Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/25ede160-20d7-3484-9dfe-61c3ae3ce8f5.roa
File:                     25ede160-20d7-3484-9dfe-61c3ae3ce8f5.roa (raw, json)
Hash identifier:          BhBBcpw2bN6k5dXqAlWY7eH20SumuncomXaT4gxQx6w=
Subject key identifier:   C9:E2:B5:68:6F:1A:3D:A8:7E:22:EB:FA:6E:F9:B2:BB:21:9D:5E:71
Certificate issuer:       /CN=57823265-9949-4030-be09-5aebdf77ae5c
Certificate serial:       010D0C9F432858495EEEE84BB6E9FE72E4947180
Authority key identifier: 1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/25ede160-20d7-3484-9dfe-61c3ae3ce8f5.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     14618
IP address blocks:        162.249.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:e8:4b:b6:e9:fe:72:e4:94:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57823265-9949-4030-be09-5aebdf77ae5c
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=acbc5b83-ef3f-45eb-a24b-ac86da1b3201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c7:a1:85:b9:42:f1:d4:34:6b:5a:a8:d6:79:
                    30:17:88:03:d8:9c:16:d1:8c:90:09:ca:af:d1:2a:
                    8f:22:36:27:ff:78:e5:e9:87:eb:65:71:6c:a8:b8:
                    1f:4f:82:c9:d9:70:31:8c:c8:e2:3b:f8:f5:63:ef:
                    66:8b:57:ac:4b:56:fc:b6:43:78:a7:96:f9:4e:6f:
                    53:b2:5e:d0:57:b7:8a:0b:60:1a:af:ed:c8:69:5f:
                    2c:ff:70:dc:63:63:5a:05:7d:4d:4c:bf:6f:55:9c:
                    0a:ec:47:7d:a0:f0:f9:35:a2:8c:61:1f:fd:39:82:
                    8c:d5:20:15:a9:74:ae:1d:31:7a:8e:73:02:a6:45:
                    0f:06:44:f6:9a:f3:38:0a:c5:f7:93:eb:55:bf:88:
                    e0:61:6a:7d:ad:a9:f0:0f:9e:61:68:34:da:0b:d7:
                    eb:0f:88:69:65:7e:b5:bd:5d:36:e4:f9:31:6f:ff:
                    68:40:73:cd:da:fd:35:40:6d:fc:7c:87:0b:ad:7f:
                    c0:93:6d:0a:86:d2:81:e7:0a:e4:4d:64:89:77:09:
                    cb:9e:8e:63:ed:6c:bd:28:91:80:3f:67:55:37:62:
                    5b:42:3d:07:ed:35:eb:1f:ba:57:45:67:cc:e1:da:
                    a0:67:4a:97:15:04:47:a1:6d:bd:59:02:50:56:ac:
                    e7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E2:B5:68:6F:1A:3D:A8:7E:22:EB:FA:6E:F9:B2:BB:21:9D:5E:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/25ede160-20d7-3484-9dfe-61c3ae3ce8f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl

            X509v3 Authority Key Identifier:
                keyid:1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:fa:62:20:4f:78:d8:4b:d5:68:73:ff:72:3c:fa:c6:41:06:
         d8:6e:c0:3d:ba:aa:d5:c1:60:6a:12:ab:d6:20:80:ed:4e:0d:
         ec:04:27:f3:93:3f:f8:95:ba:dc:6f:60:03:43:88:11:5c:58:
         0b:5f:e1:86:7c:73:b6:07:33:90:a8:c2:cb:88:7e:7b:15:54:
         84:af:3a:5b:5f:b7:e9:ac:21:5a:7b:16:8e:8c:40:57:c6:56:
         81:20:f8:1a:aa:d1:9a:6f:d1:73:27:f8:f3:d4:60:b9:de:81:
         da:6b:a3:82:17:09:64:51:15:99:85:88:e4:23:08:70:ea:9f:
         89:68:da:0a:2d:c1:86:19:10:a3:5a:3e:87:83:f5:09:5f:83:
         85:d5:4b:9d:be:e7:a9:e7:6d:8b:94:83:59:0d:b1:0d:e2:f6:
         e4:fc:b8:98:e0:6d:c0:fa:f6:14:5a:90:93:ec:21:e4:1e:cb:
         e0:13:60:ea:00:39:51:55:ca:50:69:2f:9f:e2:08:a5:24:d1:
         cb:0b:50:c0:84:bc:ca:49:77:de:06:a8:40:18:23:77:54:64:
         1e:32:8f:06:ef:af:b5:4d:6d:33:a7:e2:5f:df:31:4b:3e:cb:
         7a:c7:36:4a:8f:19:09:33:fd:76:2c:c6:fa:c9:7a:ea:56:34:
         d8:9b:99:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:34:21 2025 by rpki-client