0:df:76:60:49:18:60:18:9f:
         ff:a3:8a:dd:45:a2:33:1e:89:b4:3a:29:d5:31:f8:a9:1c:25:
         e2:3e:85:0e:23:60:25:11:58:a2:70:05:c5:a6:ce:16:51:78:
         ad:50:d4:03:78:ca:ac:50:62:ad:c1:da:27:e0:fb:43:d6:a0:
         11:40:bc:1f:7f:72:b2:37:37:eb:9c:52:22:9c:a0:b5:5b:1f:
         df:d6:46:3f:07:a9:27:b8:1f:7c:f9:c3:9b:69:68:19:04:28:
         09:20:41:11:c3:e9:a7:f7:63:b6:15:d8:09:4a:49:a0:1f:93:
         bd:69:9c:b8:8d:1d:24:0f:30:2e:11:27:43:52:02:b3:53:58:
         7d:83:32:56:57:82:da:ef:7a:f7:ec:ea:b0:61:f0:6d:f9:7c:
         c4:48:a3:15:85:b0:9e:77:3c:7d:1d:b5:9a:58:d9:49:5a:aa:
         f8:89:d0:11:b3:83:03:4d:55:44:71:a8:34:30:1c:7a:1c:fc:
         1a:33:ff:7b:77:46:f9:9a:9a:99:a2:36:d9:29:17:1f:3a:47:
         18:29:37:81:bd:c7:88:35:6b:49:c9:d9:6c:43:53:11:a0:54:
         25:dc:1f:48:34:49:88:f4:7e:36:eb:7e:af:e7:ae:bf:69:ec:
         72:48:1d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:10 2025 by rpki-client