Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/04c23e98-aec1-31e0-8c64-b259b942e308.roa
File:                     04c23e98-aec1-31e0-8c64-b259b942e308.roa (raw, json)
Hash identifier:          jjUPS5CFfg/RuSq9AFESX4PjoX6Oa1ALr4tJ3QofvDg=
Subject key identifier:   8C:5C:18:8E:A5:3F:05:7E:26:FD:DE:4A:6A:EE:C5:67:E2:9C:67:1C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858487325BC7ECA35838E59FEE400
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/04c23e98-aec1-31e0-8c64-b259b942e308.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     399989
IP address blocks:        170.62.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:bc:7e:ca:35:83:8e:59:fe:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=541dbcb8-5b12-404f-a022-f568acc21bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ad:23:1b:4f:dd:af:e1:f8:54:08:a6:ec:92:
                    d1:90:31:ea:e4:08:63:45:35:d9:da:95:2f:4c:bb:
                    d4:8a:3d:e6:d0:9a:ed:b1:e0:d6:7f:79:7d:d9:b3:
                    c2:e3:cf:0b:1f:a0:42:a6:30:20:00:4e:39:01:76:
                    39:02:79:d5:f5:e4:d3:5c:3b:27:f7:db:b1:e5:d8:
                    c9:7d:ee:23:2f:90:11:1d:55:8c:06:75:7c:d8:b5:
                    a2:1e:0f:8b:fd:8f:f8:e3:1e:a7:98:25:be:14:3c:
                    df:2b:bc:f8:2a:54:3b:e8:5b:a5:27:67:53:0a:5a:
                    35:1f:3e:50:f8:ca:8e:67:40:ff:a3:66:97:fd:b3:
                    f2:a1:a3:4b:12:70:59:e0:ec:ea:16:bc:80:ee:20:
                    24:e6:99:d3:64:f2:29:a7:19:59:e5:08:80:33:f5:
                    eb:17:93:e9:db:63:1c:e5:fe:ca:34:9c:6f:4a:97:
                    c3:4f:6f:e9:07:f4:e5:70:c2:c0:3e:28:2e:e4:1c:
                    21:16:b9:c6:cc:a2:37:81:d2:2a:16:a3:cd:82:e9:
                    75:7c:b9:91:b7:52:43:53:96:0b:83:c4:0a:f8:fd:
                    7d:73:53:49:92:dd:78:ee:3a:c7:2f:92:ea:f7:8c:
                    cf:22:02:a6:9b:02:ea:54:cc:a5:05:4f:91:e6:39:
                    c0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5C:18:8E:A5:3F:05:7E:26:FD:DE:4A:6A:EE:C5:67:E2:9C:67:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/04c23e98-aec1-31e0-8c64-b259b942e308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f1:c5:4e:91:dd:3b:49:5b:75:3a:11:88:c6:4d:cf:34:f9:
         85:33:5e:4b:04:0d:a2:2b:50:90:b3:43:63:8c:cc:bb:50:ee:
         91:55:ed:c5:04:0d:20:a3:93:6e:45:49:b0:ac:68:66:23:65:
         00:18:f5:5a:a6:55:8b:c9:4c:f7:db:53:f5:3b:2b:7c:fc:c0:
         e1:d7:77:45:95:9e:fc:71:24:7c:ab:72:78:79:fd:1d:5c:48:
         02:c3:ab:59:f8:c6:bc:3e:ec:75:84:e6:33:31:f2:41:eb:82:
         46:fd:85:b8:3e:10:74:8a:15:9c:3e:6e:a7:ad:51:24:bc:d9:
         44:44:e7:8c:67:4c:b2:12:5a:37:20:fe:1b:e2:aa:ee:e8:80:
         e8:34:73:9c:68:a9:d8:bd:65:99:21:e5:30:8b:27:b4:77:aa:
         07:42:f8:47:15:99:ed:a9:9a:e2:68:61:47:6f:43:33:c4:43:
         c5:99:76:cf:67:78:fa:8d:4b:40:b9:cd:34:c0:78:1b:a1:bc:
         13:d2:09:97:bc:5f:2b:ee:83:84:fb:01:c9:8f:45:41:57:35:
         eb:5a:ba:e5:59:b4:37:ce:ab:e5:a6:32:94:e8:7e:c0:e5:08:
         a0:25:50:18:96:48:f9:c7:fc:fc:42:39:83:ea:5c:d1:b2:95:
         7d:5b:5f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:03 2025 by rpki-client