Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/825db1bd-9909-3c3a-99e8-224caf7477c8.roa
File:                     825db1bd-9909-3c3a-99e8-224caf7477c8.roa (raw, json)
Hash identifier:          ZIeF0X4NjgRcGscmz0DYtIsaefvhrqWNjjg7o6VjSKY=
Subject key identifier:   21:BB:2A:C3:3E:8D:04:C7:42:F6:88:AB:B6:09:FD:A5:38:F3:43:AA
Certificate issuer:       /CN=5410af3b-1667-4dd4-9260-1835889ae3a3
Certificate serial:       010D0C9F43285848E9CBCEC4D4A11A339A70DFC0
Authority key identifier: B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/825db1bd-9909-3c3a-99e8-224caf7477c8.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        162.247.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:ce:c4:d4:a1:1a:33:9a:70:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5410af3b-1667-4dd4-9260-1835889ae3a3
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=b4c68ab4-7e2a-4e2f-b0a8-68a72ff3ecc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:99:f6:fe:e3:cf:3c:84:02:8f:27:ac:93:ce:
                    ab:65:5b:90:06:1b:d1:ef:b2:2b:21:2a:5a:90:88:
                    60:c7:22:8d:7b:2b:c9:36:b5:49:8c:5c:42:5b:91:
                    a9:42:73:ed:4b:db:42:e2:d2:e7:c8:2f:cc:58:7f:
                    59:ae:d8:53:fd:e3:df:4f:c2:ff:a4:1a:cb:97:cb:
                    3c:e4:89:d6:16:b6:cb:bd:ff:ab:7b:5e:c0:25:83:
                    d2:4c:72:f5:4f:24:15:c5:3b:16:a2:0c:72:74:4e:
                    0b:4a:11:e5:85:44:a0:35:73:e6:cd:b1:4d:68:84:
                    17:23:ea:8d:13:f4:e7:22:f6:43:a5:4d:e5:f1:0c:
                    52:f4:b7:4b:cf:96:c0:23:65:21:8f:8e:c3:49:92:
                    e5:a7:84:be:81:b5:1a:c1:c8:f0:a3:d2:c7:21:75:
                    ba:f4:04:cd:e1:24:4b:f1:08:25:29:2e:b4:40:3c:
                    77:40:15:db:c3:65:79:53:0e:8c:a1:74:a2:26:04:
                    2c:23:bf:d1:17:05:a6:c5:33:41:f4:b6:a7:b6:31:
                    12:79:43:08:35:38:21:dd:fb:aa:51:10:e8:ea:ad:
                    b1:12:de:c8:31:a5:ab:b7:4f:af:c3:d3:21:0d:40:
                    4d:ec:8a:50:70:8e:70:a0:84:e6:75:c9:1b:86:f7:
                    0c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BB:2A:C3:3E:8D:04:C7:42:F6:88:AB:B6:09:FD:A5:38:F3:43:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/825db1bd-9909-3c3a-99e8-224caf7477c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl

            X509v3 Authority Key Identifier:
                keyid:B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:cd:96:91:d4:6e:a5:f5:37:05:c7:98:22:f8:aa:d8:80:6a:
         fb:57:7a:02:9a:e1:15:05:6b:3d:07:2d:73:1b:bb:e4:79:08:
         c5:7f:32:e4:61:dd:2f:cd:b5:47:2d:5d:04:e9:cb:8f:c0:c4:
         1d:47:56:ea:9c:43:a4:4b:6d:8d:dc:c1:70:f8:d8:8d:14:7d:
         c6:8a:80:51:67:d3:06:d5:76:79:58:44:2e:06:a9:92:01:14:
         af:1f:10:af:5f:0a:9d:a5:52:4e:8c:b7:73:ab:39:a9:43:32:
         8f:b5:e3:ef:45:c3:83:ef:b8:f4:17:f7:1e:d6:6f:d9:4d:1a:
         7a:b2:3d:6d:ef:5e:0b:42:82:ad:c4:4c:7c:14:ac:6b:97:9e:
         b9:07:76:b0:be:42:d7:1a:6d:90:ad:7e:9e:f5:5f:ae:f7:4e:
         8f:9e:e5:9a:60:c7:2a:5a:01:bb:00:45:24:e2:1f:66:d3:ae:
         bf:1e:3c:80:d6:dd:85:2e:99:9c:3b:9c:7f:41:3b:eb:27:d3:
         bd:d6:24:10:40:b0:25:32:69:8e:78:b2:75:40:94:8f:92:d3:
         02:b9:78:86:01:03:9f:fc:7d:76:ca:0a:3f:60:a5:76:40:10:
         38:05:78:bb:5e:25:31:d0:91:a8:38:e5:da:db:cb:4d:ca:21:
         d5:42:56:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:49 2025 by rpki-client