Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/00f44ccb-b32f-33ba-8188-efb6deda08f8.roa
File:                     00f44ccb-b32f-33ba-8188-efb6deda08f8.roa (raw, json)
Hash identifier:          ZeuJdCnWx46psMNboRAlglxdmQb2yFj8AFVzkFG0684=
Subject key identifier:   86:DD:8D:E7:0E:2B:62:67:DE:EF:12:87:85:2E:43:A1:FB:50:10:A8
Certificate issuer:       /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial:       010D0C9F432858494B641525B86E06231CBC7980
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/00f44ccb-b32f-33ba-8188-efb6deda08f8.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     54004
IP address blocks:        144.168.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:15:25:b8:6e:06:23:1c:bc:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=4593d7e6-d3e7-401f-a32d-79029cafcbdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:10:ea:9b:f1:22:7d:79:dc:08:61:0d:ca:8b:
                    37:e4:9d:99:9c:21:fd:b0:40:b3:b9:ac:33:14:6a:
                    8a:5d:b9:b8:df:a7:da:f9:14:7b:22:bf:26:6a:e2:
                    0b:b8:1f:2e:79:62:65:aa:47:83:49:60:c0:28:06:
                    91:22:6b:1f:3b:fa:8e:3d:91:c5:d6:6e:9b:40:0f:
                    b6:19:cb:1e:48:2f:ab:9f:ea:87:d4:41:ae:b9:92:
                    47:64:b0:cb:6e:09:54:e1:86:c5:6e:7a:fc:48:4d:
                    6e:d1:50:c2:d8:e3:21:ec:06:8f:bb:a5:8c:a5:2f:
                    09:f3:45:a6:27:fb:7b:92:b3:d8:c1:53:54:c3:30:
                    3b:e7:eb:30:df:05:5f:cd:fd:39:86:18:8e:a3:5e:
                    ec:ed:9a:50:57:4f:26:2b:13:ed:b1:1c:2c:63:87:
                    0a:d8:b4:ca:c8:d3:92:d5:22:ea:0e:e5:f1:d0:77:
                    14:b0:c9:24:c9:05:b8:f1:a0:4e:38:77:29:a7:87:
                    fe:ed:c8:0d:c0:3e:e0:85:54:cf:7b:72:98:77:4e:
                    f6:80:06:3d:4e:19:4b:f3:ca:40:05:d9:8c:58:19:
                    1a:d5:22:20:f4:36:99:4e:ad:3c:81:b5:fa:33:87:
                    98:c5:45:c3:1b:9f:94:ad:35:24:b8:9a:97:17:22:
                    0f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DD:8D:E7:0E:2B:62:67:DE:EF:12:87:85:2E:43:A1:FB:50:10:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/00f44ccb-b32f-33ba-8188-efb6deda08f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl

            X509v3 Authority Key Identifier:
                keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:17:d0:df:55:7e:32:65:e8:c4:0d:2c:86:4c:5c:83:01:a8:
         c1:ca:d4:71:34:1d:11:7f:1e:79:74:39:4e:52:85:52:b0:96:
         4b:54:a8:d9:02:b9:21:86:8a:cc:fa:b1:b5:fb:f9:e0:ed:04:
         83:0a:06:af:f5:b6:04:3d:6f:65:4d:74:85:f5:a4:71:78:58:
         19:34:30:1b:36:90:b2:ba:84:b4:f9:ed:31:ae:c3:d6:d8:bb:
         1f:81:ab:3a:18:77:51:b2:57:b6:ad:f3:a6:6f:79:2c:62:47:
         54:8c:65:86:6f:2d:6c:b2:68:f4:c2:0e:7a:5c:ac:5e:f4:10:
         b4:26:0b:c9:3e:c9:66:ea:01:9d:f0:0f:6c:54:70:21:07:1f:
         e0:8f:cf:ce:82:c2:57:85:b7:ab:64:0c:cd:03:7b:36:ba:39:
         f8:20:8b:61:52:c7:e6:4b:6b:5c:81:de:19:67:fb:af:87:cb:
         72:cb:4b:7d:1a:06:83:19:50:b5:45:fc:19:ee:e7:5e:fe:5b:
         d3:5b:9c:48:dc:bd:92:af:03:ed:5a:b2:a4:45:e5:db:53:6b:
         0c:98:07:e4:6b:83:c9:cd:0f:c8:0a:e8:39:92:8d:04:3c:5e:
         bf:1a:98:76:23:3d:f5:d7:07:7e:18:72:be:91:2d:c9:0d:7e:
         99:34:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:57 2025 by rpki-client