Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4745e31c-32e1-30eb-891a-95c6ba54d368.roa
File:                     4745e31c-32e1-30eb-891a-95c6ba54d368.roa (raw, json)
Hash identifier:          PWhIO4pOaRzqPDGNB1Lv5XZb9suqo3jvPqC9juofO1g=
Subject key identifier:   0E:4F:C7:69:83:3E:9C:EE:AA:0F:7E:AB:32:FB:77:77:14:D1:FF:23
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858494B642418F2152756878B1980
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4745e31c-32e1-30eb-891a-95c6ba54d368.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     54858
IP address blocks:        162.244.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:24:18:f2:15:27:56:87:8b:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=f3ba4d9d-a5a8-4bff-b96b-54e070e508b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:45:d3:7d:5a:07:27:10:98:c3:8b:ca:6e:7b:
                    fc:57:d2:df:c7:94:c3:2e:1d:50:41:79:e7:df:90:
                    10:51:f4:b9:0c:ac:cc:15:17:23:bb:a5:83:0f:cf:
                    f3:4f:35:3b:08:66:77:fa:d9:76:75:70:39:de:66:
                    d5:85:81:71:08:f6:fd:64:e8:86:55:cb:b9:e7:9d:
                    eb:fa:66:2e:a1:3d:f6:7d:cd:f7:2f:32:d7:d4:a4:
                    b5:40:92:18:14:b4:61:33:03:3f:46:2d:70:65:0d:
                    ee:9f:7e:a8:93:a3:bb:9d:87:86:34:de:2d:5d:80:
                    11:59:ec:80:57:42:f9:dc:35:7d:61:1e:c1:7c:ec:
                    18:ab:0d:ac:bd:d4:06:a2:df:53:bd:a0:a0:37:d6:
                    5d:bc:5a:6b:8b:9b:fb:4f:aa:4b:78:c3:cd:44:3c:
                    cd:17:d3:71:7a:8e:af:4f:40:e5:6e:71:c4:ba:bb:
                    0f:91:c0:6a:da:94:7d:89:55:ea:b8:89:3d:7b:48:
                    59:fd:79:82:c1:22:5c:cf:42:55:a3:2f:d3:c2:27:
                    3f:f0:b1:36:08:d0:94:74:4d:96:94:c1:d5:53:51:
                    9e:a7:86:a4:e9:37:9e:04:7c:3d:8c:f7:20:38:96:
                    4c:dc:d7:5e:d1:77:9c:60:34:54:25:d9:b3:10:c4:
                    76:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4F:C7:69:83:3E:9C:EE:AA:0F:7E:AB:32:FB:77:77:14:D1:FF:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4745e31c-32e1-30eb-891a-95c6ba54d368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d9:b2:05:c3:84:7c:52:ad:af:02:69:b6:72:a3:5d:36:d6:
         b1:35:66:41:8b:d8:b2:96:60:91:06:ea:57:77:32:e4:d6:46:
         97:69:54:29:53:6a:5e:e9:b9:78:42:47:14:46:5f:c4:d5:93:
         1b:b4:a2:26:3b:76:df:86:79:6f:a5:f4:d7:52:69:e5:b8:dd:
         8f:f5:1c:19:25:3d:e3:65:65:58:02:15:ae:08:fa:21:2a:33:
         75:a6:da:ba:52:11:56:5d:fd:cd:6d:d7:27:06:ad:3d:1b:4c:
         54:b4:7d:75:b1:14:00:9a:a4:b7:97:04:b8:1c:9f:e9:fc:0c:
         ce:ed:f0:a8:28:16:d6:4a:1e:11:aa:c1:f8:c6:08:c9:aa:a8:
         9b:ec:fd:a6:0f:ba:4d:1b:b2:17:ef:53:ed:01:08:1f:34:b4:
         56:95:c9:eb:cf:a0:46:ff:8a:98:17:dc:1f:63:4a:8b:c4:e5:
         95:2e:c0:49:54:e6:68:14:7f:d1:8f:1f:ee:e3:42:55:97:5f:
         f4:8c:2c:13:1f:f9:2b:f5:aa:40:29:66:52:d8:a4:51:4a:c3:
         44:f0:21:d6:84:9d:eb:ca:0e:9d:6d:06:8e:66:e8:bc:4f:b1:
         d6:eb:b5:66:93:d8:8b:c6:62:17:41:53:95:05:e1:e7:4f:d9:
         50:01:3e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:52:58 2025 by rpki-client