Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/d7bc32a7-4c02-3797-ae9c-6cb448b46915.roa
File:                     d7bc32a7-4c02-3797-ae9c-6cb448b46915.roa (raw, json)
Hash identifier:          xfTsdIS9Yr5VTOQ2hlSLlQIhu/z/jCpmpTQKScb6w64=
Subject key identifier:   7B:A4:9D:1F:9B:89:60:CE:2B:97:22:01:43:DF:65:82:F7:09:E6:C1
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584953C44CD949BA5903F81BCF80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/d7bc32a7-4c02-3797-ae9c-6cb448b46915.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     11290
IP address blocks:        162.252.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4c:d9:49:ba:59:03:f8:1b:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=0443c520-5f05-41d0-83b1-16b6dd206679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a7:6f:dd:37:ff:81:6a:25:0c:6f:1b:ff:c5:
                    93:44:1e:a6:75:aa:a5:b0:d3:cc:0e:e0:2c:f7:ad:
                    ad:c0:89:00:2d:b9:e5:2f:e1:0b:3a:c8:6f:cc:7c:
                    47:02:a2:6b:73:52:c3:0a:01:f8:21:cd:26:71:fa:
                    c8:3b:25:1b:c2:8f:bd:d0:4f:57:9e:82:bc:af:e7:
                    91:ec:3e:ef:52:e3:c2:80:3b:30:42:61:51:ea:72:
                    f5:35:9d:c9:52:22:fb:7d:d0:b8:6c:2a:df:a7:2b:
                    98:99:f1:ff:1c:08:21:0c:99:2b:63:4c:2a:c5:60:
                    9d:eb:3e:06:e6:04:3b:24:fc:16:aa:d2:99:33:39:
                    63:23:f4:fc:e7:19:82:df:30:75:29:23:47:a8:2a:
                    a9:0d:58:07:e7:19:5f:bd:b8:3f:a5:79:5a:2d:6f:
                    56:3f:15:62:8c:5c:0e:57:8e:2b:c5:c3:da:3b:f7:
                    7e:fa:d3:19:dd:8c:f0:84:df:54:c8:06:c6:51:ee:
                    d7:75:d5:ae:6a:2a:83:b1:d1:90:58:bb:76:e3:57:
                    c0:2a:e4:82:cc:bf:17:1c:ff:58:74:7e:49:88:32:
                    87:ee:a5:db:fb:e0:e7:37:74:93:f5:fc:3d:02:5b:
                    c3:ce:47:1c:c5:af:d2:22:cc:d7:f6:8e:aa:77:70:
                    cc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A4:9D:1F:9B:89:60:CE:2B:97:22:01:43:DF:65:82:F7:09:E6:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/d7bc32a7-4c02-3797-ae9c-6cb448b46915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:15:a7:05:b2:1e:58:07:50:09:b7:80:4a:34:bc:94:3f:99:
         31:90:2e:7c:2e:23:e3:7a:e2:c8:fd:45:b1:8f:3b:d3:1c:e0:
         38:88:68:bc:c7:e6:72:bf:e8:09:af:4e:43:ff:0f:3a:9c:4e:
         e4:8b:3b:7f:2f:af:6e:3a:c3:c1:75:d9:17:dc:7b:cf:4e:13:
         e1:28:3f:79:34:50:74:79:46:92:44:8d:34:7b:e4:82:1f:da:
         88:ff:49:db:77:43:a5:00:ad:cc:e9:02:f8:25:68:a7:e6:05:
         52:d1:8a:2d:a4:51:0c:9a:99:22:f0:76:ba:32:03:5e:fa:d3:
         12:7a:8a:6c:95:f9:17:48:65:21:13:1f:93:9c:d9:82:f2:6f:
         17:04:5f:4f:80:a9:d5:d1:d6:ef:97:02:35:02:1a:b7:12:f8:
         e1:76:57:e2:ec:61:41:b6:d3:14:25:13:94:d3:2a:6b:36:a6:
         86:57:5d:e8:21:1a:16:cf:42:5b:30:8e:a5:48:ee:f4:35:b7:
         f2:e1:ba:4b:99:fc:45:e5:2a:02:2f:e0:05:07:e3:d8:39:71:
         e0:24:a2:77:c4:7c:9c:24:7c:df:d7:b7:d7:68:1a:62:16:ca:
         47:81:a6:9a:58:2e:99:db:5f:88:20:0d:7b:db:43:f3:d3:ff:
         46:e8:c8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:54 2025 by rpki-client