Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/d352ca4f-8b63-3dcb-92f6-b64c3ee6a787.roa
File:                     d352ca4f-8b63-3dcb-92f6-b64c3ee6a787.roa (raw, json)
Hash identifier:          a91cDvcChwY3QeMG7BSNO6JBRJRLuKNLyW37hF9Apjs=
Subject key identifier:   2A:E8:9F:D4:56:0F:FE:85:0F:81:CB:98:8B:0A:C3:80:DD:C7:41:A5
Certificate issuer:       /CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
Certificate serial:       010D0C9F43285848DEA1341616634CC11210A700
Authority key identifier: C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/d352ca4f-8b63-3dcb-92f6-b64c3ee6a787.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     62695
IP address blocks:        162.246.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:34:16:16:63:4c:c1:12:10:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=388b57b3-4589-4e94-9121-7ee62ac027be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:65:02:ab:9e:c3:05:d0:3e:4a:bf:a5:8c:4f:
                    b8:7b:2b:4f:90:ef:c0:48:e6:9f:09:39:56:fa:ad:
                    af:92:1c:59:40:94:36:c2:68:ca:45:46:24:1b:29:
                    0e:72:8d:a0:bc:8e:f3:32:da:8f:37:3c:0d:8d:79:
                    3c:1e:d8:94:d6:2f:26:d9:37:b4:24:d4:b5:79:a8:
                    94:95:d1:10:e3:d7:60:d5:22:93:30:9d:ba:93:22:
                    76:60:e0:fa:e7:8c:e8:66:46:a2:cd:b6:e4:b6:0d:
                    36:4d:3f:da:3b:06:11:41:35:7f:37:89:cb:2f:48:
                    26:cc:6f:ec:5f:b1:47:01:84:bc:e4:8c:32:70:9e:
                    00:79:a7:f3:e1:81:13:8c:51:7d:a6:e6:ca:58:1a:
                    b9:86:f0:e8:62:db:6a:16:c3:8b:12:0a:62:2c:24:
                    e7:ee:ea:eb:27:b2:84:98:31:68:0b:ed:31:8a:50:
                    47:4c:81:80:83:48:dd:36:d6:db:29:09:9d:55:62:
                    01:d2:fb:ec:08:88:5e:46:0d:ac:24:03:7d:31:d9:
                    31:4a:d9:f5:c4:cd:c6:8e:ba:57:d5:8f:28:0c:d4:
                    9a:8a:85:ce:aa:a3:33:a3:17:2a:d0:e2:a6:08:52:
                    c7:90:26:e9:16:4c:16:ba:bd:12:04:39:4c:f5:c6:
                    2a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E8:9F:D4:56:0F:FE:85:0F:81:CB:98:8B:0A:C3:80:DD:C7:41:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/d352ca4f-8b63-3dcb-92f6-b64c3ee6a787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl

            X509v3 Authority Key Identifier:
                keyid:C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:7f:9e:3d:28:6c:25:42:6b:15:15:05:45:4d:85:44:56:88:
         db:02:83:8c:42:6d:0f:9a:c1:4b:40:da:1b:96:42:bb:4c:66:
         14:e9:54:8f:0b:00:e4:e9:d1:1d:62:be:7d:d2:6d:6b:01:04:
         a2:c4:42:f6:43:69:d6:08:30:83:f2:ae:b0:7b:3a:e3:10:9a:
         12:f2:0c:d1:ed:1a:67:fb:04:59:d9:d4:b8:d3:a1:b5:1c:9c:
         8c:d7:1b:e3:49:18:7e:3f:05:38:be:e5:52:bc:a6:d3:c3:10:
         f0:d9:e8:a4:0e:59:70:c9:74:42:d0:92:2c:fd:ee:f5:02:bb:
         2d:35:40:4f:eb:f4:a7:ba:0e:2d:24:5a:15:b1:0b:c4:0b:49:
         d7:00:41:71:cc:2b:2f:9b:98:73:21:3d:1b:11:5a:f2:01:83:
         b1:2c:91:eb:42:7e:11:f5:b5:c4:09:ab:4a:31:56:1d:67:16:
         ab:60:4a:e1:ad:2c:ee:15:b9:3d:19:ce:c0:54:e0:d5:17:a2:
         49:d4:d8:9d:fb:1b:73:be:f3:96:d5:61:57:46:2d:7a:5a:81:
         e4:12:72:d8:7f:c0:4f:15:e6:fc:40:5a:b3:72:3a:34:21:3c:
         e3:ab:c9:4e:08:a4:f9:22:b8:4c:f9:d9:11:e2:21:e4:51:3b:
         70:a3:aa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:40 2025 by rpki-client