Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/5676a646-c349-37ae-be20-5bbe556b7f08.roa
File:                     5676a646-c349-37ae-be20-5bbe556b7f08.roa (raw, json)
Hash identifier:          B9HZhI7vf38QlELNMeBMs+0/fJjDAdST6YMzJttedko=
Subject key identifier:   6D:7A:81:71:89:98:8E:23:A2:EB:AA:8B:81:F6:A7:0E:15:62:93:FB
Certificate issuer:       /CN=80688222-2583-4dac-a7df-1d78925c7b53
Certificate serial:       010D0C9F43285849FCAA7D6739AA53206D24AB80
Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/5676a646-c349-37ae-be20-5bbe556b7f08.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     1640
IP address blocks:        162.221.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:7d:67:39:aa:53:20:6d:24:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=749e42c3-ed39-4ef7-a497-29164643a5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:07:b5:71:5e:29:ca:c1:6d:fd:58:05:b9:91:
                    7c:5d:ff:c4:4b:c8:e2:81:9c:7f:6c:c3:71:e1:6d:
                    96:aa:3c:d8:c3:c8:94:37:2d:da:e9:4f:34:5c:f2:
                    39:1a:2c:0f:57:69:0d:19:53:94:c3:38:45:7b:b6:
                    81:dd:a1:d2:1f:f8:60:c2:65:12:7a:63:68:6b:50:
                    3c:dc:89:28:41:91:d1:1a:7b:5f:11:93:b7:af:ae:
                    36:d1:c7:d1:f5:63:0a:ed:aa:bd:e9:72:f0:c1:78:
                    f3:46:fa:82:fc:fe:bc:78:3a:18:04:e4:1c:e3:23:
                    f8:30:b4:3e:ec:d8:48:42:6d:84:24:7c:c7:01:f4:
                    85:c1:b2:8f:7d:94:0f:7c:37:af:46:56:cc:73:c0:
                    99:ac:d5:df:51:f8:ca:0f:63:bc:b6:19:f5:04:c2:
                    b7:27:72:8e:f4:c0:a5:d6:49:93:d8:5e:ad:28:c7:
                    64:8f:bb:50:92:72:e2:ab:79:eb:9d:49:e5:30:3c:
                    27:23:56:0b:2d:95:00:a5:43:4e:d3:ac:1f:9d:89:
                    78:83:04:96:b1:0a:38:27:10:77:26:00:83:ee:10:
                    2d:7a:c7:75:35:db:d6:24:38:2a:8f:89:fb:28:aa:
                    47:72:88:28:f4:ae:33:a2:35:6c:22:3a:9c:6c:7c:
                    25:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7A:81:71:89:98:8E:23:A2:EB:AA:8B:81:F6:A7:0E:15:62:93:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/5676a646-c349-37ae-be20-5bbe556b7f08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:db:3f:cf:d3:02:89:8a:d9:17:09:00:7e:c7:64:2e:70:93:
         64:ac:57:55:f6:c2:cd:88:bd:73:05:14:fb:10:d0:4d:1b:65:
         a0:9c:06:6d:94:cb:2b:e1:b7:44:08:09:d0:16:48:44:af:a6:
         41:a7:16:cc:d8:4a:cf:1b:a7:08:ea:38:be:80:3a:02:d0:a8:
         64:df:a7:62:a7:b6:6e:4b:22:2a:53:ff:0b:fe:8e:b7:d1:b8:
         dd:b3:d6:f9:be:eb:e5:ca:f8:e1:a0:a5:ea:2f:cb:87:84:43:
         fa:03:75:0d:81:ca:7c:32:8b:c5:bf:a9:79:a8:71:61:bc:40:
         21:8e:c6:59:8b:46:ec:88:bf:6d:81:1c:39:a2:88:8b:ce:1c:
         e9:a4:e3:67:1b:16:89:53:02:a9:0b:0b:77:96:4d:29:0b:c7:
         59:15:ae:57:3e:2f:f8:d9:e2:2b:0a:e7:7a:80:84:44:38:01:
         57:eb:d2:60:e9:55:5b:2f:b1:c3:65:f7:d7:b1:f0:96:c2:ac:
         86:49:0b:ba:ac:39:22:05:0e:dc:4e:7b:d5:d6:36:3a:f0:f4:
         9f:64:a9:a1:f7:b1:04:0a:ed:9c:37:41:58:d9:cb:b2:ed:d1:
         96:7c:60:1d:af:47:81:c9:98:9b:fa:9b:31:89:cd:1e:d0:35:
         10:8a:4a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:56:45 2025 by rpki-client