Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/9346aa6b-7eb2-3a3e-b6a4-f08c7b535ce3.roa
File:                     9346aa6b-7eb2-3a3e-b6a4-f08c7b535ce3.roa (raw, json)
Hash identifier:          7l+hb3MhwBfO/hYjORJaP5GzltcfY+X9yljf6p/6jP8=
Subject key identifier:   BA:E4:08:22:3E:ED:23:50:0E:44:DE:48:AE:1D:F2:14:AC:AF:72:AF
Certificate issuer:       /CN=5a77e320-aa58-4bb9-bf65-322bab53aa7c
Certificate serial:       010D0C9F43285849D16507512807EEA1A8E49200
Authority key identifier: D4:32:08:E3:3D:FF:C5:FA:DC:03:1D:6D:51:3A:E6:C6:6A:DA:51:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/9346aa6b-7eb2-3a3e-b6a4-f08c7b535ce3.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        162.221.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/5a77e320-aa58-4bb9-bf65-322bab53aa7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/5a77e320-aa58-4bb9-bf65-322bab53aa7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:07:51:28:07:ee:a1:a8:e4:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a77e320-aa58-4bb9-bf65-322bab53aa7c
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=96673ca2-f1e6-43b1-ac1a-8996ce1c42c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:11:a6:86:77:16:01:fc:05:3e:b6:1e:76:22:
                    06:d8:57:6e:f1:12:da:b3:47:88:3e:9e:ce:ce:ae:
                    1e:17:df:a2:fc:4c:e6:84:65:59:48:12:2d:b9:5f:
                    e6:b1:32:d0:8b:e1:84:b3:e0:87:9f:00:f4:cd:96:
                    84:dc:ff:b3:fa:0c:7f:02:b1:bd:a5:97:f3:01:cb:
                    66:9a:3c:5d:76:f4:be:19:81:d1:36:68:cb:7d:61:
                    6d:c4:14:d0:2d:dc:88:8d:7b:9b:9b:cc:7e:44:9a:
                    13:65:1f:12:9f:7b:07:c5:88:85:11:ff:ff:a3:33:
                    e9:09:cc:8a:c6:fa:1c:a2:79:f4:6c:c4:ca:3e:a0:
                    79:4f:ed:2c:2a:d8:1c:d3:ef:5d:56:94:55:a9:de:
                    17:1b:04:aa:04:99:e9:d1:f6:98:74:d4:6d:e7:43:
                    74:3d:ee:46:1a:a0:24:5c:c3:4c:1d:fa:ff:a4:2a:
                    01:9b:cd:4f:75:1d:66:92:97:48:b4:de:04:b4:69:
                    47:52:63:90:4a:46:9f:04:27:93:5d:3e:8d:1d:b0:
                    76:ce:3d:82:ab:e6:89:37:26:28:a8:88:9a:88:aa:
                    37:32:08:b5:ad:3d:20:3b:39:4f:ba:72:1a:a4:2a:
                    b7:38:f3:ad:29:d3:59:44:01:c3:31:29:60:e6:93:
                    05:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E4:08:22:3E:ED:23:50:0E:44:DE:48:AE:1D:F2:14:AC:AF:72:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/9346aa6b-7eb2-3a3e-b6a4-f08c7b535ce3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/5a77e320-aa58-4bb9-bf65-322bab53aa7c.crl

            X509v3 Authority Key Identifier:
                keyid:D4:32:08:E3:3D:FF:C5:FA:DC:03:1D:6D:51:3A:E6:C6:6A:DA:51:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:24:e1:f2:27:cc:54:06:62:d9:63:a6:6b:d9:5b:e9:22:bd:
         a6:02:5a:22:df:4e:0a:af:1c:31:8b:0c:98:3f:04:ea:6c:f4:
         29:2c:32:ba:2e:48:9f:3e:2f:b8:be:ea:f6:58:31:fe:fb:01:
         d4:6f:df:41:1c:d9:8e:76:b4:8d:a8:ec:9b:df:ea:38:0c:85:
         ca:6b:d9:56:3a:7b:6e:ee:a5:7b:2a:33:65:a2:78:ad:dd:b0:
         1c:62:ac:c1:24:55:36:dd:97:15:61:52:8e:be:40:5e:91:20:
         ac:f8:11:c7:2b:b5:88:6d:a6:ce:e0:99:09:9e:7f:7c:31:d3:
         33:cb:f3:0a:85:f9:fa:92:34:15:e6:d7:1e:c4:fe:f1:61:e5:
         eb:21:b7:94:f0:8f:58:e1:1a:81:51:7a:ef:9a:02:48:77:41:
         3a:c4:42:67:60:26:bb:42:af:bf:f7:13:f3:a0:c5:ae:ae:b5:
         c2:d0:72:eb:f4:1c:d7:f4:d4:06:30:c8:2b:f4:46:bf:04:7e:
         84:c8:c3:1e:f9:ff:93:39:48:d2:0c:01:f5:3d:63:82:f9:17:
         0d:fe:58:6c:37:66:ce:73:81:34:51:77:6f:9c:d5:6c:b0:55:
         78:9f:e4:2f:b1:81:e8:97:bc:52:8d:ff:88:4a:dc:53:01:a9:
         26:23:e6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:22:29 2025 by rpki-client