Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa
File:                     4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa (raw, json)
Hash identifier:          cOxMVfUO0AdQnrov8mo7/AQKCdMOg1QCeaOfB84FsHo=
Subject key identifier:   76:2F:4B:9E:C3:A2:9A:AF:9C:CE:EE:F9:5E:6A:7E:E3:F8:90:D0:FA
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F432858493C092629DF5FEE9E09B1E280
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     396982
IP address blocks:        162.240.198.0/24 maxlen: 24
                          162.240.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:26:29:df:5f:ee:9e:09:b1:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=e7f0c42d-5df3-4c67-814b-11d742b89b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:63:3f:0d:9e:f2:9c:1f:d9:8e:af:9f:8f:
                    dc:a8:5a:68:d2:f7:63:8d:0b:d6:b6:3f:bd:3e:c7:
                    a3:70:bd:84:66:70:b7:21:ff:15:c0:d4:39:db:9b:
                    33:ba:94:58:22:96:10:13:fc:93:fe:ec:dc:4d:33:
                    f9:29:dc:6d:f8:65:7d:34:2a:70:3d:9a:c4:12:75:
                    c9:55:3c:7b:78:0b:73:4f:5a:82:99:ab:d9:38:e5:
                    5f:6e:14:fa:94:b6:2f:c9:d9:6b:4e:47:5e:dc:57:
                    cc:53:3b:6b:fd:83:04:4f:a8:16:7d:7e:59:1d:28:
                    8d:43:aa:f6:08:de:66:08:86:20:1c:ab:24:2f:ba:
                    41:de:eb:11:a2:ca:49:3c:9c:db:d0:4b:d7:29:67:
                    64:05:01:89:9c:f7:b3:4c:fa:77:51:0b:23:77:45:
                    0a:93:15:1d:52:8a:41:13:61:89:03:91:7c:a8:3c:
                    52:9c:00:8a:a9:31:1c:b5:4f:63:16:fc:6a:37:78:
                    7c:07:5c:35:0b:d8:6b:8e:5d:b6:08:ed:55:71:b9:
                    e8:33:22:0c:a4:68:e1:2a:af:0e:b8:40:9c:d2:9b:
                    54:e6:60:f2:3e:13:64:40:84:a0:2a:aa:45:03:e1:
                    3d:8b:99:58:f0:b7:69:8d:ea:ad:bb:b9:fc:b8:97:
                    5d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2F:4B:9E:C3:A2:9A:AF:9C:CE:EE:F9:5E:6A:7E:E3:F8:90:D0:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.240.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:0b:8a:6e:97:05:b9:88:24:dc:d6:35:05:f7:2f:a7:d2:03:
         32:38:a6:43:be:fa:fa:ee:b5:ba:24:dd:b0:bd:e4:ac:55:7f:
         81:99:1e:e2:ec:f6:d0:a6:e8:40:97:63:f7:3d:e5:25:23:99:
         b4:ca:ce:7c:85:00:64:6f:0b:2c:97:b3:aa:5f:a6:83:7c:ae:
         f6:fd:7b:05:39:fc:b5:91:3a:fa:22:e2:d5:83:22:de:19:43:
         d1:62:ac:12:c2:c6:5f:72:94:76:db:dd:1b:ba:ca:6d:85:f1:
         a8:60:51:de:8c:84:5c:94:b8:e4:a5:e2:18:20:e1:cc:21:f6:
         e0:91:04:1b:1f:49:cb:d1:08:5e:89:19:83:6e:cb:00:c8:9e:
         a5:7b:f7:9c:a0:de:9e:08:0b:08:f7:48:69:0e:f3:71:3c:59:
         16:a3:21:23:96:9e:04:02:94:14:0d:54:81:59:60:c0:47:e6:
         f1:8f:16:c4:2b:96:cf:91:de:13:d5:8e:2f:ed:b7:cc:4e:03:
         7c:b6:32:be:f2:cd:7e:a9:e9:0b:bd:20:a1:34:a2:9d:53:2d:
         81:70:b4:39:8f:eb:93:1c:d4:08:e6:99:bc:a9:45:04:8e:15:
         d0:89:33:d2:01:07:1b:6c:37:a4:37:c7:54:4c:b9:83:5f:2b:
         24:9d:3b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:38 2025 by rpki-client