Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f93a2c0-788d-4246-b31b-8a8f28693f63/471156f2-954a-30e1-b151-c87667348d05.roa
File:                     471156f2-954a-30e1-b151-c87667348d05.roa (raw, json)
Hash identifier:          QvxqSTRheG8chfneqN4Vv2M0fAR4L3oX5ydbOMyyrNI=
Subject key identifier:   32:64:38:EF:8E:12:04:5F:15:15:01:6A:40:2E:65:73:E0:45:D7:43
Certificate issuer:       /CN=0f93a2c0-788d-4246-b31b-8a8f28693f63
Certificate serial:       010D0C9F4328584949FE8E57F1A0E62AEA7C4740
Authority key identifier: C3:84:36:A0:F4:AF:D2:54:A5:13:D1:86:F5:AA:A7:23:96:5C:FF:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f93a2c0-788d-4246-b31b-8a8f28693f63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f93a2c0-788d-4246-b31b-8a8f28693f63/471156f2-954a-30e1-b151-c87667348d05.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     62938
IP address blocks:        162.250.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f93a2c0-788d-4246-b31b-8a8f28693f63/0f93a2c0-788d-4246-b31b-8a8f28693f63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f93a2c0-788d-4246-b31b-8a8f28693f63/0f93a2c0-788d-4246-b31b-8a8f28693f63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f93a2c0-788d-4246-b31b-8a8f28693f63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:8e:57:f1:a0:e6:2a:ea:7c:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f93a2c0-788d-4246-b31b-8a8f28693f63
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=5c842acd-7f47-42a4-9427-e07f65c3cb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6f:79:e8:a3:21:cd:4f:50:7d:9f:62:c5:d4:
                    2b:0f:9d:01:eb:ba:3e:dd:2c:40:27:09:f4:f1:9c:
                    db:4f:9d:81:8e:36:05:4e:4a:4b:5e:a3:7e:57:4a:
                    ba:33:cf:c6:07:ea:75:64:09:08:d4:8a:fd:0f:4d:
                    05:44:4c:c1:05:6d:68:df:e6:18:63:60:99:fa:e7:
                    e8:8b:d4:23:9e:56:14:ed:06:cd:0f:9c:9b:1e:1b:
                    e9:d1:66:31:21:0f:a7:98:10:8a:10:68:07:97:85:
                    df:ae:c6:d8:84:b4:ec:2b:f0:d1:57:ba:1b:01:1a:
                    7a:61:8b:c1:92:07:44:a9:cf:37:97:cb:ca:b3:bf:
                    da:7d:4d:7e:3e:66:bf:24:a6:3f:5b:56:22:72:ea:
                    6e:2b:f2:c0:b9:1e:70:1d:fb:d1:69:9b:d9:8e:b1:
                    d9:f8:48:18:16:3c:55:00:2a:ba:99:95:eb:fa:2a:
                    2a:0e:1a:62:51:cd:a8:a7:e3:15:6f:15:13:f2:c1:
                    69:fb:ac:06:1e:5e:c6:47:48:e5:84:e0:aa:08:82:
                    b4:ac:d6:0b:06:f1:2a:80:7b:c8:15:81:92:dc:45:
                    01:cb:20:64:bc:b8:ac:8c:68:25:4a:ec:88:70:54:
                    f8:6e:f5:12:71:a6:53:8f:18:07:29:40:dc:c6:ec:
                    ce:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:64:38:EF:8E:12:04:5F:15:15:01:6A:40:2E:65:73:E0:45:D7:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f93a2c0-788d-4246-b31b-8a8f28693f63/471156f2-954a-30e1-b151-c87667348d05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f93a2c0-788d-4246-b31b-8a8f28693f63/0f93a2c0-788d-4246-b31b-8a8f28693f63.crl

            X509v3 Authority Key Identifier:
                keyid:C3:84:36:A0:F4:AF:D2:54:A5:13:D1:86:F5:AA:A7:23:96:5C:FF:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f93a2c0-788d-4246-b31b-8a8f28693f63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b8:e4:53:28:5a:7b:85:7f:17:02:74:fa:ff:37:38:2c:e5:
         b6:cc:fc:19:e2:27:9b:15:84:e6:7e:9c:53:93:87:5b:02:82:
         fd:0f:98:1c:67:45:33:63:34:3d:8c:16:c6:67:17:99:f5:d5:
         22:fd:52:54:47:7f:52:0d:a9:87:59:36:72:3d:a0:9c:10:50:
         ea:3a:18:43:68:f0:35:47:fc:2c:ef:a1:ab:2c:71:4d:a5:0d:
         5b:8e:3a:2e:76:45:51:6e:38:99:21:f3:c9:1c:1e:f3:4c:ca:
         0b:81:5f:d4:66:01:b5:a7:ba:03:92:b4:c8:20:40:14:8b:90:
         75:ed:23:19:8e:1e:80:85:b6:dd:da:40:47:fd:e4:8f:0a:ce:
         fd:93:0e:b3:58:52:71:37:31:dc:cf:67:45:a8:03:55:76:30:
         55:ff:57:95:2e:bd:2f:f0:eb:9b:74:ef:a0:b7:7d:d8:1e:19:
         65:ff:4b:26:fb:66:95:7c:b8:d7:90:58:d8:4b:8f:f8:0d:4b:
         cd:eb:c3:87:ba:35:6f:2a:5a:e6:04:7d:f0:e7:aa:56:3d:fb:
         d6:11:65:d8:70:58:46:3f:2f:1b:28:f5:57:49:ea:2d:12:95:
         0d:10:b1:bf:32:f8:d1:3e:02:1c:05:fb:5c:5f:ce:6d:0c:d0:
         9c:19:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:18 2025 by rpki-client