Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/66512df6-5ed2-38b8-b867-3d72b7831a53.roa
File:                     66512df6-5ed2-38b8-b867-3d72b7831a53.roa (raw, json)
Hash identifier:          SY4kMKy9/i6d56VY7G8e+upgZRpQbzq71Kp/h6cnafM=
Subject key identifier:   5C:7F:52:21:4E:F7:01:5A:2F:25:6D:62:7D:DE:F5:C1:D1:C0:E9:5F
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584A23C012C62C3CC6E1DC3C9540
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/66512df6-5ed2-38b8-b867-3d72b7831a53.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     4922
IP address blocks:        162.245.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:12:c6:2c:3c:c6:e1:dc:3c:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=4d8cad21-730e-4a2f-abed-8b5098f62f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3e:fb:85:e8:a7:91:94:66:10:1b:26:31:0b:
                    c3:35:17:cf:3f:58:86:d5:12:b8:23:c8:5b:f3:cf:
                    e5:c8:03:0a:a3:e3:50:8f:d4:73:26:32:e8:79:c2:
                    3d:bd:e2:9d:46:24:cd:11:85:89:30:c1:9d:9a:a7:
                    b6:e6:49:85:70:58:0c:ac:13:06:70:55:6a:d6:25:
                    11:76:58:70:1b:6d:82:46:9c:b8:6a:72:df:61:8e:
                    ee:7c:79:a2:e2:7d:68:5c:aa:ba:3d:c7:72:c8:59:
                    a3:ee:c7:c3:2b:a3:42:27:23:63:1e:8b:78:39:7c:
                    c8:8e:07:4f:bb:f7:42:28:34:23:c6:94:1a:db:5a:
                    f9:3b:a9:55:a5:5a:d7:11:3c:ab:b5:9a:5e:c8:bc:
                    13:4a:6b:9c:54:71:7f:f4:b1:34:a5:5a:6e:40:e7:
                    02:29:91:ce:0f:8b:d6:f0:05:78:e5:44:00:2e:10:
                    ca:53:57:35:24:6d:4b:39:31:35:2f:01:0b:7e:2e:
                    65:98:84:f7:db:42:0c:a9:80:3c:6c:8b:46:80:e7:
                    7c:a5:05:42:5c:1b:da:e3:d0:6a:ba:c4:d8:84:c9:
                    d0:23:bc:9d:29:f3:c6:e9:c5:e4:78:eb:80:26:92:
                    06:a1:b8:97:ea:97:93:f3:4c:55:3b:71:4d:ef:ed:
                    09:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7F:52:21:4E:F7:01:5A:2F:25:6D:62:7D:DE:F5:C1:D1:C0:E9:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/66512df6-5ed2-38b8-b867-3d72b7831a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.245.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:9b:2f:4a:3f:b3:8e:99:4d:38:81:2e:b9:e5:02:c0:d1:8b:
         ec:94:74:5f:ee:7b:81:75:61:dd:ef:5f:e2:78:54:77:bc:f9:
         f5:b4:1d:9d:93:27:2b:1c:93:80:32:d2:93:c3:60:7d:f6:ee:
         f1:94:f1:40:c1:24:eb:91:ba:43:9d:c3:bc:6f:20:c2:37:4a:
         42:4d:78:2d:8b:1a:60:36:73:c0:6f:91:53:88:60:08:6a:2b:
         43:ea:02:14:e0:34:05:42:02:7d:21:88:64:f4:ad:a4:49:ce:
         21:c3:62:3c:68:1d:d3:bd:fa:32:c1:ae:d9:b3:16:cb:99:df:
         ab:9c:3c:a5:88:25:97:c8:1a:55:78:70:0b:64:9a:1a:5f:5f:
         77:bf:1d:0f:53:be:9a:ee:b4:be:79:25:5c:a4:4e:94:b2:b5:
         54:8b:0b:05:08:1c:6e:32:fb:4e:01:c5:e6:da:35:62:fd:86:
         f2:1e:7c:f2:22:f3:02:cc:1b:af:12:4a:71:3b:c7:ab:d5:b9:
         34:ec:13:14:23:ab:19:3d:79:fd:c0:ca:f8:41:1b:96:25:5a:
         f5:4f:0c:7f:b5:00:7b:f6:4f:77:0b:c2:d8:64:37:48:96:66:
         16:1c:36:d6:80:45:3a:85:98:66:41:d8:26:8d:48:4a:53:08:
         86:2a:1d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:39:44 2025 by rpki-client