Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/245456e3-b7cb-3823-8080-71839df2fcd5.roa
File:                     245456e3-b7cb-3823-8080-71839df2fcd5.roa (raw, json)
Hash identifier:          gz071IXX3h+gJ/etk6e/gDWpE8sPkdiuw3TLwfhJ+gw=
Subject key identifier:   95:C5:06:29:6C:1B:B5:E2:00:A3:FC:96:63:D8:D8:52:77:A4:50:E3
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F43285849D42FA0BB8FC8773FF9086F00
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/245456e3-b7cb-3823-8080-71839df2fcd5.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     54548
IP address blocks:        162.222.200.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:a0:bb:8f:c8:77:3f:f9:08:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=7605a703-3dea-4cf5-8fad-aab425e37bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:53:52:7e:bc:e6:5f:dd:56:b2:61:c6:b9:b7:
                    7d:87:37:51:c3:1a:b8:80:01:28:76:c7:2b:b0:54:
                    2b:e1:ca:99:aa:28:cf:f4:91:97:45:43:9e:16:1a:
                    3e:1b:22:cd:f2:34:a1:7e:4d:8e:60:17:6d:bf:1f:
                    5a:32:96:db:2e:d1:5f:a1:5a:e8:87:50:f7:4b:6a:
                    32:d6:00:93:e2:16:27:a5:bc:90:0f:d4:fd:3d:0c:
                    57:fd:e4:39:f7:84:3f:97:0c:f2:02:4e:3d:ad:90:
                    53:20:84:bb:06:e6:f5:3f:a0:80:a7:89:f3:3b:ad:
                    5d:a7:4a:01:12:19:21:b7:6f:df:bd:00:70:8d:61:
                    cf:0b:9b:7d:19:f2:cd:16:07:93:5d:b8:de:b5:4a:
                    51:2b:76:31:92:bb:49:9f:84:98:f5:9d:6f:7c:89:
                    35:ae:bc:f4:9f:8e:00:87:de:1c:2a:0a:e6:fa:c2:
                    83:26:41:cf:75:b7:34:4b:63:80:42:40:ab:a6:08:
                    06:5d:f3:07:b9:b1:c4:29:81:8d:ba:72:92:e5:9f:
                    99:16:13:18:78:cf:58:33:25:d4:a5:1e:da:da:11:
                    67:3c:fa:d8:81:a5:e0:a9:7f:1b:10:85:e5:30:73:
                    0b:62:e3:27:46:08:40:81:44:57:0a:9f:6c:a4:27:
                    1a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C5:06:29:6C:1B:B5:E2:00:A3:FC:96:63:D8:D8:52:77:A4:50:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/245456e3-b7cb-3823-8080-71839df2fcd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:b9:dc:db:4d:a8:25:b9:e2:06:9f:37:45:1d:dc:cb:2f:cf:
         92:4f:32:6c:32:72:40:5b:9b:a3:76:63:c5:19:5c:61:af:00:
         5b:64:b1:f0:a6:a8:a1:8c:83:bf:7f:96:0c:7d:8b:41:78:5e:
         ec:2e:ca:aa:c8:a5:21:4d:21:9c:9d:d6:e6:d6:e6:77:e7:e9:
         7d:52:bb:10:13:ab:8c:b3:e8:30:58:a1:4d:7f:83:80:30:1f:
         e3:dc:f8:74:e8:db:0e:64:83:88:ee:e2:60:24:17:f8:3a:4a:
         a1:38:13:ee:47:d1:93:85:27:41:ea:ad:66:5d:0d:65:3f:6b:
         97:ed:fb:b5:07:7d:bb:1d:ce:8c:16:62:d2:e8:66:a4:21:a5:
         ae:a3:f2:81:89:96:95:9d:6a:f8:7c:84:02:c1:0b:cb:bc:14:
         87:1a:cf:55:4d:71:f7:d1:31:66:4c:5d:d5:9f:5b:0b:95:5b:
         47:81:89:3a:72:d0:9b:ed:13:4b:11:8f:eb:69:d9:93:87:43:
         a7:e2:1f:fb:37:76:f2:eb:00:94:b0:09:42:d1:55:fe:b4:aa:
         9c:48:07:23:2b:7c:b9:98:ad:2f:43:c3:14:bc:4a:53:21:8a:
         bf:ab:8c:13:49:0f:20:71:ca:e2:1f:21:5d:ea:2a:4f:1c:26:
         34:c3:70:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:37:00 2025 by rpki-client