Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/6150167d-0804-31ac-afe6-022485c3e19d.roa
File:                     6150167d-0804-31ac-afe6-022485c3e19d.roa (raw, json)
Hash identifier:          tH26HXjXWvvQRxhMPpXnHUEx/WJmdZV++iA4o2M05Fo=
Subject key identifier:   D4:EB:7F:E0:90:12:C3:2B:E7:03:E2:25:A1:5A:0B:DA:E8:3C:6E:7D
Certificate issuer:       /CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
Certificate serial:       010D0C9F43285848C5817F3F83B4F71EB5127DF0
Authority key identifier: D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/6150167d-0804-31ac-afe6-022485c3e19d.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     6453
IP address blocks:        162.213.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:7f:3f:83:b4:f7:1e:b5:12:7d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=5ea2d571-8da9-445a-bab3-33b26d714d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f0:e2:00:a8:43:d9:2e:ce:4c:ec:ad:84:54:
                    0f:81:e4:5b:d4:a2:bd:c8:bd:21:86:f6:20:fd:6d:
                    5a:fa:0c:9a:b7:a3:1d:ba:f9:c4:59:cd:d0:bf:ac:
                    9d:e2:85:6c:58:c2:ef:51:63:3b:f5:f5:d1:65:0e:
                    3e:ea:e5:f4:b9:6a:fd:70:f5:25:07:ab:e9:c5:2f:
                    ab:ed:9d:00:d3:c3:8f:5b:c9:29:ca:a4:23:30:fc:
                    57:54:47:98:b4:52:07:f5:e4:99:b7:50:f8:c1:4b:
                    af:2a:33:34:0d:27:19:90:58:a8:da:50:47:74:7b:
                    0b:a8:c7:09:f1:ef:cf:f2:4f:8a:c2:f4:5a:7c:79:
                    84:16:07:23:b6:fd:51:60:60:b4:87:44:4d:08:aa:
                    d4:b4:01:92:f6:9b:1e:a0:21:8d:90:db:d2:47:7d:
                    5c:67:97:da:a0:60:98:7e:4c:3e:6c:58:5c:d2:95:
                    03:97:5c:2b:36:d2:cd:2e:2c:26:03:7a:f1:17:2e:
                    96:f7:5e:1d:a1:2a:30:53:10:7b:b9:a7:2c:4e:95:
                    4a:2f:61:d8:b5:4c:59:99:48:05:75:17:c4:4e:9d:
                    05:60:6d:e1:f9:05:48:1d:3c:56:1b:f6:84:6a:62:
                    0d:86:fd:c9:8f:d6:13:06:22:a4:9a:10:3a:cd:bb:
                    78:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EB:7F:E0:90:12:C3:2B:E7:03:E2:25:A1:5A:0B:DA:E8:3C:6E:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/6150167d-0804-31ac-afe6-022485c3e19d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:64:19:1f:b9:b0:2e:ff:38:66:13:d3:a8:ad:0c:81:03:f5:
         1b:44:ae:13:49:a4:b5:db:21:52:8a:13:d5:ab:45:b6:19:cf:
         4a:c8:cf:07:d6:de:fd:a1:7e:57:e3:da:ea:0a:34:1d:fd:4b:
         19:8a:5e:95:ea:42:3b:fb:c9:15:31:8c:a1:dc:bd:2a:5d:e7:
         98:fc:5a:f7:54:3a:f7:6f:07:fb:92:38:e2:12:80:40:19:78:
         bd:f1:45:01:2c:f5:eb:aa:29:e7:76:15:e2:0c:cd:c2:90:2c:
         2c:93:75:19:84:94:10:ac:47:41:b1:35:93:9d:b0:23:e9:dc:
         9c:ed:2b:48:bc:19:62:73:26:e6:0e:e9:f9:09:50:e2:17:7c:
         b3:56:20:5b:54:65:ba:94:06:38:f1:6a:15:6c:57:2c:09:03:
         91:20:6d:b7:ef:56:f9:20:85:69:33:72:ac:f8:bf:67:a4:ac:
         41:b7:8a:34:c8:f5:c4:1c:0e:c1:82:e7:ee:e2:d8:90:1f:1b:
         63:92:f9:7d:49:b6:7d:59:63:2f:2a:59:24:db:62:15:5b:b7:
         d6:e2:e1:6e:e3:cb:bb:35:82:c1:78:80:7c:af:a3:1f:8b:d5:
         65:f1:24:27:26:4e:5a:d5:09:98:e6:9a:6e:77:95:0e:da:fc:
         cb:05:48:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:37:14 2025 by rpki-client