Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/b22c82aa-2e00-33e3-a205-3cad5d57c00d.roa
File:                     b22c82aa-2e00-33e3-a205-3cad5d57c00d.roa (raw, json)
Hash identifier:          DZcX5WGzauG1mp/gnKvHH/c1oyL5fMYLuQqVuS46UB4=
Subject key identifier:   10:7B:8D:3A:B5:B8:CA:81:DF:8B:9F:83:C4:50:CC:A8:81:8F:7C:AB
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F43285849DEDC591F0F1DAD32F9E04780
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/b22c82aa-2e00-33e3-a205-3cad5d57c00d.roa
Signing time:             Fri 16 May 2025 08:47:15 +0000
ROA not before:           Fri 16 May 2025 08:47:15 +0000
ROA not after:            Thu 14 Aug 2025 08:47:15 +0000
asID:                     21610
IP address blocks:        169.145.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:de:dc:59:1f:0f:1d:ad:32:f9:e0:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: May 16 08:47:15 2025 GMT
            Not After : Aug 14 08:47:15 2025 GMT
        Subject: CN=8cdadaea-ee0f-4ce3-8507-a8d9e51cc854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:23:df:94:47:01:ed:d3:a2:e5:35:a4:80:
                    2b:97:c9:3e:78:c7:84:24:d7:fe:ee:15:7d:70:36:
                    75:cc:26:2b:f0:3d:a0:cf:ec:48:17:71:b1:89:42:
                    7b:31:a2:04:a7:b9:df:a7:61:10:fc:c9:d6:37:e7:
                    b5:a1:62:6d:9f:06:98:11:7f:ae:e5:1b:85:c1:17:
                    9e:98:df:ec:0b:7a:cd:d3:b5:37:65:24:ff:61:91:
                    33:72:98:cb:c8:31:02:68:25:61:3c:f2:24:97:d0:
                    9c:74:d0:68:f9:98:e1:85:ea:74:04:b0:17:6e:ae:
                    1b:9f:73:28:e7:aa:84:a5:80:0e:4b:f5:8e:bf:82:
                    f0:97:5f:50:48:da:5a:df:9e:20:87:be:55:d2:2f:
                    5a:6b:3e:d9:91:a0:e0:13:a6:28:09:4f:6a:6e:cc:
                    1d:e7:14:47:b1:93:63:f8:fd:4b:c2:2b:ac:21:9e:
                    f0:7a:7c:c7:ea:e1:6e:43:d9:79:69:df:5b:89:bf:
                    e8:39:2d:25:44:14:d2:83:84:9b:29:bf:91:38:f5:
                    10:35:bc:ae:95:67:3d:e2:d4:80:1d:ae:80:32:6d:
                    4d:e3:4d:cc:3b:cb:cd:c5:a1:36:58:cf:2e:75:ac:
                    11:f9:90:b4:a7:05:6f:74:40:cc:7f:61:a0:63:ce:
                    8b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7B:8D:3A:B5:B8:CA:81:DF:8B:9F:83:C4:50:CC:A8:81:8F:7C:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/b22c82aa-2e00-33e3-a205-3cad5d57c00d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2f:cc:51:5a:d9:1c:a7:82:17:ef:0a:f3:93:e7:ea:b8:13:
         d3:a2:90:a4:7b:ff:8a:c9:a8:8f:62:22:a1:a0:0c:9a:a2:0f:
         a0:69:93:2d:87:32:39:ce:87:11:53:dd:6f:91:1f:3b:77:87:
         0f:80:2d:39:fc:ba:0a:f9:0a:0d:89:6a:8a:1a:07:1c:4c:3c:
         de:58:b9:76:a6:58:4b:f8:7f:92:5d:bc:84:86:f2:02:66:fd:
         2c:70:d9:90:51:40:ef:7b:c6:c9:4f:88:d0:01:20:e0:48:c6:
         18:32:5e:ac:44:1c:e2:43:41:e9:3b:bc:7f:0d:3c:2b:5d:94:
         81:76:5e:02:41:4b:6e:fd:dc:66:f3:7f:49:c4:41:0b:72:57:
         e9:95:90:4f:48:34:68:70:3b:9f:97:c2:e4:51:04:e2:62:11:
         22:68:fb:d5:2d:14:e1:44:d0:51:1c:51:86:54:5d:4c:ba:ac:
         82:a7:31:4d:68:1f:a5:7f:5f:66:ca:c0:c3:62:6c:08:45:65:
         40:ea:80:bb:08:60:ab:fe:e6:04:f8:4a:a1:f7:80:50:80:85:
         1c:95:68:cb:49:3c:f3:d9:20:db:4d:1b:47:a6:7e:a4:da:ee:
         ab:ae:a7:77:d7:01:7e:b6:77:d1:41:2a:c4:d3:8b:e5:19:f4:
         1c:98:ec:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:37:25 2025 by rpki-client