Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/a06e48d4-4460-34ad-b73e-2edb2fd5f9da.roa
File:                     a06e48d4-4460-34ad-b73e-2edb2fd5f9da.roa (raw, json)
Hash identifier:          EFQi4S84UWtn78WFz7Lka8l7GSH2WBnECNO/ZH2jaCE=
Subject key identifier:   C0:FC:58:E8:82:2E:67:D4:02:54:BE:FD:0F:B9:7C:01:C5:9D:B5:DC
Certificate issuer:       /CN=0ad2b3c4-a64c-4afd-b0df-103361339550
Certificate serial:       010D0C9F43285848BE861E904947A4EC8FB13C80
Authority key identifier: B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/a06e48d4-4460-34ad-b73e-2edb2fd5f9da.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     11287
IP address blocks:        163.182.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:1e:90:49:47:a4:ec:8f:b1:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ad2b3c4-a64c-4afd-b0df-103361339550
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=7b86b28e-3263-45cc-b382-1281b5a0b2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:e6:95:d8:96:ac:d4:cb:39:78:6e:57:bc:
                    86:be:8d:1c:7e:fb:f0:52:cb:aa:d5:47:9f:0f:2d:
                    94:26:20:cc:7b:3f:bb:52:24:fc:a1:c5:fc:f5:11:
                    f6:fb:75:5e:df:37:ec:93:7d:1c:a0:a4:ad:cc:5f:
                    2b:d1:71:b4:b6:70:08:26:6b:91:f3:b2:f9:df:df:
                    9f:7b:e4:d9:b3:eb:fc:6b:c0:55:4f:53:77:96:a7:
                    39:5f:75:4a:0f:b0:8d:e3:4d:74:bb:eb:c4:70:0d:
                    f1:a4:be:e6:96:c6:87:19:d5:4b:d1:93:b2:2d:e1:
                    3d:d8:a3:bc:66:ed:25:7a:aa:17:95:30:80:8b:26:
                    29:a3:5e:62:64:05:ba:5b:45:b9:a9:ab:3c:d4:8d:
                    3c:e2:fe:32:2c:33:16:6a:c0:f2:50:83:34:94:30:
                    8b:b2:4e:62:b0:5e:b8:c1:79:92:99:f5:17:30:70:
                    be:ef:1f:ce:4b:0c:58:25:2f:3c:76:f1:d9:aa:66:
                    eb:e5:f9:6d:51:1a:96:89:f4:02:4c:17:f2:d6:3d:
                    df:77:c6:f6:e1:90:78:46:50:9b:21:62:ae:da:6e:
                    e9:57:f8:2b:13:27:f3:ff:d0:f4:f1:e6:bc:1f:98:
                    d5:98:e9:87:56:98:e9:da:e7:bb:5a:67:09:40:1b:
                    f2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FC:58:E8:82:2E:67:D4:02:54:BE:FD:0F:B9:7C:01:C5:9D:B5:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/a06e48d4-4460-34ad-b73e-2edb2fd5f9da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl

            X509v3 Authority Key Identifier:
                keyid:B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.182.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:a4:b1:ff:71:96:72:37:d0:8f:a0:c2:ac:3c:e8:25:71:64:
         68:5e:cb:a2:40:2b:47:d4:2f:08:53:a4:03:94:72:57:a8:59:
         ed:82:a8:25:75:59:71:20:77:55:6a:23:98:51:5b:73:c7:90:
         7f:e4:95:f8:cc:ac:93:e5:ac:25:44:43:bd:9d:8a:1b:34:94:
         f3:8c:1c:19:19:8e:fd:1c:4b:79:5b:03:24:1d:57:85:77:0f:
         53:7e:51:69:a7:0a:59:31:0a:5a:53:80:81:e8:5e:20:93:c8:
         2d:e4:87:26:d6:2f:a2:77:af:62:51:99:24:06:76:56:8a:c9:
         09:4f:83:69:95:c7:09:f3:c0:cb:1e:6d:00:e9:8e:81:db:cd:
         d4:da:ef:d7:93:17:a9:9d:89:c3:21:46:cc:b4:81:2a:37:4c:
         d0:40:59:e7:f6:23:1f:75:7b:58:69:72:b0:7e:be:5d:da:b9:
         a3:95:da:30:e9:bf:c2:88:78:c8:02:c8:6a:8b:69:4e:c7:b3:
         f5:2f:c5:62:a9:c8:0a:8e:88:1a:28:c4:c3:e4:f4:79:77:e4:
         ea:4e:53:1f:55:59:0e:55:2a:40:26:63:84:01:b3:22:1f:57:
         35:d3:0e:6f:20:a2:56:32:be:dd:a1:4d:f7:20:2d:ae:b9:c5:
         38:4f:89:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:49:23 2025 by rpki-client