Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/3f18e022-7ff7-3353-bf86-55fe45b8ac33.roa
File:                     3f18e022-7ff7-3353-bf86-55fe45b8ac33.roa (raw, json)
Hash identifier:          8QIu7jt/a8udh/fztn+xkU/ulTEpKBnTLGn/NAdEz7w=
Subject key identifier:   AC:B3:73:99:C5:E0:84:B8:7D:8D:F9:4B:8A:80:12:FF:36:F2:A4:B4
Certificate issuer:       /CN=b493bda5-0caa-4a42-8d7a-d94d27b079ea
Certificate serial:       010D0C9F43285848B35B66E99813599A2E138C40
Authority key identifier: 41:03:7A:0E:B7:0C:51:C0:85:17:D3:8C:50:A7:12:96:E7:39:58:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/3f18e022-7ff7-3353-bf86-55fe45b8ac33.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     40353
IP address blocks:        162.252.165.0/24 maxlen: 24
                          162.252.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:66:e9:98:13:59:9a:2e:13:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b493bda5-0caa-4a42-8d7a-d94d27b079ea
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=a6085cb6-b83d-4fa7-a1b1-e407c5abbb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5e:50:86:3c:e9:dc:e9:05:05:76:ef:45:1c:
                    c6:06:86:bb:bf:40:6a:0b:9a:8d:93:98:73:a2:97:
                    f2:66:25:02:9a:47:76:ae:b1:6f:ce:08:7f:a3:5b:
                    0e:97:29:0e:49:f4:f5:e7:ad:bf:b6:d7:2f:88:3a:
                    e7:0b:8c:d3:33:12:c2:1a:65:1d:0d:74:2d:67:1a:
                    e2:e9:66:54:81:42:d9:98:10:23:10:68:0a:78:b4:
                    b4:98:e6:d5:d2:22:13:fd:e3:3a:18:e8:a5:28:f5:
                    77:06:3c:ae:eb:fd:0d:65:30:24:54:fa:99:8d:75:
                    11:d6:25:04:88:91:4a:e4:99:18:d3:fd:36:e8:df:
                    6f:b0:d8:f8:ef:96:1f:1f:16:0e:f9:4b:ef:8c:30:
                    65:26:e8:8f:44:f6:e9:ea:1d:1f:73:43:3c:c7:0d:
                    1b:66:41:3d:c9:6f:9f:ae:87:8c:0c:94:56:cb:a8:
                    29:29:b0:30:3c:0d:74:7d:0d:cb:98:cc:3d:60:e4:
                    08:f7:97:d8:52:ee:59:a1:a0:a9:c6:ba:3b:a7:15:
                    8d:05:79:44:c9:a6:f3:ce:97:f9:15:4e:34:32:79:
                    6b:52:e0:e2:32:ba:ee:17:81:b1:b8:ca:58:8c:15:
                    1f:50:2e:7a:ea:51:47:17:44:72:bd:9c:9e:88:02:
                    aa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B3:73:99:C5:E0:84:B8:7D:8D:F9:4B:8A:80:12:FF:36:F2:A4:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/3f18e022-7ff7-3353-bf86-55fe45b8ac33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.crl

            X509v3 Authority Key Identifier:
                keyid:41:03:7A:0E:B7:0C:51:C0:85:17:D3:8C:50:A7:12:96:E7:39:58:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.165.0-162.252.166.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:9a:6f:08:24:4d:c3:f4:e4:26:c6:83:2d:15:50:c0:20:80:
         92:c2:f8:6c:32:f1:99:bc:68:77:72:1c:76:c7:a0:5a:e9:f4:
         63:3c:91:d2:e2:62:ee:81:86:af:82:df:58:07:32:ae:9f:d4:
         b4:ec:15:77:8e:cb:f7:f7:1b:97:17:ee:46:fc:54:63:f6:20:
         77:da:df:24:ab:4c:5d:97:bd:62:20:4a:07:12:7a:12:13:8b:
         20:cf:7f:6d:fc:e6:b3:d7:ff:e8:c7:a2:c7:e2:36:df:bd:50:
         d3:62:6f:dd:55:ca:63:76:03:08:45:61:4a:23:25:dc:7e:ab:
         40:34:f6:c3:d1:4f:72:ce:2b:fd:ca:78:8f:d8:c3:9b:53:56:
         5a:66:dd:ba:fb:23:56:dd:23:fb:02:dd:36:50:c9:ab:3d:81:
         7a:4d:5a:c1:48:fa:4e:1e:fe:b5:6a:67:6d:75:c8:a8:77:79:
         c2:9c:9f:1f:66:ef:88:ed:f2:16:71:d4:98:c5:2d:27:ee:19:
         53:77:d2:c7:da:ba:eb:11:20:35:bd:ba:75:a8:68:b1:51:e0:
         ca:39:1d:6b:1d:0a:2d:f3:df:56:ef:74:d5:0b:5b:98:83:58:
         39:eb:07:22:12:92:f6:97:40:80:89:33:e2:30:b4:f0:5b:e2:
         71:cf:ca:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:48:53 2025 by rpki-client