Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/992c9122-07ff-3812-8aad-8c25b1f4c4bf.roa
File:                     992c9122-07ff-3812-8aad-8c25b1f4c4bf.roa (raw, json)
Hash identifier:          D0E4QUFJYyjglo9Fj5g5OHp4G+6/UAcFFvyaCQdmFfc=
Subject key identifier:   44:51:E1:09:FF:CB:26:96:5E:2C:0D:06:40:3C:A3:5A:2A:30:32:95
Certificate issuer:       /CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
Certificate serial:       010D0C9F432858498B99CD801D3397C7C4739080
Authority key identifier: 58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/992c9122-07ff-3812-8aad-8c25b1f4c4bf.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     55097
IP address blocks:        162.208.108.0/22 maxlen: 24
                          2604:ab80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:cd:80:1d:33:97:c7:c4:73:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=bcd93bcc-dcc6-473b-a199-2a22bdd22e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:b9:20:0c:4c:0d:19:73:0a:66:2e:07:65:
                    7a:66:64:7b:cb:2f:8f:34:a4:cb:34:3c:1d:17:b6:
                    f2:48:b4:19:e5:d7:18:7c:f8:ad:75:cc:37:7e:09:
                    dd:bc:d7:0a:2c:de:62:06:32:9b:4b:6e:0b:e9:8f:
                    4c:c7:a1:5c:ac:5c:fe:65:72:fc:42:74:08:a2:95:
                    b6:0c:38:fe:e5:3f:d3:41:38:a3:24:36:4e:32:6a:
                    79:14:4a:ab:0f:5f:82:c0:21:b7:43:8d:7f:45:18:
                    f3:4c:d9:ae:6f:d7:57:5b:1e:35:ef:6d:34:cd:60:
                    ab:44:19:01:3b:01:d1:94:5e:1f:f2:85:70:02:17:
                    32:1a:79:7e:79:7a:5f:00:5e:0c:c5:54:03:57:a4:
                    b9:0a:33:c9:25:a9:4c:00:a1:7d:2c:29:4f:af:f5:
                    b5:15:68:80:19:bb:90:5a:2e:94:40:ba:83:19:09:
                    ee:16:e7:4b:48:1f:04:cd:e0:ba:50:31:ac:e5:db:
                    ed:6d:53:d0:f5:b0:16:0f:a4:ce:13:ea:ec:5a:02:
                    f7:d5:1d:3b:74:71:91:ee:d5:5b:64:9e:b2:49:99:
                    9a:aa:f1:96:9a:37:93:48:9d:3d:96:ec:ec:ee:6a:
                    c2:6d:02:5a:bf:10:91:52:1b:d5:a5:4e:a9:56:61:
                    45:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:51:E1:09:FF:CB:26:96:5E:2C:0D:06:40:3C:A3:5A:2A:30:32:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/992c9122-07ff-3812-8aad-8c25b1f4c4bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl

            X509v3 Authority Key Identifier:
                keyid:58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.108.0/22
                IPv6:
                  2604:ab80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f9:c6:cc:df:9c:45:be:6c:d5:02:ac:9a:de:26:cc:75:ff:
         1f:7f:43:4a:6f:85:1e:a7:48:f2:e2:90:97:f9:ca:9e:f7:12:
         6c:f2:57:04:aa:d4:71:6c:14:ea:de:c2:2f:76:d9:51:5f:a3:
         32:bb:25:c8:5a:fe:c8:e6:3e:f5:47:b9:19:a8:c9:8b:16:fc:
         03:66:6b:6c:63:de:17:24:7b:66:ee:06:08:0c:1e:b7:57:97:
         a1:13:0b:58:f0:03:d4:af:42:bf:09:f8:27:cf:09:0c:cb:bf:
         59:fd:c4:c9:a3:d4:79:02:e2:a4:e1:ae:9b:e1:56:04:81:53:
         d3:76:b8:47:6c:20:89:81:cc:47:84:91:97:2e:a6:e9:2a:53:
         65:88:cb:59:02:26:95:61:59:c6:04:48:d9:c3:17:49:5b:e4:
         e0:26:7e:0c:05:aa:f7:48:21:96:cd:52:04:bf:12:84:d4:b6:
         d4:41:91:e4:ac:bf:e9:bb:35:a6:df:cf:96:0c:2f:b2:12:b3:
         6a:64:19:b3:df:f6:78:9a:26:5c:04:1a:24:e3:87:3a:cf:85:
         76:72:bc:7e:7b:ae:9d:54:d4:a5:74:64:89:80:22:9c:05:c0:
         a2:84:aa:dc:bb:63:ea:a7:e3:19:74:e8:c7:76:ca:35:39:ce:
         71:90:04:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:36:10 2025 by rpki-client