Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/395c0dc9-2753-334d-8d45-7b06bbeef517.roa
File:                     395c0dc9-2753-334d-8d45-7b06bbeef517.roa (raw, json)
Hash identifier:          EiTclWW2kOZmpuKSmMnKnCB+ckH8fykDMMgT5coyIVw=
Subject key identifier:   D2:38:E0:BD:AA:7E:FF:49:C1:BD:19:C3:C3:4A:C4:13:BF:C0:54:AD
Certificate issuer:       /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5
Certificate serial:       010D0C9F43285849CBCF9A38F8D4B60DE35A61C0
Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/395c0dc9-2753-334d-8d45-7b06bbeef517.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     40948
IP address blocks:        162.247.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:9a:38:f8:d4:b6:0d:e3:5a:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=3a17a196-fd4a-4242-adf7-c7a2c114917e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:f4:90:c4:8d:03:11:31:1d:e8:6d:37:2a:
                    54:7c:eb:d8:0d:8c:49:09:33:49:0a:0f:5b:cd:3f:
                    1a:18:87:cd:33:56:04:d8:20:2f:8a:66:eb:58:d8:
                    42:f0:d3:9c:76:6e:c9:47:89:ce:f2:f5:81:b2:46:
                    35:4c:0b:e9:fb:fe:e7:cd:1a:78:d1:36:e5:86:dc:
                    f0:15:9a:ee:89:5c:07:4f:54:e0:2f:5e:fe:91:a9:
                    08:c9:db:c9:6c:6c:8b:37:ed:dd:09:8b:3b:c8:d4:
                    31:f9:d9:9e:86:3b:be:35:93:42:84:95:c1:be:80:
                    26:86:a7:8e:3b:dc:e5:f8:87:71:6e:0f:fa:84:0a:
                    41:9b:a0:d2:6a:a6:ec:f3:d7:05:c9:30:3c:3d:11:
                    47:d5:5f:0e:36:07:6b:7a:ce:db:51:00:81:14:d7:
                    b6:d8:2d:ae:3d:f7:3f:a6:fd:1a:53:d0:33:42:76:
                    b4:1f:b4:c1:75:61:cd:b8:0e:3f:3f:ae:2c:9e:37:
                    b3:d7:e7:66:97:3c:c6:f1:4f:a7:1a:7f:d9:f9:5c:
                    0b:23:28:a6:ee:7d:45:31:7c:ac:ee:b0:7a:de:5d:
                    61:d4:48:de:35:d2:72:4c:4b:9a:07:c2:f6:08:72:
                    46:86:93:19:cd:9a:f8:82:85:15:30:9d:09:02:4a:
                    64:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:38:E0:BD:AA:7E:FF:49:C1:BD:19:C3:C3:4A:C4:13:BF:C0:54:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/395c0dc9-2753-334d-8d45-7b06bbeef517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl

            X509v3 Authority Key Identifier:
                keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c1:c8:7f:aa:ab:00:b6:2b:42:66:ff:bd:c0:57:a7:e3:a1:
         84:73:c9:4e:c0:e6:dd:ae:9b:7f:e3:fe:72:52:98:13:5c:7f:
         4e:ea:5d:51:0e:85:b8:f5:2d:ef:a5:f8:5e:22:41:0c:78:15:
         63:dc:34:5f:34:9a:6d:ed:80:ea:42:f7:f5:e8:6f:cb:a0:32:
         b5:e9:6c:2b:6e:0d:2d:c3:d9:0a:37:1e:66:ac:87:3e:27:bf:
         2a:43:b2:fd:60:a1:ff:6a:c4:f6:62:23:83:b0:a2:e9:cf:ff:
         79:aa:cc:22:b2:60:5c:17:9c:bf:74:e7:68:d6:a4:1c:0c:46:
         be:57:b0:42:89:7f:ed:ef:d0:20:88:b4:2b:2c:69:fe:84:ad:
         d7:08:14:14:23:5e:0b:35:2a:b2:f2:fd:a6:47:ed:a0:28:6a:
         4b:6a:ea:87:c4:82:af:8a:a5:a3:f3:50:ad:d3:59:3b:bd:b8:
         64:7b:c6:e4:28:07:39:59:0b:b3:71:b1:00:0f:31:3b:66:63:
         44:a1:ec:55:02:39:03:19:ff:0a:62:0a:ee:4f:8c:37:1a:ae:
         7f:1d:14:a4:52:00:1b:fc:7c:ff:0b:c8:49:3e:c3:f7:62:c9:
         b5:3a:22:42:99:2e:db:31:c5:89:7e:5c:1f:95:15:3c:ab:40:
         c7:a2:d8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:33 2025 by rpki-client