Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/a06e48d4-4460-34ad-b73e-2edb2fd5f9da.roa
File:                     a06e48d4-4460-34ad-b73e-2edb2fd5f9da.roa (raw, json)
Hash identifier:          quxJ1Slxv4zygZNXUSbuV21faCpnvMnSw4X3YjhkvwU=
Subject key identifier:   78:6C:07:9B:01:66:70:19:37:B2:F7:5A:38:25:04:CF:B5:1C:6A:75
Certificate issuer:       /CN=0ad2b3c4-a64c-4afd-b0df-103361339550
Certificate serial:       010D0C9F432858499DBF3323BED3190D716E81A0
Authority key identifier: B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/a06e48d4-4460-34ad-b73e-2edb2fd5f9da.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     11287
IP address blocks:        163.182.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:33:23:be:d3:19:0d:71:6e:81:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ad2b3c4-a64c-4afd-b0df-103361339550
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=4df8484d-47f3-4c53-982e-b3088e9a794e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:21:1f:aa:04:3c:ee:69:71:3b:e4:23:02:52:
                    95:22:fb:96:e7:c2:da:af:1f:ac:09:18:86:41:10:
                    1c:f1:c9:a0:e3:0e:8d:eb:45:97:3d:46:37:2e:7d:
                    81:af:b4:e6:43:a7:e1:9f:2b:3a:f1:fe:df:4e:6d:
                    c2:5b:52:11:85:01:79:b3:0f:24:7f:90:bd:ca:6b:
                    7d:0a:61:fa:3b:55:7d:b1:2a:92:25:1b:68:cb:7d:
                    90:7a:1e:e6:91:09:98:91:cb:ab:a8:22:e7:3d:d4:
                    0e:17:6a:08:77:f7:a4:9a:5b:84:23:21:ab:b0:f8:
                    2d:54:81:4c:6a:15:e3:31:2d:1a:4b:c2:ef:54:6c:
                    b4:b5:ba:98:6c:db:f0:6b:b1:8f:dc:c4:83:19:23:
                    4f:bd:37:51:fa:f6:6f:6c:f5:ef:dd:40:ce:b0:3b:
                    92:d0:07:18:1f:94:8e:c6:b5:81:e1:85:9d:9c:8c:
                    de:14:79:24:fa:79:68:71:35:b0:1a:ba:37:e1:30:
                    92:45:74:3a:bc:b4:43:69:96:e7:79:89:b3:39:14:
                    57:0d:65:fe:7e:8b:0b:d1:18:eb:2c:fc:76:2f:ca:
                    5c:37:3e:b8:d2:a5:d6:86:79:ea:bb:19:4a:a5:53:
                    e0:c9:07:3e:b3:3b:04:b4:92:f4:38:81:b1:0d:ad:
                    ea:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6C:07:9B:01:66:70:19:37:B2:F7:5A:38:25:04:CF:B5:1C:6A:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/a06e48d4-4460-34ad-b73e-2edb2fd5f9da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl

            X509v3 Authority Key Identifier:
                keyid:B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.182.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:db:a9:ee:a4:41:40:99:27:7f:49:4e:8e:4d:1a:6d:87:4f:
         bc:8e:c1:31:79:a7:ad:eb:fe:e3:0a:49:95:26:e9:65:6e:31:
         1a:8b:e8:7b:14:7d:61:e7:da:c4:f2:6d:cc:23:1c:f1:5e:5b:
         c0:47:0f:cb:27:96:ce:d0:17:65:98:57:32:cc:5e:ea:43:f9:
         3f:80:02:0a:9c:97:b2:cc:b9:a6:88:7f:9c:6a:93:a4:e1:0b:
         3c:7c:8b:31:e8:03:e9:54:82:86:d4:ab:f4:a6:29:57:ca:15:
         97:89:7a:bb:48:b0:56:2f:24:3b:15:ea:33:e7:82:02:da:8f:
         2b:03:b7:d2:79:e2:1d:aa:fb:63:39:6a:86:6f:de:3a:01:47:
         9f:6c:a0:8e:c1:e4:e8:bf:d3:c7:54:b4:a2:fc:fe:51:05:ec:
         a9:ee:02:f6:3e:95:2d:5d:2f:fc:3a:36:27:f2:7e:99:8a:22:
         8f:fc:c7:15:ff:e5:c6:0f:04:9c:8e:d7:d5:93:93:3c:15:68:
         de:25:06:41:2e:84:89:31:4b:14:8b:45:ed:1f:84:c1:1d:c9:
         cf:33:24:eb:0d:7d:87:4a:06:64:98:b1:e3:6b:8b:8a:12:53:
         fe:5b:e5:f8:06:10:df:d8:00:b3:6b:88:48:54:8b:bb:bd:5a:
         37:27:8d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:33:06 2025 by rpki-client