Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ac9491f-6036-37fe-816b-d57cc66a212f.roa
File:                     4ac9491f-6036-37fe-816b-d57cc66a212f.roa (raw, json)
Hash identifier:          pmznkUvw51yRuCIq60+jRddgDnuLrB9SejoaXfVhxXg=
Subject key identifier:   7F:D9:09:DD:DD:65:A9:B5:66:F3:04:CA:5D:B4:12:D9:3F:E2:B6:44
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584944694F99D98B281AC70FE580
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ac9491f-6036-37fe-816b-d57cc66a212f.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     8069
IP address blocks:        52.122.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:4f:99:d9:8b:28:1a:c7:0f:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=433a22c1-d1f8-4c80-be84-d7cce3a2d265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:86:71:f4:4f:5d:9b:a2:0a:87:07:dd:a4:d4:
                    db:14:c1:d0:d9:15:e6:f9:61:50:1f:b7:3c:a9:6e:
                    e0:4d:0a:da:cc:d6:78:d0:59:ee:18:5e:57:29:0e:
                    61:8e:ec:f0:dc:5f:eb:31:10:f0:ab:bf:98:1e:3b:
                    f4:ce:60:63:9e:fd:9d:a2:be:73:35:29:56:56:d2:
                    21:3f:3a:07:90:8e:6c:8f:04:88:df:5b:fd:39:73:
                    01:63:9c:e3:d7:18:60:b2:e7:b7:74:6d:13:07:be:
                    d1:b4:d3:f6:e7:2f:d1:74:79:d7:50:4e:ec:c8:b7:
                    43:eb:fe:64:28:9e:77:04:4e:58:c2:49:71:07:69:
                    bc:4f:23:e4:09:b9:b7:96:12:cc:98:ee:a8:84:73:
                    8f:b1:2d:c0:00:11:8d:a4:2b:7a:5c:b8:ad:7b:64:
                    55:44:ba:8c:1d:5c:13:0c:6d:8b:13:60:0e:4a:0f:
                    62:7d:c4:e1:81:bc:89:f3:c2:96:1c:0f:5a:7e:f3:
                    c4:fd:7d:34:ca:3d:3c:63:60:26:77:f7:fc:5a:8b:
                    cd:3a:05:a1:d3:65:c0:a3:6e:92:ab:21:a4:82:b6:
                    6f:6a:5c:a6:56:82:22:d4:a7:35:11:88:89:34:a5:
                    b6:9a:c5:d0:2b:e3:dc:20:82:78:50:5d:3f:57:fa:
                    d9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D9:09:DD:DD:65:A9:B5:66:F3:04:CA:5D:B4:12:D9:3F:E2:B6:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ac9491f-6036-37fe-816b-d57cc66a212f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.122.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:be:71:9d:3c:a3:66:e3:29:4d:c5:12:bf:83:d4:25:56:11:
         69:84:17:1d:d9:57:59:64:1a:8e:c3:f6:48:87:30:da:cd:60:
         cf:a7:20:03:4f:68:72:a0:9e:c0:ff:eb:ba:5d:30:51:21:78:
         82:40:2b:79:c1:7c:b1:fe:6f:6e:26:55:37:c9:f9:29:17:2a:
         7b:f6:ed:73:2e:23:5f:ca:a5:12:ba:11:89:d2:c9:eb:97:dd:
         0d:9e:4f:f9:ee:e4:42:78:1e:a0:fc:6e:53:ea:61:b1:9f:f5:
         e3:e6:75:f0:50:39:3e:09:02:18:19:72:2f:02:30:a2:34:e7:
         1f:f6:7c:03:8d:3e:67:4a:b7:f5:0e:3d:08:37:45:4f:8c:7b:
         77:26:da:36:c8:a7:0a:44:de:80:7c:1c:b4:4d:9f:ae:ad:1f:
         57:b3:bd:70:09:e2:fa:a5:98:2d:ac:4b:6f:86:a7:90:0e:39:
         db:a1:e1:f9:52:ba:ae:4c:d7:91:2f:a5:f0:8a:84:cc:d5:76:
         a0:09:ae:29:fa:3d:2e:ee:3b:a2:43:81:59:e7:32:b3:dd:cb:
         e4:9f:aa:a8:c0:80:56:b5:d0:c4:2a:8a:90:2b:ca:60:89:bc:
         0b:65:3a:ae:c1:e4:58:33:7a:77:f9:98:d5:a1:5f:c7:be:8c:
         70:33:2a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:01:11 2025 by rpki-client