Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/38446997-5291-39e4-9e78-1e5c939d64cc.roa
File:                     38446997-5291-39e4-9e78-1e5c939d64cc.roa (raw, json)
Hash identifier:          +6T9RwpC/VFkke4XKWhx29rjy9jQ9EKUl7JplWVyAs4=
Subject key identifier:   2E:9C:0D:C3:60:40:38:13:D6:C3:63:73:EE:3B:BF:7F:CD:A1:54:53
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F43285848FD56C389373EABEABA5BE380
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/38446997-5291-39e4-9e78-1e5c939d64cc.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     19257
IP address blocks:        162.222.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:c3:89:37:3e:ab:ea:ba:5b:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=db83f980-fcd2-4395-9a03-4eb6810d1dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:c4:c6:9b:a3:5d:4c:f8:78:73:00:9c:37:
                    2a:73:4f:03:79:1f:ed:e3:d9:89:03:69:5c:a4:5a:
                    fb:b7:d3:23:60:d4:9f:d0:e1:5b:75:b7:77:ca:d8:
                    59:bf:11:89:54:32:49:3d:3e:63:51:45:13:60:d8:
                    f3:79:4c:02:45:27:09:2c:4e:65:63:5e:29:61:4e:
                    bf:35:11:4f:19:be:a1:e1:db:56:68:56:c2:75:7e:
                    a7:41:8b:0b:f4:79:74:cd:d3:9e:74:7b:e5:71:cb:
                    a4:66:9b:55:13:aa:da:9b:9e:ca:15:f5:54:f1:73:
                    67:97:53:c4:f0:56:ed:02:db:8b:f4:ed:dd:85:ab:
                    da:98:76:6a:41:59:fc:ae:6e:ba:1b:d6:33:5c:6b:
                    a5:2e:a0:19:e4:81:22:f2:2a:c8:e8:f9:a6:58:ce:
                    14:fb:a2:b8:e2:d9:5c:9a:52:79:26:ca:69:4f:9d:
                    63:25:4d:28:e9:40:44:13:5f:77:38:d7:fe:70:05:
                    41:c2:97:c1:ca:86:7f:3d:8b:19:1c:9f:d5:74:08:
                    bf:10:fc:07:8d:f4:9f:0f:ec:7e:84:df:ee:75:26:
                    ff:a6:50:3a:fe:8c:f9:7e:11:e6:a1:21:c8:72:12:
                    39:b1:52:b3:74:98:1a:05:91:56:74:78:57:34:91:
                    1a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9C:0D:C3:60:40:38:13:D6:C3:63:73:EE:3B:BF:7F:CD:A1:54:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/38446997-5291-39e4-9e78-1e5c939d64cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:5f:0f:81:ef:e4:78:ae:45:72:a3:b6:6f:50:ed:8f:08:89:
         3d:e5:1c:39:ea:26:45:cb:bd:80:63:7a:22:1f:cf:3b:85:bb:
         ed:ca:a0:66:85:49:9b:7d:35:4b:68:b0:b5:d5:69:64:81:22:
         0b:76:b0:fe:64:e3:54:c3:b3:24:b4:5b:0d:bf:55:a8:3e:9b:
         76:9e:db:b4:61:72:71:de:d5:b4:ad:b3:95:b7:a5:4e:53:4b:
         ab:c0:c1:4b:f0:ee:ea:bb:bc:0c:8a:cf:14:fd:c6:98:23:5b:
         46:cf:b2:49:3a:92:9a:d9:d1:b4:2c:a6:0e:97:54:49:a9:74:
         eb:e4:4c:80:9a:6d:63:c7:ee:0e:d5:1b:72:6d:72:58:83:9c:
         83:4a:77:2b:9d:55:dc:7d:ac:14:29:bf:ce:63:0f:a5:4c:50:
         78:b2:13:75:18:99:78:f5:30:70:9f:f6:dc:14:07:ce:19:f2:
         6c:68:1d:1c:60:a6:fa:74:82:0c:48:3d:83:5d:75:24:66:41:
         f8:87:8f:36:b7:04:96:9a:77:aa:ab:d0:08:03:a2:c8:11:ef:
         37:d1:b7:d0:85:80:be:89:d7:7a:79:f9:a2:44:3d:e7:b5:b1:
         30:e9:c7:0e:6c:f8:d4:d4:dc:4c:bf:4e:0f:0e:ea:cd:c2:de:
         fd:9b:fb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:26:21 2025 by rpki-client