Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa
File:                     e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa (raw, json)
Hash identifier:          j2X4wR1VRuPdMu+nczw9dXeYGI5il0zuBG8RhM1SNr8=
Subject key identifier:   EC:FD:61:33:35:93:60:27:0D:0B:E2:2A:7D:56:78:5F:C3:E8:F6:16
Certificate issuer:       /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial:       010D0C9F43285849C904E7D2585504E9C1798600
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     22742
IP address blocks:        162.221.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e7:d2:58:55:04:e9:c1:79:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=16046abe-b386-43f8-a7d4-bf1f1c2e116b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:11:ae:24:f0:f2:87:96:fc:5b:6d:38:3e:b5:
                    57:cb:d9:1f:c7:e2:fb:a1:3c:1a:e3:8b:f9:07:2f:
                    fd:7f:13:8d:7e:a7:f5:8f:06:0b:7b:f1:cd:4a:ca:
                    21:66:55:75:e4:eb:ef:4b:04:84:36:b6:78:e9:49:
                    e4:d2:9a:71:49:65:db:3a:45:01:1a:9b:c1:ae:d1:
                    46:99:78:1c:ce:1a:3a:31:27:57:b4:3a:4c:25:18:
                    7a:92:ae:f1:c0:1b:af:a6:96:55:c0:d1:78:fe:98:
                    8f:58:4b:86:4e:eb:91:9b:23:af:34:37:3c:f8:6f:
                    d6:79:be:a1:33:8c:65:27:b0:b2:ca:3a:87:6f:13:
                    86:3a:00:fe:cc:fc:4a:08:5d:c1:b0:49:65:90:a0:
                    22:6a:9d:3d:c0:5d:91:e0:3b:63:a4:5f:c7:ba:1e:
                    f7:e3:5e:c9:1d:9e:90:72:90:b9:ab:cc:64:9c:8c:
                    3e:ee:fc:97:12:1d:d7:b1:b4:6c:16:06:a2:09:e7:
                    44:e8:17:06:33:f5:1d:4d:2a:3d:fa:3e:f9:bf:a9:
                    da:92:b4:2e:95:f2:d4:8e:15:84:0b:5f:ee:8b:36:
                    34:2e:2c:d6:69:23:a8:12:16:b4:9c:87:b5:2a:d4:
                    01:24:e5:1b:b4:df:32:3a:64:8c:ee:26:d3:c4:59:
                    bd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FD:61:33:35:93:60:27:0D:0B:E2:2A:7D:56:78:5F:C3:E8:F6:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f9:71:28:e4:8c:2c:4a:24:56:c9:0e:44:92:fd:4b:f2:d0:
         c8:3f:43:82:0e:0b:9f:41:66:02:35:28:fa:f5:c0:22:14:d4:
         c7:b2:aa:3d:61:76:bb:b8:c3:fa:a7:ff:b8:e7:a1:4c:c9:7b:
         cb:7c:c2:6b:cc:7f:1d:69:3f:a2:85:bc:59:b7:d3:51:80:e6:
         c5:74:d3:64:a9:c3:a8:28:6b:0e:ee:b8:7f:05:a6:b5:73:b9:
         e7:b2:39:a9:2c:e5:0b:50:2c:e0:7d:ce:91:fb:ef:b4:fa:e3:
         64:ea:5f:2f:42:df:64:ca:d7:cb:63:f4:5b:54:82:06:f5:1c:
         2f:cb:8e:36:2d:aa:d3:d3:60:ab:a6:38:6a:61:c9:0d:c1:f8:
         65:7f:dd:f2:ab:44:bd:4b:45:96:db:d5:ff:f2:15:44:18:06:
         f1:75:a9:f3:b6:c4:46:0d:38:01:8b:7b:59:4c:71:b3:ba:2e:
         27:f1:e0:f2:0e:eb:37:23:6e:54:72:ab:ba:9f:bc:92:4f:6e:
         57:72:84:74:1d:dd:9b:37:8d:b3:8e:19:0e:87:38:42:0c:1a:
         11:81:3b:4d:f0:9d:7b:67:a7:15:2e:47:05:2c:d3:15:32:5f:
         69:42:5e:bb:7c:fe:a6:77:f4:ae:98:00:e0:3d:20:39:13:7e:
         d9:59:41:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:56:30 2025 by rpki-client