Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/f5e69843-5c54-3803-8848-2695037a74aa.roa
File:                     f5e69843-5c54-3803-8848-2695037a74aa.roa (raw, json)
Hash identifier:          no3dgxzuz2bHrHqkUOBykKvq5G4nEe94ediuixOsQ30=
Subject key identifier:   D1:7A:C4:CF:DF:DF:B9:7E:AD:37:7C:9F:AD:EC:29:6D:C2:A9:5D:38
Certificate issuer:       /CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b
Certificate serial:       010D0C9F4328584917DC25DECA778916A0A88CE0
Authority key identifier: 95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/f5e69843-5c54-3803-8848-2695037a74aa.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     62958
IP address blocks:        168.100.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:25:de:ca:77:89:16:a0:a8:8c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=c258df4a-acd1-42e0-949f-3470dc89cd6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:bb:2a:e4:17:22:38:30:1d:70:12:1b:78:
                    8d:46:ad:88:31:4e:3e:bc:1a:f0:67:a4:ef:a4:6e:
                    c1:a4:d7:58:3b:96:7b:90:f8:7f:7c:3f:3a:cd:cc:
                    00:a4:78:15:e8:3f:97:80:f2:91:90:50:22:47:c7:
                    ba:86:99:50:6b:3c:72:fb:11:89:92:39:be:a5:30:
                    1b:b5:ec:20:7d:aa:17:d2:e2:cf:31:ca:b6:37:1e:
                    c3:59:18:44:a2:95:a1:14:2a:60:dd:99:4a:31:4f:
                    19:50:e5:8d:de:1d:d1:c9:25:63:50:aa:6e:91:cc:
                    46:9c:3b:6b:1a:f1:8b:06:6d:3c:de:54:4b:35:17:
                    63:7f:0c:22:a8:a3:44:13:b3:43:05:18:53:9f:08:
                    0f:5d:47:db:5d:bf:23:d1:2f:d4:ae:bf:7b:fb:79:
                    3a:22:d0:12:a6:3e:d6:ce:d5:c8:cb:be:60:1a:1b:
                    a9:34:06:c4:99:46:4b:c2:72:41:43:f3:7e:ac:0e:
                    84:df:31:f9:d9:2d:f6:49:3b:5f:20:7a:9e:17:7f:
                    10:30:8b:8c:24:c6:20:96:d8:15:c5:8a:43:db:00:
                    52:ed:50:bd:a2:d5:f1:21:3e:5f:b0:b9:70:69:56:
                    9a:d5:1c:f5:5b:7c:e9:41:fa:ca:59:c1:17:de:52:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7A:C4:CF:DF:DF:B9:7E:AD:37:7C:9F:AD:EC:29:6D:C2:A9:5D:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/f5e69843-5c54-3803-8848-2695037a74aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.crl

            X509v3 Authority Key Identifier:
                keyid:95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:1e:e2:f7:cf:f0:ca:eb:fd:25:be:18:da:f8:57:63:da:e3:
         6d:c8:3d:d4:d7:6e:a5:2a:07:5b:44:68:b1:ac:fc:89:e2:93:
         93:28:9a:ac:45:12:a7:3c:60:6b:ae:c1:30:5c:e3:93:f6:ff:
         d7:22:be:5d:2e:ac:ab:58:fc:63:38:e9:4b:52:9f:b1:02:7a:
         25:41:98:00:5b:c8:6a:46:b7:a2:88:a2:a7:82:be:8e:3f:31:
         d7:33:e2:13:4a:f8:e7:fd:23:dd:01:9d:fd:36:9a:68:4d:b2:
         d1:a6:9c:48:86:72:50:30:fe:96:95:f7:7e:f5:c6:f2:e1:05:
         62:c0:3a:84:d9:ef:65:a2:e7:7b:db:92:f6:ba:ae:0a:1b:09:
         8d:45:66:e0:82:0d:c3:09:71:40:13:af:3f:a0:3e:93:2a:04:
         42:c5:a4:45:47:89:2c:02:18:5d:f6:d4:42:0d:e9:3f:1f:3d:
         3d:b6:83:ca:76:b8:a6:0c:8e:f8:59:2c:ea:04:9d:f3:9d:e2:
         15:3b:00:28:0c:12:af:49:22:68:60:f7:c5:af:89:7a:f1:46:
         fe:e1:83:09:88:ac:19:f1:45:a2:55:db:74:ed:89:d1:9e:f4:
         20:3e:63:fe:44:58:bd:ce:76:45:26:90:b1:3d:a4:f6:c5:7c:
         72:4a:d8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:01:55 2025 by rpki-client