Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/07af84c8-ee29-3120-8019-a82a12b3b51b.roa
File:                     07af84c8-ee29-3120-8019-a82a12b3b51b.roa (raw, json)
Hash identifier:          Pd1d6n5sr3ydbl0Z7zosDqIMuQ+nSfnRHWqq0ip0+sU=
Subject key identifier:   FE:94:E6:2C:DD:C2:B9:15:D0:3F:2C:83:05:05:8F:27:D3:FB:C1:F3
Certificate issuer:       /CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
Certificate serial:       010D0C9F43285849DCD770CA902FCCF13F5C8B40
Authority key identifier: F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/07af84c8-ee29-3120-8019-a82a12b3b51b.roa
Signing time:             Thu 15 May 2025 15:25:45 +0000
ROA not before:           Thu 15 May 2025 15:25:45 +0000
ROA not after:            Wed 13 Aug 2025 15:25:45 +0000
asID:                     16527
IP address blocks:        162.245.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:d7:70:ca:90:2f:cc:f1:3f:5c:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
        Validity
            Not Before: May 15 15:25:45 2025 GMT
            Not After : Aug 13 15:25:45 2025 GMT
        Subject: CN=dacb6885-3278-4668-9a04-a6f620f48187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:08:58:d2:d8:5a:c6:ac:be:43:6c:bc:bc:d1:
                    b0:46:47:e7:c3:ba:b0:65:e7:b6:34:dc:3a:7f:7c:
                    c7:e5:24:73:4d:11:af:2a:31:48:2b:8d:64:56:4d:
                    66:08:bf:48:ba:da:30:e2:01:3b:70:6f:1b:a3:ea:
                    51:0d:49:0c:be:c4:b6:0e:b0:5e:8c:9d:e5:c9:c3:
                    ef:49:dd:5b:06:b6:be:85:d4:12:ef:ae:16:46:bf:
                    34:93:27:00:0b:cf:16:1e:99:17:c3:fb:3b:2b:81:
                    ce:4b:f2:25:2c:2a:80:e7:c4:4b:cc:8b:6b:8a:73:
                    f1:df:b4:63:51:90:42:ac:c9:7c:d5:b4:76:43:ba:
                    bd:ae:86:c0:28:4a:ae:6b:15:12:c1:83:49:da:95:
                    86:94:47:3c:58:47:a6:54:b5:9d:2b:46:e1:5c:54:
                    7e:ac:3e:b0:5e:8b:1a:26:69:44:b0:6d:d4:4d:02:
                    43:55:44:7e:26:02:33:99:bd:59:f5:15:2a:42:1c:
                    6e:4b:72:ad:0c:b3:1d:cb:11:92:24:db:f8:54:b6:
                    b4:05:be:09:17:f9:9b:0d:4b:b5:26:66:df:d4:a9:
                    cc:52:8a:ce:84:4c:fc:0a:94:75:20:10:81:e3:72:
                    3e:43:2a:a5:e5:c1:10:a3:85:45:01:cb:01:ed:35:
                    30:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:94:E6:2C:DD:C2:B9:15:D0:3F:2C:83:05:05:8F:27:D3:FB:C1:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/07af84c8-ee29-3120-8019-a82a12b3b51b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl

            X509v3 Authority Key Identifier:
                keyid:F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.245.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d4:4c:9c:87:a5:ea:bc:fe:5f:67:1e:7e:56:d2:ac:b5:a0:
         08:c4:22:b2:e0:bc:39:8c:46:0c:43:5d:e5:a9:49:2d:8d:cd:
         1f:6a:ab:4a:de:a2:90:ed:2f:dc:db:8d:13:21:04:24:c3:b2:
         57:2d:4c:ba:17:24:46:fb:8f:bd:e7:1f:ce:b5:8e:e7:18:30:
         5f:53:d6:ec:09:6e:e5:28:6b:ee:f3:d5:0f:85:8e:da:36:cd:
         22:5b:a0:b7:35:d5:46:20:77:17:fb:bb:2f:32:de:3e:15:fc:
         d5:1f:4b:61:02:51:30:d0:77:0e:7e:9b:fa:fc:f2:85:5d:4b:
         71:f5:86:c3:0d:41:d4:1d:ab:3c:83:f9:fc:00:6d:8e:54:6b:
         d3:f3:c2:a9:18:60:5c:1b:05:3f:fb:e1:eb:25:d1:6c:e8:6a:
         3c:50:79:26:5f:e1:7b:4a:4e:e9:bf:2b:99:82:e1:63:8c:45:
         c6:50:e1:09:0b:dd:f1:48:95:2d:fb:9e:37:2f:9c:fe:ab:87:
         72:e1:f6:20:c4:18:ce:8a:15:bc:9e:2e:f1:d3:25:12:d9:ae:
         b2:a0:66:bd:a2:c4:1b:fa:f5:3c:f0:be:62:82:6b:4d:25:a3:
         54:1c:50:c5:4f:dc:e6:6d:67:52:6d:ed:86:2e:ff:06:57:c8:
         4d:fd:2a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 00:44:35 2025 by rpki-client