Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/62ff3ec6-eac8-397e-af4d-eb92f92e2c8d.roa
File:                     62ff3ec6-eac8-397e-af4d-eb92f92e2c8d.roa (raw, json)
Hash identifier:          bzZDouq+S2UCPVBMdyGO4GFi0zTudh5TqSzuLh/Qfdc=
Subject key identifier:   FA:C4:33:0E:E8:AF:EF:FB:DF:5E:66:66:34:F5:9E:F2:FF:97:B8:F0
Certificate issuer:       /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
Certificate serial:       010D0C9F432858499AF48D3584299C97673F26A0
Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/62ff3ec6-eac8-397e-af4d-eb92f92e2c8d.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     23341
IP address blocks:        143.55.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:8d:35:84:29:9c:97:67:3f:26:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=74aaf8dd-4ec3-4894-911a-abe7c2937070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5b:58:bf:5f:92:ab:81:75:11:bb:8c:dd:74:
                    b5:83:82:6e:ea:fe:c6:04:3d:a2:64:e4:a4:05:b6:
                    ee:87:db:82:4b:55:86:d8:21:a4:86:a8:3e:e7:59:
                    af:43:ac:52:46:00:e6:22:35:2a:f8:6a:33:64:53:
                    b6:1b:41:61:c1:bd:0e:34:c3:14:bb:eb:1e:d6:a4:
                    bb:33:69:bb:5a:86:37:4d:d1:90:f3:b5:86:3f:e7:
                    71:38:64:42:e5:7c:62:f3:05:74:99:db:cd:47:59:
                    3d:7b:5a:27:8c:9b:e9:52:8b:95:bc:77:9d:17:12:
                    f5:1b:30:49:4c:6a:af:77:22:24:98:03:27:cd:48:
                    31:0a:2f:ec:18:21:f4:30:31:e4:29:5c:e6:9a:91:
                    ef:48:0e:b0:4b:5e:27:22:ed:b0:fe:85:ae:15:9e:
                    23:ed:bf:95:a4:92:91:5b:28:9c:a9:1e:80:02:99:
                    8f:72:d4:c0:2b:2f:7d:b7:f0:00:89:8f:59:aa:5b:
                    e3:bd:b6:a4:a4:b7:d0:55:e0:41:de:28:ba:18:7d:
                    1f:46:fb:6b:72:ee:f7:8e:54:91:27:3e:f4:0d:7f:
                    ce:11:dc:66:05:e7:07:b5:e6:a4:4c:36:bd:f9:bd:
                    78:40:8a:91:14:40:a3:47:12:10:9e:a0:93:bf:bd:
                    2c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C4:33:0E:E8:AF:EF:FB:DF:5E:66:66:34:F5:9E:F2:FF:97:B8:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/62ff3ec6-eac8-397e-af4d-eb92f92e2c8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl

            X509v3 Authority Key Identifier:
                keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:79:42:f5:8d:2e:04:98:24:ab:23:15:f0:8f:d8:74:bb:d1:
         e7:d7:07:6b:a8:a8:e4:f7:57:4e:8a:04:07:e1:46:3d:25:d1:
         34:00:5f:8d:32:74:8d:9b:ae:8a:ac:29:5c:f3:dc:bd:c5:f2:
         cb:cf:b5:a4:ff:95:b4:54:6d:1a:4b:0d:e0:bc:61:1e:61:ff:
         97:37:df:d6:f8:ac:ac:26:9d:6a:b3:94:81:23:1b:8c:b6:d6:
         d5:c0:14:ae:91:97:ce:77:e6:24:17:65:fd:2f:f2:03:49:06:
         91:a8:4f:a1:68:97:ce:97:8a:17:24:20:21:76:a1:0c:1e:a1:
         3c:2a:d0:e6:9d:5a:76:00:e3:26:7f:e6:20:cb:61:c1:bf:a8:
         5d:d9:9b:d9:73:64:45:56:b1:57:9b:1a:82:eb:8f:b3:74:f9:
         cd:f6:38:eb:82:71:1d:a3:10:76:e5:d5:4b:f0:8e:f0:71:f0:
         a0:91:42:ca:61:f2:4f:5b:13:2c:d6:15:ff:be:2d:c0:28:e5:
         61:d3:f8:19:63:2e:89:62:de:93:bc:40:ea:6a:b7:42:87:1d:
         60:b6:0c:15:8b:8d:ab:9a:a1:65:5d:71:a8:7b:23:20:04:17:
         15:87:24:ae:76:02:3a:97:3c:bd:5f:f5:da:02:9a:5f:b1:11:
         bf:87:c9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:58:41 2025 by rpki-client