Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/fa95f29a-142c-36cf-a9b4-614c7af1346c.roa
File:                     fa95f29a-142c-36cf-a9b4-614c7af1346c.roa (raw, json)
Hash identifier:          OXe2w6Mpjrl0W5bLmyMHs5oEtKeq1+RYiTAsb2ayV5A=
Subject key identifier:   9E:48:69:1B:F4:81:59:36:6B:D9:2F:2E:F5:6A:8F:12:AA:1A:5C:EF
Certificate issuer:       /CN=66367942-14b9-49ce-b2d4-9472107e8402
Certificate serial:       010D0C9F432858492CAE76E771254A112D18BFD8
Authority key identifier: 75:E1:54:E8:68:D3:05:BE:1A:2B:F4:40:7C:B5:06:22:1F:94:09:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/fa95f29a-142c-36cf-a9b4-614c7af1346c.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     53831
IP address blocks:        142.202.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:76:e7:71:25:4a:11:2d:18:bf:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66367942-14b9-49ce-b2d4-9472107e8402
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=35223b7f-5038-4f6b-a13d-1c13afc6714f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e0:9f:5d:51:43:91:ad:5e:d9:1e:36:8c:1e:
                    87:ef:7f:84:74:ad:1d:73:02:5f:75:b9:ac:c6:0c:
                    d7:b9:37:28:80:14:45:7c:48:63:7b:46:62:82:bc:
                    3c:79:e8:62:54:ec:90:98:a7:cd:66:b1:45:8d:23:
                    62:7a:b6:97:d7:63:c6:dc:55:12:ad:f5:5c:72:1f:
                    32:38:8b:3c:ec:de:cc:34:ce:81:b7:14:f5:ac:e8:
                    be:9c:9b:5b:0a:cb:ca:f0:86:7a:e0:58:ed:09:fc:
                    1f:12:c3:91:15:03:62:77:b3:b0:e9:5c:f7:28:60:
                    c6:a2:b9:e5:f9:29:be:bb:15:cb:47:31:71:a6:9e:
                    fe:97:08:6f:6e:d8:fb:be:82:72:9c:81:20:16:57:
                    1b:f3:e1:2e:61:80:af:9d:cc:10:ce:15:62:6a:0e:
                    11:71:be:04:ab:d7:c1:b6:99:21:74:37:1c:27:9f:
                    ce:59:eb:11:81:3e:b4:ef:4d:e2:ef:44:fb:5d:d1:
                    a5:94:17:fd:90:66:58:96:25:dd:cb:cf:4d:4e:0b:
                    c2:6e:63:9a:2c:7e:04:99:31:7c:d3:db:40:3b:42:
                    3c:88:db:3f:8a:1e:e1:43:f9:eb:19:a2:f4:a2:51:
                    a0:de:1a:f1:73:2a:f2:02:b7:7a:92:25:bc:39:6c:
                    2b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:48:69:1B:F4:81:59:36:6B:D9:2F:2E:F5:6A:8F:12:AA:1A:5C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/fa95f29a-142c-36cf-a9b4-614c7af1346c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.crl

            X509v3 Authority Key Identifier:
                keyid:75:E1:54:E8:68:D3:05:BE:1A:2B:F4:40:7C:B5:06:22:1F:94:09:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:5f:1d:d1:52:07:f2:b6:ea:00:b7:9f:30:6b:0e:63:3b:55:
         1d:7b:40:8d:1a:d7:38:fa:c9:e9:f1:8d:47:0c:38:ec:cf:15:
         da:e3:65:69:b4:12:7e:cc:b5:28:0f:72:35:44:df:0b:60:43:
         81:e0:56:1f:a6:c3:ba:c1:2f:f6:de:35:46:cc:cf:99:7a:cb:
         a5:af:2f:9b:76:fd:1a:b2:be:f5:77:e4:3e:ae:3d:0d:6a:e8:
         a6:75:27:37:bc:cc:2e:d7:ca:34:cf:59:38:0c:a0:1d:01:94:
         ec:63:d4:59:90:f6:29:26:a4:bc:59:77:a1:c8:2b:9d:b2:8b:
         ac:b8:d1:5e:b4:d4:cb:39:a1:83:a7:b9:7d:e1:e8:68:74:24:
         c7:b3:ad:aa:d9:d0:1e:aa:e2:1e:ed:fd:92:e1:a4:e4:5e:60:
         ef:18:e4:dd:ba:62:7e:29:27:eb:fc:20:c3:80:f6:55:1d:ad:
         e8:1f:05:9f:0a:3d:3c:70:e2:85:12:77:e1:e2:84:f3:9a:d8:
         bb:af:4e:c2:1a:42:d0:54:59:32:ba:68:a8:18:17:32:ab:9a:
         38:73:38:b6:3c:56:01:ea:ed:ba:80:11:ab:41:0d:6d:5b:9c:
         1c:65:e5:7e:7d:7e:2a:35:1f:72:1d:85:6b:74:3f:02:88:70:
         de:76:25:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:00:00 2025 by rpki-client