Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4fceb62d-b98e-3453-b056-20eff6067a36.roa
File:                     4fceb62d-b98e-3453-b056-20eff6067a36.roa (raw, json)
Hash identifier:          GGzcf2F+j8OAoTV7NYknwKlPZfyq4GwZaYWPHsS8bCI=
Subject key identifier:   70:91:E7:9D:00:99:38:1C:75:E9:E0:0C:4E:6C:FD:50:5A:3D:FC:F2
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849D49852F532FBC066B18F3980
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4fceb62d-b98e-3453-b056-20eff6067a36.roa
Signing time:             Mon 12 May 2025 16:32:07 +0000
ROA not before:           Mon 12 May 2025 16:32:07 +0000
ROA not after:            Sun 10 Aug 2025 16:32:07 +0000
asID:                     401152
IP address blocks:        170.62.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:98:52:f5:32:fb:c0:66:b1:8f:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 12 16:32:07 2025 GMT
            Not After : Aug 10 16:32:07 2025 GMT
        Subject: CN=4e31a1ac-be0a-4e9b-8270-4471cc3a62d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:ac:ed:d7:05:35:c3:9a:8e:af:cb:63:6c:
                    26:45:52:81:a4:bd:fd:55:3a:93:1f:79:52:b4:e0:
                    90:f8:1c:d6:8a:0d:ed:b1:6f:e9:aa:42:a7:df:7c:
                    2d:f9:6d:25:ac:07:91:94:61:42:c9:d6:e2:f3:a3:
                    e0:9f:11:81:a9:25:b7:10:04:a3:8a:5e:98:7d:d7:
                    38:07:b0:32:2b:1a:c1:83:f4:05:52:a3:b7:ed:5b:
                    5c:d8:98:c5:f8:18:9c:16:3b:1d:6e:29:4b:04:a4:
                    7b:53:75:07:0e:14:9b:81:88:f9:f9:85:68:c7:8e:
                    29:10:e0:82:ce:94:e2:6b:f5:d1:3e:7e:34:9d:86:
                    9a:bb:49:b9:1a:be:a8:da:89:0a:34:3d:30:5b:13:
                    17:a5:28:97:77:39:e9:36:d1:f2:bd:a9:e3:a6:be:
                    d2:05:6e:7b:03:bf:26:58:21:fd:ef:2c:be:3f:3c:
                    aa:e1:3c:37:55:82:a5:30:a5:52:88:ca:b4:12:ba:
                    fa:70:a1:3e:65:b2:d0:10:18:e9:0e:6e:38:13:d3:
                    b0:df:9f:1d:b3:d6:3c:8d:cd:6c:fc:c3:c0:42:44:
                    4f:cd:6b:2f:52:8f:e8:5a:3f:60:95:13:4d:f3:da:
                    de:b5:0e:7d:ba:53:b9:37:de:8d:4e:30:77:f2:c3:
                    0f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:91:E7:9D:00:99:38:1C:75:E9:E0:0C:4E:6C:FD:50:5A:3D:FC:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4fceb62d-b98e-3453-b056-20eff6067a36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:fe:83:eb:36:d6:71:06:0b:70:40:ec:ea:10:9f:bd:0d:d8:
         1e:00:2d:71:16:0e:f1:ce:83:ff:58:ca:81:10:a4:3f:ec:b5:
         14:4d:c8:6c:7d:f4:09:a1:ab:38:2f:91:07:80:4f:14:49:cc:
         09:90:38:c5:6d:72:72:b2:eb:f5:b1:82:33:cc:e9:e8:3f:39:
         00:fc:0e:c3:ea:2d:4b:24:02:b0:66:77:d1:e4:a9:6d:e1:ce:
         2f:ac:35:3d:67:ad:c3:66:a3:ca:e8:66:d1:59:ae:0e:e3:ff:
         4d:a4:16:69:45:0e:7d:e5:99:33:26:a4:62:08:e6:52:80:ca:
         33:44:e7:6c:d3:87:f4:ef:7c:ef:61:12:e3:ed:c5:84:88:30:
         75:5c:1d:91:d0:1a:9f:f4:de:10:6c:16:e0:c1:cd:cd:38:fa:
         1f:81:7d:18:5d:c0:15:1a:94:c3:ce:ff:1f:da:00:5a:0d:b6:
         63:b9:39:40:c9:7f:1f:8e:0e:8b:17:d7:c6:05:1b:ed:c5:ee:
         98:d8:cd:f3:8d:16:f9:c2:7f:59:05:c4:1d:e8:28:57:e5:18:
         de:1b:71:8f:ea:86:06:14:c7:27:74:c6:66:36:f2:fc:3a:b1:
         b0:17:19:f3:46:b5:2d:a3:f7:ad:49:f4:78:97:db:92:7a:14:
         f3:5c:be:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:06:58 2025 by rpki-client