Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c1dcd54c-383d-3372-b220-849655424f31.roa
File:                     c1dcd54c-383d-3372-b220-849655424f31.roa (raw, json)
Hash identifier:          cdVAxmX8w6Rqdjv4im4XLDdkwTc3cZtxr285SJ1HbkU=
Subject key identifier:   11:FF:2A:BE:C2:06:D3:38:0C:35:F7:AC:DD:CD:29:55:B2:5F:A5:BC
Certificate issuer:       /CN=fd83f526-dd8b-4cf3-b500-0525ad5fac1a
Certificate serial:       010D0C9F43285848EC96890B00DCF37FE18E6980
Authority key identifier: EA:D5:99:AA:D7:81:62:8C:7F:6D:44:F6:D9:D7:B6:CD:15:5A:AE:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c1dcd54c-383d-3372-b220-849655424f31.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     33291
IP address blocks:        162.210.243.0/24 maxlen: 24
                          162.244.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:89:0b:00:dc:f3:7f:e1:8e:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd83f526-dd8b-4cf3-b500-0525ad5fac1a
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=1274a73e-3b35-4136-90ce-a4cd94ce20f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8e:e7:03:b3:6b:8e:48:82:8c:47:26:7c:6d:
                    e1:fb:27:ac:d2:03:05:9f:f7:f7:05:dc:d2:58:07:
                    3e:30:72:a0:77:26:2d:e0:05:19:e8:a0:8a:84:d0:
                    7f:fe:77:85:e6:c6:40:e0:cb:89:8d:4a:fd:db:df:
                    8d:74:11:58:6f:d3:c7:d7:6e:51:78:a5:89:be:a7:
                    96:72:f2:af:a6:fd:df:1f:9f:ef:fb:4e:bd:9e:31:
                    14:50:c2:b6:02:df:1e:78:12:7f:70:fa:d2:ee:62:
                    b1:93:65:50:d1:d4:c9:53:3e:3d:8a:f0:b1:c3:be:
                    ec:1c:02:6f:e1:f8:cd:e2:72:13:f1:bb:d9:c0:32:
                    dc:b7:e5:ab:40:e0:a1:df:1e:00:1d:dd:c9:d6:85:
                    ac:f0:11:50:20:ff:b7:7d:20:b5:ab:b9:51:86:3e:
                    de:59:87:c7:7c:d1:cd:d5:6f:8e:61:18:97:40:75:
                    34:32:d0:bc:e4:56:91:8c:35:33:92:72:d9:13:d9:
                    6d:49:03:c7:31:c4:00:7c:54:ab:0e:9d:e0:fb:2e:
                    6b:71:08:f6:4b:3c:25:a8:ba:72:51:84:85:2f:67:
                    c0:85:94:b2:37:54:88:02:b7:85:0d:a0:03:8b:8b:
                    83:53:09:94:04:d1:39:fa:83:59:8d:0a:51:95:c7:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FF:2A:BE:C2:06:D3:38:0C:35:F7:AC:DD:CD:29:55:B2:5F:A5:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c1dcd54c-383d-3372-b220-849655424f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.crl

            X509v3 Authority Key Identifier:
                keyid:EA:D5:99:AA:D7:81:62:8C:7F:6D:44:F6:D9:D7:B6:CD:15:5A:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.243.0/24
                  162.244.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:1d:12:38:00:12:55:62:7a:de:42:20:69:d7:e2:39:d8:7c:
         f3:26:68:88:b8:1b:0a:ad:4c:65:c7:94:38:f3:5f:d6:ea:3f:
         ef:3b:1b:04:e5:e5:31:c6:b2:34:35:fb:9b:f6:05:d7:e9:2b:
         21:bd:ac:66:71:8c:b1:b5:78:f1:1c:c7:b2:f6:58:07:cb:65:
         c0:dd:07:ad:00:57:94:43:aa:f2:03:7f:0e:a4:f4:fa:d9:90:
         c4:f4:d9:15:d4:60:30:83:3f:96:d7:c5:50:41:bf:96:47:b6:
         c3:ca:27:81:52:b7:a8:6e:12:53:b0:bc:3c:96:ec:e1:99:36:
         2f:d0:b0:a4:29:17:14:94:31:24:57:49:b8:b7:50:3f:fa:e5:
         06:07:61:28:2e:33:50:b4:8b:50:5d:bc:71:2e:f4:fd:5b:51:
         1e:99:b5:6b:5f:39:3e:a2:ae:0e:b5:39:df:27:5b:c4:c8:90:
         34:af:93:ac:06:bf:e9:c8:53:c8:50:09:56:da:f5:a3:22:7e:
         08:3b:f4:65:08:57:8b:ba:7b:be:e8:5f:77:4a:0d:08:d6:3e:
         38:43:81:a3:70:b2:3d:91:0b:d8:85:21:6d:42:d1:f7:67:02:
         1d:5f:b4:59:10:a6:e4:69:e6:c5:a2:81:5e:72:0e:f1:cf:1b:
         5c:97:78:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:27:02 2025 by rpki-client