Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/706a2923-8618-3696-a79b-ca6e91ee02d6.roa
File:                     706a2923-8618-3696-a79b-ca6e91ee02d6.roa (raw, json)
Hash identifier:          gvb8ECFKQ+8K8cd2tyUKFvqvkPe20vA6V1AmqLS6sGQ=
Subject key identifier:   87:BA:0A:D5:4D:3D:2A:9D:F7:5B:EB:22:11:B0:5F:20:3E:CB:19:4F
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858480A751EA28012B5253DF87E40
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/706a2923-8618-3696-a79b-ca6e91ee02d6.roa
Signing time:             Fri 29 Nov 2024 14:00:51 +0000
ROA not before:           Fri 29 Nov 2024 14:00:51 +0000
ROA not after:            Thu 27 Feb 2025 14:00:51 +0000
asID:                     25899
IP address blocks:        162.255.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:75:1e:a2:80:12:b5:25:3d:f8:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Nov 29 14:00:51 2024 GMT
            Not After : Feb 27 14:00:51 2025 GMT
        Subject: CN=44e254ef-713c-4031-a2a7-8da1cf59cd97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5f:16:53:f0:33:00:ff:cc:8b:cf:f4:cf:68:
                    60:1f:ae:17:d3:39:35:a3:ce:fe:9c:d4:4f:6c:8d:
                    d2:dc:33:1c:8d:f8:92:34:2c:bc:11:7f:21:31:f8:
                    a7:41:af:9b:b1:ba:66:17:81:19:06:09:47:e9:9b:
                    ae:a2:48:59:3c:a8:de:21:b8:2d:cb:cf:7d:8f:25:
                    b8:34:f1:a1:86:a9:c9:36:5f:96:7e:02:18:59:ce:
                    60:b1:eb:91:48:cf:dc:b8:de:61:0f:41:87:5e:74:
                    dc:b8:ab:61:da:26:2a:69:20:c9:6f:43:0b:75:ae:
                    80:e7:4c:4b:a3:5b:20:4b:f0:17:09:d9:06:be:3d:
                    00:e5:e8:04:09:d8:b4:68:92:04:86:d3:96:ed:49:
                    03:4a:8f:3b:f3:12:e5:52:38:dd:5a:32:0f:b6:cb:
                    39:03:e0:c9:ee:a8:b8:dc:b7:f2:0b:37:83:cc:ec:
                    f5:8d:69:72:e4:a8:db:d5:de:de:98:a2:c9:e2:ff:
                    cf:00:69:ad:97:90:9b:e0:08:54:8e:41:d5:fd:14:
                    bd:33:98:b4:5f:37:22:ec:3f:8e:34:1e:cf:7b:e0:
                    9e:8b:79:00:6e:33:37:1f:dd:55:f0:a4:f6:a0:e5:
                    2e:02:0b:e4:1c:e4:4e:a7:88:2d:e9:98:22:ca:e9:
                    c4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BA:0A:D5:4D:3D:2A:9D:F7:5B:EB:22:11:B0:5F:20:3E:CB:19:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/706a2923-8618-3696-a79b-ca6e91ee02d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:76:d7:59:d2:5e:f9:da:19:f4:e2:1e:e0:02:97:c8:89:bb:
         2c:10:59:61:b0:34:35:b6:42:8c:93:a5:c2:d0:e8:a9:e9:e9:
         9d:11:28:58:9f:a3:e4:57:5d:a9:60:ba:38:ca:3e:5a:fc:12:
         45:6f:a8:15:74:fc:10:f7:28:77:c2:77:35:02:71:df:90:0e:
         08:72:e8:36:2d:73:8e:4b:db:b3:b3:c3:70:34:ee:4a:1e:f4:
         c7:a1:df:34:f4:d9:0c:b0:a7:97:d0:42:8a:93:ca:b5:17:8f:
         31:ee:d8:58:47:45:5f:9f:7f:ab:cb:1d:57:d2:cb:ab:17:05:
         68:ed:da:8b:0d:68:4c:be:f1:c2:fb:68:0c:e4:e9:9c:0c:49:
         6a:50:c9:cb:37:df:9b:f1:37:4e:b4:3b:9a:4e:29:10:e1:72:
         85:20:35:47:2a:b0:0d:66:ca:b7:dc:c2:93:27:69:07:f7:b2:
         de:9f:e3:62:29:59:71:1b:55:b6:5a:c7:0f:f6:09:d7:06:68:
         e1:38:e6:e6:77:96:d0:48:db:11:c0:27:a4:4c:e0:c4:f3:2c:
         f1:c2:2c:55:d3:7f:d9:d1:9a:0d:c2:a1:5f:9c:13:bc:59:29:
         70:19:53:b0:48:61:af:71:4b:13:e8:6c:90:ae:8d:bc:9c:5a:
         4f:e5:3b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:27 2025 by rpki-client