Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/28534db9-8f8f-3b09-b9e8-16a0d70dde09.roa
File:                     28534db9-8f8f-3b09-b9e8-16a0d70dde09.roa (raw, json)
Hash identifier:          YDJYX7zKZ8fEITHe5k/MfLAmaYyefwD6/JfVSTldHxk=
Subject key identifier:   98:28:CD:C0:56:DF:DC:B3:E2:CF:D5:00:FC:08:EC:0B:51:B9:4C:C5
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858492E13C38785E6AE9B94F9B940
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/28534db9-8f8f-3b09-b9e8-16a0d70dde09.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     376
IP address blocks:        207.162.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:c3:87:85:e6:ae:9b:94:f9:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=a5c04c9c-35a2-41a8-a13f-e2b1dee22f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:22:52:62:ce:d5:fe:34:3a:7c:7b:7d:5f:bd:
                    b8:ba:00:79:bc:f5:cc:c4:1a:7d:fd:8a:f7:cc:48:
                    47:36:44:4f:bd:48:d2:f1:d9:24:fd:10:42:b7:61:
                    35:73:53:24:eb:8c:0b:11:ab:6d:8b:2e:8e:ff:22:
                    b5:e4:b6:14:56:1e:df:21:7d:3c:04:06:8d:0e:ba:
                    b7:43:7c:a9:45:73:dd:18:41:d0:4b:57:3f:ee:3c:
                    1c:b8:f5:9b:d8:85:27:42:e8:5d:4c:91:96:ea:5f:
                    da:d1:65:d3:01:4b:80:fb:4c:d4:34:bd:9c:a6:4b:
                    38:77:50:56:16:67:53:b3:e4:a9:05:2e:89:0b:e1:
                    1a:fd:ec:db:50:35:06:9a:8b:8d:aa:76:f3:e2:6d:
                    fd:98:f1:78:00:3e:0a:13:7f:2b:00:b7:bf:f6:1a:
                    11:99:1b:59:70:b9:23:d3:d4:a2:db:c1:57:cf:42:
                    c7:0a:00:87:5f:93:22:ad:6d:2d:56:62:eb:dd:02:
                    21:6c:28:95:70:a1:db:e6:21:14:ff:bd:1c:96:18:
                    5f:59:6d:10:6c:9f:9d:13:fd:12:d4:38:9a:b9:4a:
                    1b:48:1e:2d:b3:86:81:6c:42:6e:e0:c3:ab:25:ca:
                    58:6a:53:36:02:73:59:44:44:26:a4:bf:24:0e:98:
                    f6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:28:CD:C0:56:DF:DC:B3:E2:CF:D5:00:FC:08:EC:0B:51:B9:4C:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/28534db9-8f8f-3b09-b9e8-16a0d70dde09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:df:8c:a2:b4:97:e6:b7:51:20:27:c4:59:f8:70:41:32:4b:
         8d:48:fe:96:c0:7a:f2:65:09:16:1a:f5:2b:4e:d7:f7:ee:10:
         b0:cd:3b:02:ee:d9:f8:5c:c6:33:a8:43:b1:b9:e0:8e:63:e2:
         3d:45:e1:49:82:63:ad:79:39:ab:2a:0c:f6:25:8f:79:be:15:
         f2:31:c0:bc:7f:e0:55:74:55:ce:07:b2:e2:e0:67:91:5b:2d:
         e8:e8:49:e9:b9:08:6e:ac:a3:90:32:7f:8b:39:d7:ce:a3:c1:
         c6:92:51:5b:a3:8a:da:7a:51:03:d8:a3:7c:dd:37:57:de:29:
         f0:b6:12:b7:0c:5c:c7:36:8e:dd:83:f6:1c:7c:71:44:c9:50:
         3c:1c:7e:b1:22:46:e6:6f:c4:42:e8:87:53:83:2e:66:a3:f8:
         5f:a4:c2:d3:8b:4b:c9:87:e0:77:22:0e:ee:d1:a5:41:be:d3:
         f9:91:3b:c8:4f:c8:37:d2:8d:a0:52:b4:0d:b1:82:d9:0f:b8:
         dd:c2:1a:65:9d:bd:7f:bd:01:a3:9d:7f:0b:f9:01:d8:48:4f:
         5a:a7:8b:18:e3:1b:d5:78:6b:cf:bd:c1:9c:5f:dd:54:07:05:
         6f:c1:14:25:af:a8:ce:b7:c5:51:f8:6e:d0:37:ef:fd:91:73:
         bc:06:61:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:35:09 2025 by rpki-client