Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/8d0cac73-efc7-398b-936e-1c9237bb4b8f.roa
File:                     8d0cac73-efc7-398b-936e-1c9237bb4b8f.roa (raw, json)
Hash identifier:          UccyihFpGdcCMCoJyvo4OG2ok0xxfzYgKQJCOUQpnms=
Subject key identifier:   5E:D2:AD:AD:16:34:F2:26:08:99:D2:27:16:B5:E0:52:7E:41:97:50
Certificate issuer:       /CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
Certificate serial:       010D0C9F432858487755CFB3281B7E10D50FB840
Authority key identifier: 0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/8d0cac73-efc7-398b-936e-1c9237bb4b8f.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     21634
IP address blocks:        74.123.28.0/22 maxlen: 24
                          162.210.128.0/22 maxlen: 24
                          2620:a0:4000::/44 maxlen: 48
                          2620:114:a000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:cf:b3:28:1b:7e:10:d5:0f:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=b45d3159-bc28-4305-84b8-12cbcf5e1be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:98:80:48:39:2a:be:64:5b:a5:2d:f1:4f:4f:
                    17:9a:8e:f6:1c:47:71:63:57:44:3a:ec:e9:77:86:
                    ee:ef:ff:9f:66:03:b5:06:f2:d1:74:b2:4e:c8:8a:
                    09:a6:6e:39:3b:8d:a6:6c:46:05:f2:c4:b6:62:e5:
                    df:a2:be:bb:9f:7b:0a:9a:12:70:66:ae:9d:8d:25:
                    15:98:76:5f:1c:ee:99:5c:93:a5:3b:aa:ff:99:1e:
                    14:d2:e8:ba:be:bd:73:24:ef:cf:a6:c7:38:3b:fe:
                    0b:28:ab:e7:23:ca:68:64:ef:71:7a:cc:29:ec:67:
                    dc:dd:00:32:c8:dd:3f:70:c7:d9:db:c2:3e:21:53:
                    dc:ed:4f:71:89:b6:8f:a7:2b:58:4c:f2:dc:a9:88:
                    fb:5b:ae:83:0a:d7:d9:8f:1a:b6:c1:67:cc:67:7d:
                    91:71:32:ad:76:7b:cf:d2:c3:5c:4c:d1:95:ea:12:
                    a2:b9:bb:b0:f7:ed:f5:64:ad:7d:7e:1b:8d:e4:ec:
                    4b:32:b3:8a:f8:47:5e:05:be:ec:23:0a:56:88:4e:
                    f7:2b:a5:47:aa:f4:d0:c8:4f:b4:53:76:62:d9:3c:
                    ae:83:d4:2f:ec:ef:90:a3:ee:25:5d:0e:42:1b:70:
                    17:68:7c:b2:4f:c7:2c:87:0e:a5:c4:4c:21:17:2a:
                    c6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D2:AD:AD:16:34:F2:26:08:99:D2:27:16:B5:E0:52:7E:41:97:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/8d0cac73-efc7-398b-936e-1c9237bb4b8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl

            X509v3 Authority Key Identifier:
                keyid:0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.28.0/22
                  162.210.128.0/22
                IPv6:
                  2620:a0:4000::/44
                  2620:114:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:56:a7:a8:72:63:e5:c3:56:23:84:45:a2:20:05:1c:4d:d5:
         de:e1:f3:3a:c5:d0:c5:be:41:3a:8e:c1:ad:36:1e:c7:e2:da:
         e2:91:de:43:e7:12:b7:ae:d2:61:04:90:87:30:c6:84:b6:71:
         ee:6d:97:de:ef:b6:39:42:4a:14:9e:26:a2:92:ce:e4:82:bc:
         53:a7:55:dd:fa:1d:43:cd:96:6a:12:2b:42:ce:26:00:53:f4:
         05:4a:c3:ad:fc:34:35:e7:9b:58:f9:7c:9a:8f:4b:20:cf:99:
         7a:62:04:c5:20:3c:1b:8d:10:0e:4d:ce:84:b0:69:d5:0c:0f:
         51:3e:4f:58:dd:2c:12:88:0c:47:41:93:5b:10:09:ef:5f:fa:
         a9:1a:a8:23:75:0a:74:7b:32:a0:0d:dd:91:40:3f:08:fc:2d:
         15:88:39:0b:d0:a4:7a:69:28:bb:40:72:68:22:6c:0d:b0:79:
         d7:16:5d:47:b0:48:3d:f2:c1:e4:be:3b:df:77:32:09:f5:b8:
         1d:c5:52:97:e4:c2:86:de:16:e1:9e:e2:d2:d3:49:79:6a:ba:
         31:71:2b:a7:e6:ad:ff:79:8b:00:61:b0:e0:69:23:81:7b:1f:
         fa:87:15:96:97:77:6d:53:4c:e4:eb:d7:00:82:96:c6:e9:fe:
         79:db:74:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:08 2025 by rpki-client