Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/498365d3-16b4-3785-93ce-59f6949f31cb.roa
File:                     498365d3-16b4-3785-93ce-59f6949f31cb.roa (raw, json)
Hash identifier:          HaJ6HTatWUuRyWiQTk/H2/v7uT5//5+Cj9e93bYRhUY=
Subject key identifier:   66:7B:32:D2:68:32:46:39:9B:8D:26:4D:D9:01:8F:E9:30:3A:49:E7
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858499AF4885B0956080D77FB2000
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/498365d3-16b4-3785-93ce-59f6949f31cb.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     64267
IP address blocks:        162.223.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:88:5b:09:56:08:0d:77:fb:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=c7ad9412-c760-4cec-ae33-ff4c39714fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:fe:d3:93:35:c1:66:71:61:35:c9:0f:bf:
                    20:c7:ec:fe:f7:74:db:96:e0:14:13:1b:41:4c:71:
                    bb:30:d8:2d:31:bc:f9:e2:38:11:da:4d:c8:73:79:
                    48:4b:4f:eb:02:8f:2f:5c:12:a8:b6:e5:ac:83:6b:
                    19:6e:48:53:47:61:2f:c5:d8:e1:6b:c2:25:c6:95:
                    60:55:9f:d7:91:dd:35:d4:c1:32:fa:e6:b8:8d:7d:
                    76:19:c5:dc:5e:de:24:0e:72:41:fa:a9:9a:bc:a8:
                    b7:3f:e8:9e:73:4b:fd:ae:e8:cc:eb:2c:2e:e9:de:
                    8a:aa:8b:1d:75:9f:1b:dd:dc:4c:9b:f1:ba:a2:87:
                    ba:af:86:0b:b3:26:0d:4d:7f:f1:b1:a6:7a:ec:9e:
                    fa:88:29:f7:d6:3e:ad:67:49:d2:ad:2f:6a:e1:9a:
                    88:f7:e6:24:c0:7d:f2:f8:63:e3:50:9a:59:b4:d8:
                    ef:70:79:c5:2a:f8:c0:b9:63:ad:69:0d:7a:20:19:
                    ea:58:96:7e:ed:da:31:cb:55:17:7f:09:7c:7d:94:
                    1e:23:6f:5b:60:02:48:d7:e5:7d:64:b9:74:33:cf:
                    00:51:ed:71:de:57:66:54:48:1c:b7:96:f9:f8:9a:
                    e5:ff:71:30:39:41:6a:3d:cc:4a:3d:8c:48:2c:91:
                    a2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7B:32:D2:68:32:46:39:9B:8D:26:4D:D9:01:8F:E9:30:3A:49:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/498365d3-16b4-3785-93ce-59f6949f31cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:68:e9:87:5c:4f:97:3c:2d:d4:75:b3:3a:74:b6:cb:43:51:
         e8:1b:ea:dc:b1:0f:9a:b1:95:00:8d:55:7e:31:be:be:5c:43:
         e1:15:ae:70:7c:24:63:73:e5:cf:3d:f1:2c:fe:c8:53:b7:20:
         a2:1a:7d:12:95:86:fe:74:56:10:59:46:1c:c5:a2:1f:5a:d6:
         40:72:e7:71:f3:0d:d5:c5:29:25:f3:0c:96:c9:33:4e:61:43:
         0d:71:7a:42:c6:27:4a:79:46:59:00:2f:73:47:5e:65:99:50:
         7a:7c:ae:81:3b:71:56:8b:fc:fd:48:47:33:9a:ea:7c:1c:41:
         58:fb:e9:a8:b7:02:42:b4:48:3b:cb:55:e8:dd:5f:a5:34:23:
         a3:ae:ab:ae:b1:9a:cb:2d:1d:38:f3:e2:34:49:43:f3:04:fd:
         f2:b9:52:19:a9:1c:c1:40:2c:4b:a7:43:3e:e3:2e:f2:1f:d2:
         6c:8c:f3:90:51:bb:85:d4:f7:c0:43:32:ed:f2:a4:b9:6e:4c:
         e6:36:0c:3f:ed:e2:99:c5:f6:8c:66:89:7e:06:76:e8:b9:53:
         23:6a:65:f1:d5:a7:85:f4:ab:a9:de:d2:b0:d9:ab:bc:4d:d6:
         a4:3b:59:c3:0e:25:10:f4:ba:13:88:69:bc:93:17:33:2b:5b:
         e5:21:ce:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:50:45 2025 by rpki-client