Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/e9caf269-6cab-35c6-83f5-91aac4e9f48a.roa
File:                     e9caf269-6cab-35c6-83f5-91aac4e9f48a.roa (raw, json)
Hash identifier:          4CY6Ailg+1Mr0teUFZXpD7qeCm5Pdezq+NAfzyvMvfo=
Subject key identifier:   BD:D9:F2:E6:E0:35:A2:C1:8D:2E:0B:74:14:7D:4C:5B:C5:F0:E0:B3
Certificate issuer:       /CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
Certificate serial:       010D0C9F43285848E9CBE09AF33D78C67B236880
Authority key identifier: 35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/e9caf269-6cab-35c6-83f5-91aac4e9f48a.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     40028
IP address blocks:        162.252.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:e0:9a:f3:3d:78:c6:7b:23:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=87284f70-a1aa-4b4b-9b4f-41eda00c2d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:22:cc:48:cb:3d:a6:96:eb:45:07:89:e3:a6:
                    a9:a0:a9:c9:60:5c:f2:83:db:9c:8a:76:50:7a:bd:
                    95:0c:00:da:92:82:75:6b:ee:f5:c4:94:3d:46:bb:
                    68:21:1c:af:35:27:9e:d2:66:1e:63:6f:50:8a:7e:
                    82:5d:94:69:f8:72:05:20:45:eb:d6:1f:a9:1b:b1:
                    2d:0d:de:db:c7:55:76:c2:e4:d5:4e:80:91:a7:ba:
                    17:9e:25:e8:e6:42:9c:4f:a8:47:b0:5a:23:db:df:
                    4f:97:66:8f:2b:50:82:67:32:c5:86:a9:94:2e:80:
                    83:97:ff:34:b7:3b:a6:3a:f5:62:f4:41:e3:0e:47:
                    98:8e:32:fe:b9:8a:b1:73:92:69:45:05:89:ac:cf:
                    17:4a:71:0f:6e:2d:67:55:6c:66:ab:20:a2:f3:46:
                    d3:8e:d5:e0:5e:4c:65:6c:11:2f:6d:0a:5c:98:af:
                    8c:cb:7f:32:b7:f9:78:6e:c2:f2:24:89:9c:a1:83:
                    1a:5f:71:a5:a3:f0:16:5d:ad:9a:b2:f3:c3:b9:72:
                    03:ce:4d:c8:c1:f3:5f:c3:5c:72:e0:f7:f6:2a:bc:
                    61:e3:f3:db:fb:78:3a:7e:c5:99:70:62:b8:43:9a:
                    20:25:c3:24:fd:12:cc:8e:50:f2:03:af:b3:aa:3d:
                    45:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D9:F2:E6:E0:35:A2:C1:8D:2E:0B:74:14:7D:4C:5B:C5:F0:E0:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/e9caf269-6cab-35c6-83f5-91aac4e9f48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl

            X509v3 Authority Key Identifier:
                keyid:35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:80:76:45:bc:8a:7a:a9:be:3f:db:5a:46:e9:6a:d9:af:c9:
         d7:47:f7:b1:af:ea:33:2d:76:4b:9c:87:6d:2e:3f:f9:a4:b0:
         67:e4:18:3f:ce:dd:ce:0b:5d:bd:92:7e:50:66:2b:10:1b:8b:
         df:f4:02:35:4d:66:4e:00:94:58:aa:7f:d8:39:1e:59:0f:5d:
         57:9a:84:f7:3c:0d:a7:f0:e6:4c:b3:c9:1a:6b:fd:9d:9b:91:
         f2:78:88:85:09:98:13:2d:a1:8b:31:aa:19:fb:a6:63:fb:0f:
         41:22:19:26:dc:c6:18:43:0a:94:98:80:94:8b:b8:44:b9:61:
         c0:d7:4a:65:1b:b3:f8:be:fa:fd:dd:b9:d1:b1:b3:61:fe:21:
         f0:f1:b8:ee:17:2f:d0:08:cd:01:ce:c8:df:2a:0e:84:6f:56:
         0d:c2:89:c8:6d:e0:62:07:86:bf:39:c6:a0:a6:76:53:8c:0d:
         d5:90:08:12:f1:6a:5d:a9:cb:44:0d:15:06:63:dc:5e:d4:a1:
         95:42:54:5e:c8:ad:78:88:1e:38:89:c1:ca:59:ce:76:06:03:
         6b:9c:a4:44:df:5b:b8:c1:21:a7:48:c9:d9:28:c2:07:61:73:
         5b:30:88:c9:e5:cb:2b:3c:88:4a:f3:04:50:7f:8f:64:c2:b3:
         bd:ae:78:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:50:31 2025 by rpki-client