Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8b4085c3-80bf-3d18-b6e4-65193bd79dae.roa
File:                     8b4085c3-80bf-3d18-b6e4-65193bd79dae.roa (raw, json)
Hash identifier:          o7nIP0Za5IJoSieYKgF0PIw3UtWwrZC0irkGLEPxj24=
Subject key identifier:   64:E3:2D:94:4D:E9:30:71:03:94:04:95:EA:01:06:99:8A:78:1E:8A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849B6DF599472AE24AA1B738200
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8b4085c3-80bf-3d18-b6e4-65193bd79dae.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     397630
IP address blocks:        158.62.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:59:94:72:ae:24:aa:1b:73:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=f530c812-796c-4a99-9249-0cffa5e55238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ce:eb:56:da:63:66:64:3a:f6:04:ea:8f:08:
                    64:5c:d2:d4:2a:b0:95:eb:a9:d1:35:95:93:86:e3:
                    1a:11:ef:34:c0:76:a7:f0:26:fa:4f:d2:2b:27:5a:
                    50:07:6e:69:a6:1c:9a:9f:4d:af:52:d8:42:97:99:
                    6b:77:b1:76:16:18:7f:5b:46:8b:b7:e0:11:8d:bf:
                    3d:f6:ad:fa:83:c9:7f:f0:ad:01:ff:ae:31:d5:57:
                    66:06:64:11:bc:5c:e8:76:2c:25:ec:cf:6f:c8:71:
                    d6:34:18:28:a6:fc:4d:84:94:4b:aa:80:1c:32:35:
                    c3:ea:18:c3:1b:c6:3e:57:55:36:df:dc:b2:68:bd:
                    cf:ad:9f:42:ad:fc:46:99:bb:40:6f:b9:cd:e1:d4:
                    66:cc:03:5c:d1:fa:c8:8d:48:76:53:1e:9f:10:e8:
                    cd:83:4e:85:14:cd:ad:01:7c:25:d4:65:6a:9a:c1:
                    38:8c:98:90:0d:c5:81:f7:ef:36:70:5a:49:38:31:
                    03:41:9b:09:bd:e8:5f:a1:72:3d:45:d4:59:7b:53:
                    77:95:09:c2:64:06:ca:da:76:e0:2d:9d:06:09:15:
                    8b:9f:f4:4e:cd:cc:e0:8f:b6:b1:63:ae:7c:06:99:
                    25:df:1a:8a:bb:0a:3a:fb:2f:7d:ed:8f:d1:db:6c:
                    b5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E3:2D:94:4D:E9:30:71:03:94:04:95:EA:01:06:99:8A:78:1E:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8b4085c3-80bf-3d18-b6e4-65193bd79dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:75:d9:6b:e7:05:9d:04:dc:f6:b6:c7:c6:a4:bb:ac:7f:d4:
         0b:28:c8:cc:c6:18:22:ed:c4:39:60:a8:b7:ab:42:ea:3c:0e:
         b1:03:85:67:cb:43:78:c8:b8:3f:ba:5d:c5:6c:7c:d5:64:65:
         ca:1a:5f:0d:8b:b9:73:39:73:4d:ae:3e:5c:e3:e5:73:ca:ce:
         ba:6b:07:60:fc:3a:4b:e8:94:ac:63:35:10:ed:c5:b6:d7:16:
         eb:a7:54:50:79:d6:22:8c:8f:1c:28:cf:26:61:56:48:03:ba:
         63:36:67:06:80:b1:83:3a:ef:34:41:87:35:7d:cc:b0:e6:5b:
         48:04:c2:da:d0:7e:d9:4c:50:1f:e6:cd:fc:25:34:98:6f:23:
         f0:69:6c:b7:1d:5f:95:d7:36:a3:d6:12:63:38:d2:0b:5d:49:
         ef:59:80:45:65:5d:3c:0a:23:77:9a:c7:05:74:df:f9:a8:79:
         27:bf:e2:b9:89:e9:8c:51:4d:75:a7:1e:02:b6:74:ac:c7:a6:
         8e:ee:e0:7b:96:f3:96:81:2a:9e:31:30:c0:d8:4a:c3:2e:79:
         8d:04:4d:b8:56:b7:b7:9b:cb:ca:e8:12:de:04:a3:ec:b5:31:
         21:01:fb:cb:1a:1c:44:de:82:c6:f7:de:a7:24:16:ff:6d:8e:
         63:a8:87:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:23:26 2025 by rpki-client