Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/a317804f-60e4-3002-925a-258b38ed37e9.roa
File:                     a317804f-60e4-3002-925a-258b38ed37e9.roa (raw, json)
Hash identifier:          7kBYHwQpKRwssOWCq8mQp1+MkVY8nPclxFniahF9v/8=
Subject key identifier:   AE:0D:DE:4D:31:A6:6A:22:B1:BD:0A:90:AC:01:70:B2:23:11:38:8A
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F43285848CDE10F82A581BB1A6FB8EB00
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/a317804f-60e4-3002-925a-258b38ed37e9.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        157.248.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:0f:82:a5:81:bb:1a:6f:b8:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=dd2bfda4-0f37-4007-87d8-b3061f2aeff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:32:9c:4e:b6:8d:4e:d8:a4:4f:6e:da:8c:
                    b5:2a:0e:33:2f:0b:89:70:01:47:d3:1e:72:d7:ff:
                    fb:53:38:c1:a0:d7:f0:b1:e9:6c:a0:d6:a6:40:a5:
                    35:21:75:ca:3f:46:dc:b5:f8:7d:a5:f9:fe:75:c9:
                    51:1d:85:9f:50:8b:fc:df:27:4f:a0:84:4b:aa:d2:
                    6d:60:b1:eb:3e:ad:67:31:13:9e:51:5a:af:58:1b:
                    43:ed:85:0d:33:7e:e9:84:3b:87:30:ea:34:43:1a:
                    ca:19:6b:08:de:96:c0:0d:db:96:82:9a:4e:d9:d6:
                    a5:da:12:28:0e:82:76:1e:b1:cf:b6:c5:c6:a7:8b:
                    04:18:1a:ac:17:2b:00:f7:0a:fe:e1:6b:57:73:0b:
                    f8:34:c8:99:15:7c:af:bb:a5:91:23:ca:cf:12:fc:
                    25:06:da:1e:3a:30:ed:f0:a9:61:47:47:18:b5:5a:
                    a7:96:c2:ae:fb:6f:b7:7d:ea:77:22:db:ba:ba:61:
                    ad:cc:dd:89:09:ed:68:c7:38:d5:07:02:c9:ee:a8:
                    b5:8f:d9:fd:cb:01:7d:fc:8b:b0:25:52:1f:9f:dc:
                    ae:26:ce:b3:8c:0d:c8:95:0a:40:a6:eb:76:b6:d6:
                    b1:42:39:7d:ba:8d:23:01:30:34:61:23:c1:6d:0b:
                    ca:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0D:DE:4D:31:A6:6A:22:B1:BD:0A:90:AC:01:70:B2:23:11:38:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/a317804f-60e4-3002-925a-258b38ed37e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:f4:8e:7d:57:8f:8e:27:84:10:e3:e1:9b:42:38:df:67:64:
         3b:94:74:ce:c3:c4:ab:67:e2:b9:be:f5:dc:69:20:a6:22:4d:
         e4:49:45:c9:b8:6a:b6:be:9f:65:d8:8e:03:e2:14:26:13:54:
         67:0e:b8:72:74:86:7f:7b:25:20:f2:fd:40:ff:3f:14:1a:3c:
         a2:af:ba:d1:33:55:8c:2c:c1:04:9a:69:5a:46:26:dd:57:6f:
         83:27:55:87:ef:ee:8f:04:c4:79:b9:b1:79:e1:03:3f:4a:b7:
         54:21:e6:20:df:2c:fb:e8:4c:ca:ff:12:d4:2e:a2:b0:43:23:
         49:fb:07:27:e4:2d:25:b5:18:53:96:a9:cb:ed:21:98:7b:63:
         eb:27:9c:c1:b3:14:09:82:88:65:74:2e:67:ec:05:9b:01:a0:
         01:79:cf:74:7e:42:ec:97:a9:50:39:56:cf:0d:c2:08:4c:72:
         79:dd:47:dc:25:6f:d5:c7:43:90:d1:a9:d5:73:43:d9:7d:f1:
         40:55:ec:d7:1b:60:f3:09:c3:9f:73:81:d1:b6:07:90:48:4e:
         a0:a4:37:65:d3:85:7f:31:27:c4:d9:c7:14:95:21:a0:ce:12:
         5f:37:6a:6c:33:2d:f3:ee:e4:59:17:a0:bd:4d:09:4c:ae:74:
         e8:0a:5e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:19 2025 by rpki-client