Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c75497a6-f232-31af-97ac-deb8d36ed9bd.roa
File:                     c75497a6-f232-31af-97ac-deb8d36ed9bd.roa (raw, json)
Hash identifier:          xOCDtJiTKBIfDvrEq9/1H2RFPOF7bd8BwnT4kTEfcAM=
Subject key identifier:   5D:DF:8E:F8:C5:0C:F5:6E:5B:FF:62:C0:E5:5A:C1:BB:8B:70:92:4C
Certificate issuer:       /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial:       010D0C9F43285848BFEBA7BD2C2DD3D9ADFA3300
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c75497a6-f232-31af-97ac-deb8d36ed9bd.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     198949
IP address blocks:        162.246.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:a7:bd:2c:2d:d3:d9:ad:fa:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=e3c20b03-c28b-44aa-99bc-ead41eb86747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:22:5b:2e:01:3b:5e:88:cc:6f:50:94:23:e4:
                    c1:c9:1c:68:01:7f:f9:bc:56:89:3a:d2:2f:54:33:
                    1a:3e:22:66:b0:a5:7c:d9:ff:44:11:1e:99:88:6b:
                    ce:b9:1a:60:fc:14:97:80:fc:97:b4:ff:cb:59:d8:
                    e5:5d:64:83:a3:e7:ad:fa:00:f1:f0:41:39:c8:c5:
                    bb:6d:e0:69:22:f1:ef:7d:7a:c2:59:c5:58:61:23:
                    55:96:ea:6f:65:98:17:87:58:01:d7:f6:ad:8d:ef:
                    ab:8c:50:1b:d4:01:5d:f5:fc:6f:6e:a3:48:eb:16:
                    74:6e:31:1d:95:40:a2:7f:ba:06:92:de:80:e6:ac:
                    a2:57:ae:f7:ed:d8:2c:64:30:12:f6:63:1b:eb:99:
                    9c:af:4a:82:66:a9:dd:64:5d:e0:92:04:d6:87:2e:
                    b5:7e:14:19:20:d7:ee:1c:4d:0c:f7:66:05:ad:7f:
                    ed:3b:16:9e:78:c3:e9:9f:82:61:b1:88:09:6c:49:
                    b4:22:26:2a:17:03:cb:87:3a:90:ae:05:e0:da:42:
                    f6:4b:f8:5d:c2:52:ef:ee:10:26:b4:da:43:4f:31:
                    0c:40:d8:d3:f9:86:03:5a:3a:a0:8b:43:bb:6f:8f:
                    43:7c:aa:2e:c5:97:00:d3:c0:b3:46:8e:be:7a:ae:
                    be:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DF:8E:F8:C5:0C:F5:6E:5B:FF:62:C0:E5:5A:C1:BB:8B:70:92:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c75497a6-f232-31af-97ac-deb8d36ed9bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:4e:3b:6d:d9:25:ac:e4:3d:3d:e1:a2:a6:6b:f5:0b:61:50:
         8b:1b:64:a4:07:b4:f3:81:82:af:5e:de:10:14:b1:3e:60:2b:
         cb:44:40:36:a4:3b:4f:80:1a:86:21:90:77:ab:fd:6c:f5:7a:
         6f:4e:a2:09:ed:6a:e4:29:2c:72:e7:f7:a6:ba:9c:2f:ed:fb:
         da:69:eb:af:96:44:8e:5c:21:49:06:ca:44:a3:21:38:6e:ca:
         24:14:5e:63:ba:02:f0:64:8d:d8:d1:dc:e2:c3:c5:fd:c4:6a:
         80:f5:78:b0:08:f8:4a:dd:48:48:f6:af:28:f3:61:54:c5:6c:
         4e:22:2d:67:79:68:ae:c0:2a:d8:48:7e:06:89:a8:6f:c7:84:
         2c:e6:8e:94:e4:0d:48:57:d3:37:31:ce:a3:f9:a8:25:5f:fa:
         f2:e0:f3:a2:5c:a0:c8:d3:d2:ed:ff:01:23:9c:f5:3b:0d:7e:
         aa:af:89:0c:fc:66:39:2f:3c:62:ef:38:6a:cd:36:cf:c6:04:
         55:79:3d:e7:33:75:74:7d:a6:e4:ff:c3:41:3a:cd:5d:2d:b2:
         75:62:f1:7d:1e:08:50:b2:73:66:4d:b2:83:10:98:b9:bd:c8:
         f3:4a:6c:f0:9b:99:72:eb:0e:b0:59:96:94:d2:fe:21:0a:ce:
         85:d3:69:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:40:52 2025 by rpki-client