Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/41f823d6-4729-32ca-a636-02d6663b52bf.roa
File:                     41f823d6-4729-32ca-a636-02d6663b52bf.roa (raw, json)
Hash identifier:          ELloK1g9BLCEr0s2P4JcfnCwDSVBM4KAc3Y84ZXV6fo=
Subject key identifier:   E8:55:FA:AF:1E:1C:91:5C:C5:AC:AE:9B:C7:26:DC:EB:CD:F3:16:EC
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584950F9625D0EB0AEB2EE6FB8D2
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/41f823d6-4729-32ca-a636-02d6663b52bf.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     22333
IP address blocks:        162.250.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:62:5d:0e:b0:ae:b2:ee:6f:b8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=60fc60dc-6f09-4389-92b5-85c2cdd2415b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c8:78:d0:8c:89:df:be:9f:e8:84:98:b6:32:
                    88:04:02:39:9c:75:3b:15:23:4b:84:35:16:8b:1a:
                    1a:35:ab:c4:75:a4:f8:06:61:da:50:43:e1:73:12:
                    4e:1e:3d:50:08:6a:2e:c4:4f:7c:f1:a6:f7:eb:93:
                    7d:e7:9d:f0:62:6c:8a:5e:2c:1d:9e:9b:37:e2:2a:
                    cc:61:05:c0:78:f7:0e:09:6e:9a:4a:50:fb:48:85:
                    21:91:73:9d:6c:58:e1:5d:3f:07:e7:5f:fe:ab:57:
                    d0:2e:70:9a:96:1f:00:78:dc:82:f2:34:2d:78:99:
                    71:42:12:43:3d:d6:95:c5:2d:75:09:f4:8c:29:04:
                    e2:19:e4:13:37:0c:0e:5c:36:f3:eb:a4:95:96:01:
                    b8:0e:7e:8b:e5:92:0a:83:02:38:28:a6:3f:4b:49:
                    23:57:5f:71:59:62:ff:23:73:46:d3:d3:2f:8e:10:
                    68:07:45:03:a4:66:a9:63:a0:6e:e7:4d:0d:f0:54:
                    24:fa:6e:9b:26:ca:16:ae:cb:08:ab:a0:23:ab:40:
                    d4:77:a0:2c:a6:a9:28:1f:a9:57:b0:c2:28:7c:87:
                    10:12:81:68:ff:a8:30:27:ae:38:e7:45:d0:5b:e8:
                    e8:b5:ee:0d:20:5c:c6:5c:8b:f7:20:a0:10:25:65:
                    cf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:55:FA:AF:1E:1C:91:5C:C5:AC:AE:9B:C7:26:DC:EB:CD:F3:16:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/41f823d6-4729-32ca-a636-02d6663b52bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:63:64:5b:69:4c:3f:47:cb:aa:fd:26:ba:1b:d6:63:79:c4:
         bc:bd:4e:30:d6:eb:44:98:d0:66:42:a1:03:e9:e4:fc:4a:6a:
         6f:b3:dd:8c:8f:f3:35:b8:9f:0c:0d:cb:fc:2b:51:b9:77:1a:
         f4:47:b5:6f:55:06:da:9c:22:74:81:79:00:77:81:88:c2:0d:
         d0:0d:f1:2c:4b:e8:37:01:e4:b7:61:83:c3:cb:9a:d9:24:89:
         99:03:38:db:67:f1:2d:5a:dd:de:81:fb:92:96:8e:b2:12:92:
         f8:25:76:f3:40:9f:b3:f9:fb:60:30:91:8e:b2:91:a4:82:46:
         e0:c4:7c:2f:48:9b:7c:ef:85:c2:bf:fb:a9:a6:00:b4:5b:dc:
         bb:4e:86:f8:1e:ca:ce:21:6a:e3:44:82:7c:29:44:15:e4:9a:
         a5:8f:be:df:f2:e6:71:ca:a9:1b:ad:c4:4a:d1:39:05:a8:43:
         31:de:53:42:11:8d:af:a8:ff:98:47:7a:4d:e2:d2:3a:18:b4:
         70:22:54:4e:86:d2:c4:04:b2:6e:6c:f0:57:15:fe:d0:c7:e4:
         8e:77:d7:e2:ae:84:7f:36:38:93:ba:22:3c:c3:09:0d:c7:51:
         e4:cc:a3:fb:7f:71:db:11:43:15:a8:b9:97:b0:6d:1f:9d:bb:
         93:3c:71:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:50 2025 by rpki-client