Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa
File:                     27dfa34e-e99b-3a95-afac-f983350fa289.roa (raw, json)
Hash identifier:          6K+hf76coFa2D0rswmXO4pyiRL77sm+7xv3wTh4tiQM=
Subject key identifier:   C4:3B:C6:BF:B0:D8:57:DD:7E:C8:99:45:8B:DC:F2:BB:90:97:8C:FD
Certificate issuer:       /CN=961facb0-d9c9-4d9b-8bfa-17d54168d407
Certificate serial:       010D0C9F4328584854703445D08619F95F7EA620
Authority key identifier: 01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     393433
IP address blocks:        162.254.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:34:45:d0:86:19:f9:5f:7e:a6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961facb0-d9c9-4d9b-8bfa-17d54168d407
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=67973bcd-a479-4e3f-b8c7-0b8b9bfd4f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:96:e6:6f:ac:04:7a:d2:4e:a1:55:78:4c:
                    ec:2b:b6:5d:fa:67:6f:cd:ce:63:a0:52:a1:e4:6f:
                    a8:87:23:5e:31:36:7f:d1:13:2f:36:f0:fa:eb:9b:
                    e4:1d:11:87:4b:3e:4b:23:61:23:12:84:b4:69:a4:
                    bc:a8:d3:ed:1e:7c:15:f6:f3:d8:87:06:bc:a7:91:
                    cd:1d:6e:62:59:be:b2:77:96:b0:29:d0:0a:cf:83:
                    9d:32:5c:77:b1:53:b2:9c:8d:ee:98:c9:42:26:13:
                    ee:ab:51:63:3f:6a:36:e4:ce:17:5c:b2:3a:7b:f1:
                    db:50:30:64:f7:2f:eb:b9:83:9b:b9:18:dd:dc:86:
                    1d:e0:72:11:d3:4a:ac:26:3d:1a:b4:a4:ee:ed:39:
                    b6:2b:91:09:66:26:47:2a:87:05:48:07:04:4d:9f:
                    fa:d9:b5:16:a8:78:06:77:c3:fa:f4:90:40:4e:a7:
                    62:18:32:7d:4a:c1:33:17:c1:52:bf:15:cf:28:45:
                    ed:ff:7c:a8:a0:8d:37:96:f7:20:c7:8b:5c:02:a7:
                    71:72:e0:9a:e2:21:25:fa:e2:62:1c:5e:2e:84:1e:
                    e0:dc:df:a3:54:75:ef:30:8a:4f:46:4c:3d:0a:8a:
                    05:83:41:9c:a5:33:27:db:f1:d0:fb:70:43:5f:ef:
                    9f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3B:C6:BF:B0:D8:57:DD:7E:C8:99:45:8B:DC:F2:BB:90:97:8C:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl

            X509v3 Authority Key Identifier:
                keyid:01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:65:f4:40:b8:a5:8a:32:14:66:82:40:83:b7:47:43:ea:00:
         7e:83:53:5a:24:07:36:c7:b7:57:bd:4b:3a:d5:16:f6:c5:e0:
         50:84:83:8c:97:49:5b:b5:5b:17:14:c1:6c:5c:45:a4:3f:b3:
         da:bd:96:40:c0:2a:2f:c9:73:32:8a:92:f8:3e:29:bb:a8:d6:
         9a:10:1e:72:03:dc:3d:a0:32:d8:ff:3d:a9:b0:b3:e8:07:4b:
         77:95:0e:23:94:92:af:09:41:f7:91:00:19:68:f9:d2:e4:79:
         a3:ac:5c:21:81:2b:a4:a0:87:58:ec:53:2d:7a:a6:31:2b:aa:
         2e:a4:fd:f9:01:3c:e5:91:ce:18:19:67:08:d9:88:88:d9:44:
         66:ce:49:54:6c:c2:8f:c4:c4:db:57:49:b5:65:21:32:39:b3:
         db:63:9f:76:4a:e1:cb:d7:5f:c0:71:4a:95:48:10:84:7e:96:
         f3:89:56:e3:7e:57:9b:c2:2a:1d:24:06:da:fc:c1:e0:9b:0b:
         69:7d:3c:2e:e0:82:0a:3a:43:d4:9d:46:95:32:85:5a:de:66:
         9c:4f:87:1c:40:0d:8a:8c:db:f2:36:c9:9c:ec:7c:cc:de:7e:
         f2:dd:8d:68:6a:83:66:d1:b4:f5:0c:de:0f:09:c6:c3:f9:20:
         a9:0f:7f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:25 2025 by rpki-client