Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/f44f3785-5847-3bc5-93b6-ae0d8d5dbc54.roa
File:                     f44f3785-5847-3bc5-93b6-ae0d8d5dbc54.roa (raw, json)
Hash identifier:          fHTW4emzu/KZQ9Gh+RYQhHjs1coiTjN7EdKi/clVJJI=
Subject key identifier:   75:D5:AB:2F:DC:D2:55:62:12:4E:87:86:77:F7:2B:27:C7:65:3C:7C
Certificate issuer:       /CN=e0927227-fbc8-4924-89af-1885637cb07c
Certificate serial:       010D0C9F43285849E7BA81D601D690EB4D5F9000
Authority key identifier: 42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/f44f3785-5847-3bc5-93b6-ae0d8d5dbc54.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     35280
IP address blocks:        107.162.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:81:d6:01:d6:90:eb:4d:5f:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0927227-fbc8-4924-89af-1885637cb07c
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=97585a09-0b18-4fdb-8c00-2a4ed53b7be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:52:8f:79:4e:81:a5:43:7d:86:df:cb:8b:25:
                    d2:08:4a:6d:f3:da:88:0b:7e:c2:3d:47:ef:3e:6c:
                    2d:12:b6:f1:d0:26:3e:7f:c0:13:64:34:9b:42:80:
                    64:d6:80:8d:15:b0:b2:5e:0b:81:62:be:84:59:1c:
                    1c:3a:29:32:e9:fd:f8:c8:5e:6f:b4:33:9a:b7:3e:
                    88:b0:82:b0:b6:17:07:70:77:53:cc:96:64:2c:8e:
                    9c:d1:56:eb:b5:df:09:69:b5:cd:79:5d:35:af:f3:
                    64:f6:5e:28:cc:0f:51:16:a9:c1:47:41:bf:ef:dd:
                    15:9d:58:68:8a:61:4a:7b:58:fb:26:44:d7:31:17:
                    6b:ac:dc:24:0b:bf:0b:54:7e:ad:54:8b:9d:c0:86:
                    42:44:49:fb:70:8e:c0:f3:a2:6a:c4:eb:9f:59:5c:
                    6b:7c:5d:a7:2b:e7:4c:28:8e:e3:d5:73:31:c5:fc:
                    2a:02:dd:c1:42:2d:97:cb:3a:a6:66:5c:26:19:a5:
                    ea:64:0c:c1:b0:20:8e:a5:55:0e:d3:a2:21:4b:c9:
                    0a:f4:e2:c1:65:af:c7:0e:2b:c5:99:e3:cc:d6:c0:
                    89:2f:56:a0:33:8b:9a:e1:5f:c8:bd:82:b0:63:e0:
                    42:6e:7a:ce:b8:2c:6e:76:c1:1f:7a:5f:f6:c3:ac:
                    50:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D5:AB:2F:DC:D2:55:62:12:4E:87:86:77:F7:2B:27:C7:65:3C:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/f44f3785-5847-3bc5-93b6-ae0d8d5dbc54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl

            X509v3 Authority Key Identifier:
                keyid:42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.162.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d6:e4:87:e0:50:40:ab:a5:68:ba:33:6b:76:3d:2c:30:fb:
         1f:4f:e1:9b:48:f2:d1:58:46:5f:69:21:4c:1c:8e:e8:96:97:
         27:db:42:72:8c:3f:5a:66:5b:48:b8:df:05:dd:b7:54:a1:5f:
         33:ca:67:b1:b2:2c:d2:9d:78:46:0a:cb:1e:18:58:f2:d2:97:
         b4:4f:6e:ff:43:2a:36:31:db:5d:d2:10:c4:29:bf:97:fb:d9:
         7c:0d:e3:a3:67:b9:9f:1a:10:c8:c7:2b:f1:87:8a:76:e3:1c:
         53:58:df:f8:63:be:4c:f8:95:a8:d0:62:e6:1c:ae:12:b6:53:
         a1:75:60:78:ca:ab:04:45:91:5d:d3:48:ef:c6:5f:83:95:83:
         a9:c2:c5:b0:0d:40:b3:85:4f:5e:65:f1:ad:f7:90:69:1a:3a:
         27:01:e7:6f:07:60:79:f0:53:c7:cf:3f:eb:97:91:23:32:db:
         1f:97:70:da:e3:7f:52:7f:d3:5d:81:65:c3:b4:51:4c:90:9b:
         cc:75:60:6d:b6:a7:e6:f5:de:a6:d8:f8:fe:e4:97:9c:c1:16:
         1e:8b:fe:98:cc:b9:06:61:6e:2b:7f:9b:7c:7b:5d:4a:3b:d5:
         d6:0a:24:7e:20:a7:d5:07:bc:46:8d:04:c1:29:64:7a:7c:d7:
         0e:d6:36:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:35 2025 by rpki-client