Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/bb67222d-2500-3d4a-8911-f5b1c05f6086.roa
File:                     bb67222d-2500-3d4a-8911-f5b1c05f6086.roa (raw, json)
Hash identifier:          Sf6S1yXAxdAWyq2wXoUJKxTgchCyGcl3FO1JiSwZ7/0=
Subject key identifier:   67:A7:D9:03:53:2E:8C:51:F2:50:E1:50:A1:8F:B1:55:B4:56:7E:7C
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584921840912FE24CF0D3DAA2980
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/bb67222d-2500-3d4a-8911-f5b1c05f6086.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        162.247.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:09:12:fe:24:cf:0d:3d:aa:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=445c0b38-c7b6-406d-9bb0-520bce345ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:62:e4:21:3c:bb:b3:92:24:33:c0:e2:a1:44:
                    e2:d6:80:11:cd:25:99:1b:2f:83:eb:45:be:53:ef:
                    16:38:50:da:4c:95:d2:47:87:25:62:2c:79:fc:80:
                    5e:7d:af:11:82:0c:ca:27:e8:24:3f:dd:0f:c6:11:
                    07:0e:74:33:6c:42:b9:4c:bb:23:25:e7:2e:66:e9:
                    70:d8:d2:03:3a:43:43:b3:2b:c2:52:65:9a:21:b7:
                    96:3e:24:4e:55:73:65:5d:a4:fa:f3:9f:ed:0f:b4:
                    78:9d:3a:32:32:a6:cc:df:0d:8e:70:bd:3c:2e:88:
                    95:c0:b1:61:6a:19:01:1b:98:cd:c9:7a:f3:eb:a1:
                    f8:e6:41:26:09:a8:4a:32:e9:ac:35:13:0d:1f:10:
                    cf:1c:5f:c9:cd:56:cc:f3:ed:77:92:0d:59:c6:32:
                    92:ed:39:3b:4b:c8:3d:7f:77:41:64:e3:85:50:3e:
                    c3:ea:9c:4b:45:b9:03:2a:14:fb:f0:f9:09:c2:d0:
                    85:d0:a9:55:f4:ea:a2:29:0c:5b:b3:3b:19:15:88:
                    12:45:37:99:12:4b:d3:4a:d5:fc:81:f1:06:d9:54:
                    bd:39:ac:29:2b:28:ca:2f:8a:68:c1:bf:26:d8:45:
                    d6:3e:44:33:1a:64:43:c1:8f:d0:7c:4a:c3:9b:cd:
                    d5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A7:D9:03:53:2E:8C:51:F2:50:E1:50:A1:8F:B1:55:B4:56:7E:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/bb67222d-2500-3d4a-8911-f5b1c05f6086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:bf:3c:d3:19:88:ed:48:d1:29:be:9a:58:b9:fd:d4:e1:f3:
         0b:d3:05:ae:12:55:0f:93:73:f8:54:8e:84:7f:c6:2c:a1:d8:
         d3:ee:c7:f4:fd:20:01:ab:aa:27:c8:df:80:ca:16:50:fd:3c:
         b7:91:67:26:b7:c4:f3:c8:e6:39:10:60:1e:30:d7:44:46:29:
         90:6b:a8:8b:c0:86:63:7b:6f:5c:d8:8a:fd:4f:1b:47:82:10:
         6e:0e:ce:25:b7:8a:92:e8:36:2b:8b:46:70:98:02:bf:32:be:
         57:02:68:06:e1:4c:3f:7c:e7:73:1a:9c:a6:34:7b:3b:8b:a9:
         ab:5e:74:c1:7f:1e:43:05:fe:46:1e:1c:68:a7:50:17:23:ea:
         8f:d5:52:71:54:b7:f9:35:6b:df:32:ca:69:40:54:b6:8e:80:
         e9:b1:34:ed:d2:12:6c:d8:4c:20:e9:26:b0:31:30:cc:25:c1:
         cd:2c:8c:a8:33:ab:c3:b4:6c:5b:80:f4:87:f6:e0:5e:a3:2a:
         ba:ac:76:56:dd:a8:5c:b1:13:2c:8f:b9:e8:68:f3:09:39:08:
         fc:48:c7:16:dc:32:17:82:43:07:15:d8:72:52:2b:50:94:cd:
         45:3e:8f:f8:7e:3d:ed:ed:e7:23:2a:10:52:2b:ec:60:5b:2d:
         ac:d6:b6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:09:25 2025 by rpki-client