Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/a818896b-7daf-37f6-b3fb-21abf321d2b7.roa
File:                     a818896b-7daf-37f6-b3fb-21abf321d2b7.roa (raw, json)
Hash identifier:          S3r8Uhnq3htDAMp6LrEvQPkrSBEta1jOnM8D1QRqSyQ=
Subject key identifier:   6B:74:66:8A:C7:CF:A0:BF:25:F9:85:35:7C:1A:30:3B:5C:CF:A6:A5
Certificate issuer:       /CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
Certificate serial:       010D0C9F432858498B99CD67B3814F81BBA84D80
Authority key identifier: 58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/a818896b-7daf-37f6-b3fb-21abf321d2b7.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     55079
IP address blocks:        162.208.108.0/22 maxlen: 24
                          2604:ab80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:cd:67:b3:81:4f:81:bb:a8:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=5c422b0b-7a20-4d0a-81fa-fcf0d3745405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4d:a1:57:9b:f8:67:cc:46:7b:02:0a:7f:22:
                    60:54:3f:ea:30:f8:62:ed:f9:70:19:c9:65:73:d2:
                    cf:68:1a:91:57:bf:d0:44:6b:fd:3b:9e:f1:22:3f:
                    7c:ad:68:87:28:3f:24:91:95:c7:3e:66:ae:1c:e3:
                    2e:64:e0:8a:05:94:77:eb:d5:c7:eb:b0:2a:e1:5e:
                    c7:8b:5c:bd:78:66:8b:87:2e:b7:fc:0d:5f:00:be:
                    51:d0:7f:75:1d:68:7c:f9:7a:54:e5:80:a6:0b:d2:
                    40:0c:28:92:b7:e5:27:e9:c5:53:cb:31:36:5c:21:
                    67:f7:65:77:10:9a:e0:87:eb:c6:8a:45:fb:d0:53:
                    1e:7f:59:54:b2:f2:64:3e:75:ba:62:3f:e6:8b:c7:
                    72:a9:df:90:b9:a7:62:80:f8:cf:3e:b1:28:7c:af:
                    d3:91:03:04:f9:4b:c0:01:95:66:dd:f6:35:5d:2c:
                    7d:28:5b:17:b2:85:bd:23:6d:b4:13:c3:2e:39:fd:
                    7f:d1:7d:a1:f3:df:7d:9b:b2:63:e6:20:03:e9:57:
                    58:d1:2f:80:f6:11:18:23:6a:d0:5b:16:39:60:ea:
                    1a:20:44:21:13:76:1e:ad:a9:35:bc:cb:7d:e8:e0:
                    3d:f9:88:e9:fe:96:14:c9:fb:ba:52:1a:a4:fa:b8:
                    4d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:74:66:8A:C7:CF:A0:BF:25:F9:85:35:7C:1A:30:3B:5C:CF:A6:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/a818896b-7daf-37f6-b3fb-21abf321d2b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl

            X509v3 Authority Key Identifier:
                keyid:58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.108.0/22
                IPv6:
                  2604:ab80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:21:6f:fc:83:82:49:8a:b5:38:e2:ae:de:ee:9d:f3:f9:3d:
         6f:33:17:94:b9:71:b1:11:c3:71:9c:c7:cd:41:26:1c:67:97:
         17:59:fa:29:c6:ed:ef:0b:7b:cd:69:d9:26:e8:a6:b0:8f:1c:
         5b:64:34:38:22:a4:87:f8:f8:57:8e:e6:73:76:80:d6:30:e8:
         ce:c2:23:3f:74:3e:fc:57:44:28:ad:4d:c9:d7:14:5d:12:03:
         c3:19:4f:e6:be:1a:a0:a8:6e:e7:b0:29:3b:b5:e7:e3:66:49:
         cc:f3:b7:99:9f:79:04:91:1b:cb:44:59:ec:42:85:20:ae:97:
         b1:93:0a:72:0f:0d:51:39:54:18:d4:79:d0:95:58:d7:92:00:
         20:e2:b4:c3:7c:e2:35:fa:a5:42:73:5e:29:bb:ee:da:c6:1a:
         24:81:7e:f2:8f:ba:03:91:4a:43:28:54:6f:f9:11:bc:99:05:
         fb:59:9d:4e:bd:f9:2f:7b:63:1d:13:de:d6:16:bc:95:36:b4:
         25:cf:13:8c:0e:03:d2:95:9a:15:55:36:bd:cb:57:4d:94:fd:
         9e:c6:17:3e:a0:55:83:51:d2:fe:7a:f3:b3:e7:cb:c1:77:95:
         45:24:d3:5b:19:d6:95:9b:6d:be:c5:55:5e:e7:c1:13:01:3b:
         37:1c:de:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:00:20 2025 by rpki-client