Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/52b0c26c-9fd5-3df2-96ce-105ee94f94f9.roa
File:                     52b0c26c-9fd5-3df2-96ce-105ee94f94f9.roa (raw, json)
Hash identifier:          U5vp05Bm2w5UpkFfrqSvdaYiedNUMwDofectTJZJia4=
Subject key identifier:   72:7A:C3:99:0C:8F:DC:1E:E0:6A:A8:20:A0:82:13:06:4C:7A:7C:6B
Certificate issuer:       /CN=cf6e862f-83c2-4143-b47a-74db6f210162
Certificate serial:       010D0C9F43285848EF613BA38E581F9CAAFE8980
Authority key identifier: 4E:A7:5F:25:70:1C:46:B0:35:50:43:28:59:2C:BD:32:4F:A8:D1:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/52b0c26c-9fd5-3df2-96ce-105ee94f94f9.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     400034
IP address blocks:        165.140.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:3b:a3:8e:58:1f:9c:aa:fe:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf6e862f-83c2-4143-b47a-74db6f210162
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=9d3b31a6-6d80-4346-867c-c15939de585e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:b6:3a:9c:1a:c1:e7:c4:99:e3:7e:f6:fb:
                    e1:b9:3b:7a:ba:13:14:56:33:04:12:11:34:fe:9b:
                    62:dc:fb:96:a9:e7:58:5b:45:d0:3c:86:43:a7:82:
                    0c:4b:23:cc:54:07:46:4c:25:66:cc:bd:75:1d:c7:
                    f4:48:fe:d2:15:9e:c5:a0:52:3d:bf:a6:40:20:b3:
                    9a:20:61:9e:0c:16:13:ff:e4:16:05:cf:b1:d0:a7:
                    58:3b:b7:7f:39:73:c1:bc:23:f1:30:79:8e:db:cc:
                    e8:a1:f0:ba:79:6d:6a:89:42:d1:58:37:e2:53:fb:
                    a8:a3:94:88:49:43:96:9b:38:f1:9b:bb:65:13:cc:
                    d1:b3:55:cd:b9:01:4b:d1:5d:cc:c5:20:c5:5c:f1:
                    41:64:c8:d2:83:2b:7c:58:ec:84:83:de:6b:a8:2b:
                    04:c7:c1:5f:be:22:06:2a:3b:34:19:7e:86:8e:9a:
                    8e:37:5f:11:f2:0f:38:34:9f:72:ab:01:c6:4c:09:
                    49:8b:70:48:e4:13:39:83:42:64:cd:b1:e7:59:04:
                    3e:aa:62:99:86:cc:f0:9b:57:84:a2:32:27:b8:9a:
                    1f:68:ea:77:b0:11:b7:c2:4a:44:cc:38:ac:96:63:
                    c2:9c:5e:e0:40:48:46:1e:44:ac:11:9f:5e:bc:d2:
                    45:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7A:C3:99:0C:8F:DC:1E:E0:6A:A8:20:A0:82:13:06:4C:7A:7C:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/52b0c26c-9fd5-3df2-96ce-105ee94f94f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.crl

            X509v3 Authority Key Identifier:
                keyid:4E:A7:5F:25:70:1C:46:B0:35:50:43:28:59:2C:BD:32:4F:A8:D1:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f5:00:83:cd:09:e6:e7:71:a7:b8:e3:7e:e4:ff:ca:8e:ca:
         06:ba:f8:31:21:5f:f2:8f:aa:76:0f:ae:9e:3d:e2:4b:01:23:
         06:1b:24:5b:f1:3f:32:5a:c7:74:f1:bd:23:62:34:41:53:21:
         dc:7b:a7:20:8c:8f:17:05:3a:bd:f7:6a:75:1f:48:1b:da:c5:
         97:7f:3e:8b:53:8f:c0:82:af:8d:79:1d:93:e0:05:48:c1:6e:
         41:0e:66:21:b1:81:16:16:5b:21:1f:cf:68:18:19:54:66:5b:
         73:40:cf:ad:43:25:dd:84:06:01:90:e1:a5:cb:47:f3:69:62:
         5e:d5:33:a8:23:09:d4:52:18:9c:5e:73:75:48:93:cf:5b:4e:
         8b:10:57:78:1d:ff:a2:f2:7f:ff:ff:ef:9d:36:bd:f2:4f:c7:
         da:d1:ce:11:6e:84:a9:e6:32:bb:7f:cd:3d:bc:24:24:4c:a6:
         0b:10:24:bb:eb:c9:67:f1:ee:94:c8:95:a4:54:8a:f2:ca:ba:
         75:88:d0:0d:86:ea:29:35:57:d2:35:7d:5f:02:d5:ed:7c:73:
         fb:cd:a3:f4:f1:c2:1c:ca:a7:27:3b:5d:88:0e:14:eb:fe:91:
         4f:85:01:c9:25:f8:b3:7c:b6:d0:6f:e3:fb:d5:a6:fb:28:e0:
         f1:ea:38:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:02 2025 by rpki-client