Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/01c82124-3be2-3457-bbcb-37774f6f3c39.roa
File:                     01c82124-3be2-3457-bbcb-37774f6f3c39.roa (raw, json)
Hash identifier:          Llyxz+kshqvlH1+HXWDF3XpkKZansV4SFaw1Pv+nuiE=
Subject key identifier:   8A:4D:C9:62:29:16:F0:FA:7B:88:86:3C:C2:5E:E6:55:EB:58:05:1A
Certificate issuer:       /CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf
Certificate serial:       010D0C9F4328584921840029D60FB8C59DB73A80
Authority key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/01c82124-3be2-3457-bbcb-37774f6f3c39.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     399864
IP address blocks:        207.167.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:00:29:d6:0f:b8:c5:9d:b7:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=845066f2-28bd-4823-ab8e-8ee46e9acb15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:58:4d:9b:fb:82:04:86:53:46:b0:1a:8d:3d:
                    cd:25:aa:60:0f:ab:1a:29:09:b4:40:fa:c1:1e:1f:
                    e0:be:2c:ea:40:c0:1e:3b:da:81:79:c2:d9:49:2f:
                    36:87:cf:8e:09:1b:4e:07:0c:3c:9c:48:da:93:63:
                    5b:40:b4:c2:af:b7:15:66:73:91:c8:99:29:a4:36:
                    17:c1:15:b4:82:f3:33:a4:4a:1f:6a:ed:84:8a:d9:
                    c8:89:64:d8:d2:55:92:47:5e:38:10:8e:1a:6c:2c:
                    f8:2c:73:37:a1:30:01:5a:aa:0b:9d:f5:96:74:c6:
                    26:6c:ea:e7:9e:06:b5:f8:db:92:7b:57:35:58:e0:
                    c6:95:b8:87:43:b4:ef:bd:79:8a:8a:3f:12:cd:84:
                    2c:01:49:7f:c9:5c:af:93:79:61:84:aa:ea:9a:28:
                    5e:64:cf:49:90:f4:a5:69:39:a1:22:3f:21:77:b0:
                    be:f3:e5:22:3d:05:46:99:b4:cc:1d:88:18:76:07:
                    4c:c9:bb:1c:80:61:47:f6:86:54:33:93:90:f3:33:
                    a9:dd:9c:e5:49:32:20:de:b7:0e:d6:ae:9b:55:cc:
                    d5:86:38:32:97:03:ef:a1:74:c5:f4:06:48:3b:e0:
                    93:5c:d2:10:e2:99:86:7e:e6:01:0c:b6:ef:98:9b:
                    92:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4D:C9:62:29:16:F0:FA:7B:88:86:3C:C2:5E:E6:55:EB:58:05:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/01c82124-3be2-3457-bbcb-37774f6f3c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl

            X509v3 Authority Key Identifier:
                keyid:E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e0:f2:13:23:6d:2d:cd:66:ca:d9:85:f4:08:7b:ee:8f:06:
         ce:c7:af:b6:ab:9e:d0:4c:ca:1a:7e:bf:b0:57:b9:e1:ad:25:
         94:33:10:b0:bb:64:fb:43:3b:a4:75:e2:9c:b2:8a:fe:ad:88:
         ae:3e:dc:6b:ae:f9:7b:6e:0a:ff:6a:cf:f5:bb:23:79:75:29:
         30:b3:4c:40:8d:21:4a:6c:d6:09:46:0e:ae:9b:87:01:7c:58:
         a3:82:5e:1d:e3:62:22:61:9d:cf:0c:0b:be:bf:f9:79:2d:0f:
         2e:b4:52:4d:a8:9c:92:4e:93:f6:ad:c6:25:43:cb:67:b5:20:
         4f:75:0d:fc:a9:f7:96:77:0f:9e:7a:46:99:18:e6:6c:20:6b:
         5f:ac:dd:92:a5:1c:34:9f:c2:63:f1:60:56:68:af:29:eb:94:
         fb:ad:8f:eb:9e:a1:a9:1f:b1:a4:a9:3e:62:1e:1e:5b:d4:0a:
         82:d3:0f:1d:13:a0:42:6c:f9:a9:98:e8:99:5f:84:c3:02:a7:
         8c:0f:af:e6:1c:57:14:7b:a4:04:68:8d:dd:90:31:57:e0:3e:
         97:53:92:bb:97:06:12:53:06:5d:55:f5:83:d2:58:42:4a:4d:
         c7:a7:17:07:70:b1:22:e1:bb:8b:94:30:49:73:4a:dd:80:05:
         2f:e2:a4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:23 2025 by rpki-client