Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/69f267a7-9e5c-3ab1-bdd0-d1e33746d525.roa
File:                     69f267a7-9e5c-3ab1-bdd0-d1e33746d525.roa (raw, json)
Hash identifier:          xxS2xlVe22Zov/io/TytO+0bAGaQ39MTWvf6sdTOti8=
Subject key identifier:   E1:CA:0B:65:55:A7:B2:EB:D0:DF:97:3E:F7:8D:B0:9B:E9:E3:5E:B6
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F43285848BFEBA7067234708E218B1D14
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/69f267a7-9e5c-3ab1-bdd0-d1e33746d525.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     33635
IP address blocks:        162.255.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:a7:06:72:34:70:8e:21:8b:1d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=92a782fa-32e4-4f88-9e10-c66aae9af7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a2:ff:3d:0c:3f:8b:c6:9f:13:18:6f:58:15:
                    eb:e4:a9:f5:a3:51:ed:6b:64:5f:78:ff:3e:76:0c:
                    a4:37:07:1f:d6:4b:dc:84:70:ae:61:b4:5a:64:e0:
                    f9:a6:ed:7b:83:db:34:cc:08:e2:6e:fe:85:93:cd:
                    13:8a:ae:06:15:3e:74:65:71:90:32:61:a1:54:df:
                    17:f3:9e:91:e3:8d:c3:0c:2f:fa:e7:7f:71:ea:9e:
                    e8:6e:54:be:bb:02:cd:f0:ee:7a:b7:82:15:9f:91:
                    b4:07:1a:57:c1:a0:46:87:d0:28:18:99:f4:e5:ee:
                    a9:e4:75:51:15:c6:87:8d:0b:e1:47:99:c9:76:2d:
                    9e:a1:66:49:58:f3:5a:e7:c9:fc:e7:cb:b4:d5:b2:
                    09:45:f3:d9:58:d9:dd:3c:a8:00:9a:0c:2f:a3:01:
                    ca:f3:9b:3d:cd:a3:bc:e3:17:e6:ce:8e:94:9f:43:
                    07:5a:2c:ea:48:48:76:c0:06:15:e7:5a:64:24:85:
                    39:55:1c:b2:29:1b:71:fc:e1:26:43:8c:cf:cd:cf:
                    02:77:9a:ee:fd:3e:58:84:b9:4f:cc:c6:d7:c9:7d:
                    e5:0e:87:eb:1a:e8:ba:b1:ad:88:22:44:3c:b9:ce:
                    02:ec:8e:4d:da:b9:b5:79:71:f7:d9:5a:d2:d5:83:
                    bc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CA:0B:65:55:A7:B2:EB:D0:DF:97:3E:F7:8D:B0:9B:E9:E3:5E:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/69f267a7-9e5c-3ab1-bdd0-d1e33746d525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:de:78:e9:f1:82:a0:a5:d8:5f:a8:bf:c4:d5:06:c8:bc:3d:
         5c:4f:fd:49:8b:d2:30:7d:45:47:97:4c:e1:be:08:15:1b:82:
         81:da:84:5c:a2:66:62:a5:97:7d:f0:d7:bf:d9:13:39:ae:d7:
         83:e6:c9:41:20:ea:11:22:c5:f3:77:87:80:5a:94:39:6b:d6:
         2e:a8:f3:cf:f7:71:fc:8a:bd:20:76:fc:c5:f2:a5:61:45:48:
         bb:c8:b0:5c:49:15:7f:09:c5:60:9d:17:87:89:36:cf:5b:27:
         09:b2:81:f9:07:52:a0:a9:2a:61:6a:6c:a6:1d:56:a3:90:10:
         0f:77:d1:b1:13:23:1a:69:fb:04:bd:d2:00:58:a1:a9:e1:82:
         19:5d:0d:c5:86:17:3e:aa:22:e3:67:97:06:e9:82:00:26:35:
         7e:bf:a2:b5:06:0d:ff:1b:d6:af:3e:10:81:dd:dc:87:d6:73:
         66:36:2d:79:38:7f:6b:af:56:bb:a5:b8:79:3a:2f:e2:cc:c7:
         8c:7d:a4:06:1e:44:29:30:d2:dc:63:2b:95:c0:84:95:37:45:
         0a:fd:03:72:de:6e:a3:52:ae:db:ea:91:51:71:e2:ec:c6:8e:
         1d:d7:6a:6f:1f:49:e4:f8:bc:bf:ff:fa:88:1f:a8:5d:42:80:
         c7:6a:cb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:57 2025 by rpki-client