Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/bb906220-b008-31a6-b6d4-624eb734d7bb.roa
File:                     bb906220-b008-31a6-b6d4-624eb734d7bb.roa (raw, json)
Hash identifier:          warCbB5AJA5z5fDx860axF+zBp9Pg2ZXGYBkvnZJG8A=
Subject key identifier:   23:A7:F2:0F:A8:B0:55:5D:FE:5A:42:7F:10:AD:8B:99:B3:B3:17:EA
Certificate issuer:       /CN=59f6a973-714f-4843-8b79-fe69f46eb1ad
Certificate serial:       010D0C9F432858499C59E53C468CC4D43952F680
Authority key identifier: B8:9C:08:7F:F4:E4:E0:6F:26:19:F2:22:AC:33:BB:34:B9:11:31:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/bb906220-b008-31a6-b6d4-624eb734d7bb.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     134365
IP address blocks:        162.251.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/59f6a973-714f-4843-8b79-fe69f46eb1ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/59f6a973-714f-4843-8b79-fe69f46eb1ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:e5:3c:46:8c:c4:d4:39:52:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f6a973-714f-4843-8b79-fe69f46eb1ad
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=f807d21e-de8a-4f30-93f3-bb9235f0bf0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:be:b9:e6:95:d6:ed:17:ed:4f:54:6b:8b:80:
                    da:e7:aa:43:87:eb:a1:fc:a6:f3:11:d1:a2:1a:9a:
                    dc:f1:9f:5c:4f:4f:d5:50:a5:b0:52:f7:a5:45:c7:
                    01:45:dc:1e:a7:12:ff:e9:20:6d:3d:a2:e7:f3:be:
                    94:d9:fe:bf:09:b0:af:1a:e6:bd:32:51:c8:51:03:
                    15:b4:cb:2a:63:c4:e6:9a:f0:82:cd:52:ed:27:84:
                    82:44:0b:9e:a7:bb:0e:84:6e:81:48:68:1e:ee:6b:
                    d6:6c:ef:44:9f:a3:d4:a0:fd:b4:90:d7:f6:12:e8:
                    72:c3:82:4e:11:f0:53:73:e3:f7:68:db:92:57:26:
                    a0:d7:eb:f9:27:9d:c0:5c:06:69:77:c9:d4:52:7c:
                    88:0e:2c:28:08:82:95:23:5b:4f:ea:1c:39:6e:6a:
                    41:ba:3b:56:8d:2f:f0:55:2a:c5:8d:0e:d7:d8:3b:
                    6e:28:b4:92:0e:3f:49:b5:27:4a:73:90:d0:d8:22:
                    48:79:89:d4:7f:e1:5b:a3:f8:e1:69:70:0c:ef:0c:
                    09:a2:ee:2f:67:10:b6:37:e8:37:6f:7d:a5:cc:67:
                    05:4d:ef:d8:14:55:3e:1e:ff:79:c1:52:e1:5f:73:
                    a7:16:58:62:9e:0b:98:9c:23:eb:0b:9b:5d:1d:2f:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A7:F2:0F:A8:B0:55:5D:FE:5A:42:7F:10:AD:8B:99:B3:B3:17:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/bb906220-b008-31a6-b6d4-624eb734d7bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/59f6a973-714f-4843-8b79-fe69f46eb1ad.crl

            X509v3 Authority Key Identifier:
                keyid:B8:9C:08:7F:F4:E4:E0:6F:26:19:F2:22:AC:33:BB:34:B9:11:31:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:d3:1b:85:1c:6a:73:15:27:ff:93:55:09:ee:66:9f:05:bd:
         e1:68:a9:34:08:98:cf:6a:9b:0a:0a:ff:94:58:b8:c1:33:aa:
         f5:59:11:c2:c0:3e:8c:72:40:b4:6d:33:90:e5:61:b4:70:40:
         40:58:30:49:a2:b5:9b:ad:57:b0:58:47:29:51:44:70:3a:ba:
         cc:0e:19:c8:9c:29:64:54:a5:23:cf:91:95:5a:29:42:a5:4b:
         36:93:5b:59:9b:38:17:4f:8c:aa:26:dc:4f:2f:2b:8e:83:26:
         ea:5b:2e:85:60:d0:ae:b7:41:6b:68:e1:e8:99:13:84:3b:3f:
         3f:01:a6:24:93:3a:7d:08:8d:1c:a2:8c:5e:79:79:34:a8:ae:
         a0:38:19:8a:4f:b0:73:37:0a:f9:4c:09:48:27:82:d4:19:74:
         57:01:28:cc:88:da:ea:fb:e7:82:02:3c:8b:c5:95:3c:1e:9f:
         78:b4:4d:30:61:bd:e5:f2:f9:cc:2a:71:79:3a:c3:05:99:33:
         df:fb:82:84:2f:3f:15:44:2f:78:07:56:3f:31:45:09:f8:39:
         12:6e:38:ec:34:7d:88:61:34:ce:03:fb:ee:f2:f6:99:dc:23:
         ae:0d:08:08:73:16:52:32:5b:b4:ab:85:4d:b1:16:89:a4:88:
         48:d1:46:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:48:14 2025 by rpki-client