Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/69ea82a7-20b2-3fea-890e-0c5885057227.roa
File:                     69ea82a7-20b2-3fea-890e-0c5885057227.roa (raw, json)
Hash identifier:          g0U6tdQtyLU1TpQMtnarfNdwZ0Lf41o9+fWDLxkiLPs=
Subject key identifier:   F3:73:FF:B2:C9:5B:57:3D:D3:BC:E0:6A:25:09:58:B7:46:B3:E5:49
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F432858495ABEC7FDDD7C7B8757BEBB60
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/69ea82a7-20b2-3fea-890e-0c5885057227.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     30198
IP address blocks:        164.116.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:c7:fd:dd:7c:7b:87:57:be:bb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=43d464b4-5bcc-4656-80c5-df28c9a3a088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:68:70:e7:bc:db:ff:69:03:ee:d7:3b:fd:67:
                    be:73:60:f6:80:7f:67:33:31:9c:f3:bd:10:c0:9d:
                    93:d0:09:bb:8b:c7:c4:4c:e7:86:ba:f0:83:de:d9:
                    af:57:76:f9:0a:4d:52:f1:30:17:5a:99:5f:fb:b1:
                    61:fb:a7:6a:dc:d2:07:5c:cd:63:63:b6:4b:13:2d:
                    02:1e:bb:1e:0c:e9:1b:62:fe:74:85:23:ac:51:9d:
                    a0:7a:c6:72:f6:e6:d2:0b:d7:1c:63:30:83:83:92:
                    c9:8a:aa:52:3c:4e:39:9d:94:d5:a3:d9:70:4f:3c:
                    ad:52:57:45:51:8e:8a:9b:12:99:50:7b:46:7f:71:
                    51:db:7f:69:0b:59:cc:a0:42:7b:f8:f0:50:8f:6a:
                    9d:8a:a3:06:4b:cf:0f:d1:cb:e8:5d:be:4e:2d:77:
                    e1:db:9d:a6:0b:1c:d1:04:96:5b:64:ca:ff:67:90:
                    c5:9a:26:d9:f1:29:f6:cb:bc:a4:ec:93:82:ec:ef:
                    1c:11:35:31:7a:29:b6:38:bc:15:7a:ff:c9:ba:02:
                    e6:68:30:19:e8:fe:4f:68:21:32:f4:71:4e:49:24:
                    00:76:96:9c:ae:fa:31:fb:b9:41:94:a5:1b:d3:4f:
                    91:80:cf:d8:63:fc:ff:75:c4:68:18:84:81:9c:85:
                    bf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:73:FF:B2:C9:5B:57:3D:D3:BC:E0:6A:25:09:58:B7:46:B3:E5:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/69ea82a7-20b2-3fea-890e-0c5885057227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.116.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:16:a5:00:b2:de:0a:2f:ac:e3:05:9e:81:a2:5c:9e:51:ae:
         4a:85:42:96:8f:c3:f7:64:f4:da:fc:f5:f3:ab:01:4f:ac:02:
         50:1c:74:97:c3:8f:20:16:a0:28:f3:19:56:48:7c:10:5e:04:
         0d:8c:80:57:6a:cc:cd:71:df:f7:61:95:9d:fb:a5:50:d1:35:
         61:2f:95:dc:36:0a:ca:a0:82:50:eb:ac:66:9c:d6:75:58:b1:
         7c:fd:e1:50:ae:73:6c:12:a2:d4:49:6d:58:66:be:09:59:8a:
         1a:4c:2a:1d:db:59:04:8c:5b:4f:1d:00:ae:fc:ec:54:7e:f5:
         b0:3c:d4:ad:61:03:5e:be:42:0a:f5:e6:02:d8:0d:6f:98:02:
         2f:d2:8d:5d:bd:76:ae:86:b2:58:52:c8:46:2f:23:a4:c1:8e:
         9b:e0:f7:de:23:12:0c:5e:e0:7d:35:6f:d1:50:21:46:d2:e5:
         46:d7:57:c6:c0:20:83:27:4f:7e:21:03:36:19:de:2e:93:71:
         35:61:12:36:15:6b:0b:7f:84:19:ca:ba:c3:5a:e2:20:59:ab:
         e3:30:30:8f:f5:50:29:bb:37:1e:d9:2b:e5:9a:b2:42:cc:e9:
         40:d2:1d:86:5e:d3:d1:69:8d:b2:32:9d:18:22:01:fd:98:b6:
         fa:71:6b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:53:46 2025 by rpki-client