Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/418c082e-728a-3dd9-abd6-e83c6a4eb827.roa
File:                     418c082e-728a-3dd9-abd6-e83c6a4eb827.roa (raw, json)
Hash identifier:          0gVWBDKsX4g3gqejW1oiiLcXfG6i8aorpNa13TqBU+Y=
Subject key identifier:   6C:F6:54:D3:30:A4:17:41:B5:7D:B9:AA:12:3F:3E:EE:48:9A:EE:52
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858489770898663AF78A7A484A400
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/418c082e-728a-3dd9-abd6-e83c6a4eb827.roa
Signing time:             Sun 19 Jan 2025 02:00:39 +0000
ROA not before:           Sun 19 Jan 2025 02:00:39 +0000
ROA not after:            Sat 19 Apr 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        162.247.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:97:70:89:86:63:af:78:a7:a4:84:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jan 19 02:00:39 2025 GMT
            Not After : Apr 19 01:00:39 2025 GMT
        Subject: CN=10d8bf0b-41ef-4255-866a-066fafe71b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cc:92:ce:e1:2c:7b:35:40:1c:84:31:8d:2d:
                    90:08:e6:59:d0:75:c9:b3:c7:dc:e7:d8:4d:7d:24:
                    5f:42:cb:03:88:01:db:7f:65:b4:eb:cb:58:e6:db:
                    56:d8:64:02:e7:f7:cb:6e:83:fb:17:40:b7:aa:4d:
                    78:cd:67:c7:53:c0:6b:4e:98:dd:a1:a6:aa:93:54:
                    ec:ba:e4:47:cb:2a:ec:f4:e5:f8:21:16:9a:d0:4b:
                    e4:39:df:31:78:b1:46:ac:35:10:2d:29:e1:ca:da:
                    3b:ba:00:20:ba:40:46:2b:c9:c4:a8:cb:65:bc:12:
                    9e:0c:e4:d2:dc:fe:e7:ca:01:03:6f:ef:fd:02:1a:
                    97:8d:10:07:95:a4:a3:68:b1:fd:85:63:52:d8:77:
                    e4:9b:60:62:10:48:cf:29:0a:8b:1b:d1:75:5a:ee:
                    04:1f:90:a2:65:e8:c1:56:6c:5e:78:11:78:ce:f3:
                    f3:59:80:fc:82:bf:84:fb:bd:55:51:d9:96:61:f9:
                    1c:1e:d2:bb:7a:13:13:d8:71:35:19:0b:38:a4:a9:
                    a0:e9:c8:62:2c:4c:8d:a6:be:38:9c:d7:43:05:8d:
                    cd:92:c2:8e:17:8c:aa:a2:83:b5:35:02:20:e1:99:
                    22:8c:1d:38:be:9b:bc:42:f2:4e:50:24:5c:0a:4f:
                    d9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F6:54:D3:30:A4:17:41:B5:7D:B9:AA:12:3F:3E:EE:48:9A:EE:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/418c082e-728a-3dd9-abd6-e83c6a4eb827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:25:9c:d7:9a:62:8f:1b:26:57:92:bd:e8:86:59:37:ee:c9:
         6d:d6:78:26:c3:c5:fc:c7:81:db:ed:d7:b9:65:1c:50:03:5d:
         11:5d:d1:92:47:41:b8:3e:41:42:ff:79:4b:c4:1b:57:4b:02:
         96:f9:d8:15:96:a7:79:98:3b:4b:62:43:89:88:18:c1:af:ae:
         69:67:ab:96:a4:7e:b1:55:7b:85:69:5f:5d:35:3d:36:e2:5a:
         83:d0:93:7e:ff:14:31:2e:4f:6a:f2:fa:7b:07:51:d4:b6:bc:
         23:3f:e7:89:c8:af:8b:b4:e3:c1:18:24:4a:a8:51:b9:4d:14:
         f1:29:98:4a:47:58:66:4b:ff:69:08:3f:ef:c6:31:c3:cb:fe:
         a4:9c:e2:51:43:cc:c1:42:42:ee:16:8d:b1:69:5a:c9:e6:9d:
         29:5b:db:4a:68:1f:24:da:1d:40:ea:8e:4c:1d:82:95:db:69:
         4a:e5:17:ab:b6:c5:73:ff:e9:5b:ac:f3:4a:46:fa:20:d4:03:
         53:5b:9d:da:ff:ca:88:30:56:de:21:0a:23:2e:f7:c8:e2:a5:
         a6:ae:0c:d6:19:8b:5a:aa:b5:61:44:b6:be:87:4c:5c:a8:9a:
         29:09:ce:29:91:48:13:f5:53:c7:6d:f7:66:81:e2:45:cb:7b:
         bf:74:37:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:03:50 2025 by rpki-client