Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/3bca850c-a082-395e-b6b3-a870cbd395cb.roa
File:                     3bca850c-a082-395e-b6b3-a870cbd395cb.roa (raw, json)
Hash identifier:          LweNzvP+UdalBO3ULeFjqIwdmRzB2YTecvy8PDmH4gs=
Subject key identifier:   F3:F9:72:B6:A0:F1:5A:7C:77:D8:D5:E4:34:0D:5F:84:E0:75:05:AF
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F43285849CBCF8569C4E5E356190EA980
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/3bca850c-a082-395e-b6b3-a870cbd395cb.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     42
IP address blocks:        67.22.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:85:69:c4:e5:e3:56:19:0e:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=62455bdd-d618-4b67-971a-bff2a129a579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c6:d2:03:46:8b:dd:22:5c:03:21:41:99:b9:
                    32:33:aa:40:ee:79:a6:89:5d:d0:eb:0d:c5:78:92:
                    d8:97:5f:43:c3:94:6d:3f:f4:2c:97:df:0b:33:08:
                    3f:3e:1d:6a:10:43:dc:dd:63:38:de:a5:dc:78:87:
                    3f:bb:48:e4:60:52:4c:24:4d:10:9b:a4:49:c2:a4:
                    91:9e:a6:83:7c:38:45:45:7b:b9:d3:16:b4:1b:80:
                    cc:0b:5c:b4:b2:5e:f0:f7:3d:57:f7:35:40:39:6c:
                    53:e2:b7:1e:87:73:ca:3f:ef:29:05:2e:32:b2:d0:
                    c1:13:1f:1c:8d:41:4a:5e:20:84:f4:10:0e:1d:1b:
                    aa:b9:36:28:0f:27:e5:e8:ad:d2:29:44:f7:eb:38:
                    6b:cb:aa:22:49:eb:3e:ae:90:89:b1:6a:28:f8:14:
                    cc:20:5e:99:98:80:28:19:53:cf:e1:d6:5b:91:a0:
                    aa:4c:12:24:e0:d4:74:07:c3:22:7d:0e:82:14:f4:
                    42:65:02:55:b7:65:79:e9:0e:ec:91:d8:e5:59:e6:
                    46:65:0c:d7:7d:58:f0:85:58:3f:f9:88:9b:1d:8d:
                    a9:86:18:89:fd:6a:3b:84:e8:a1:b0:23:cf:a5:e1:
                    57:52:bf:44:5b:25:c8:84:0e:1d:7c:d5:60:1c:20:
                    ae:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F9:72:B6:A0:F1:5A:7C:77:D8:D5:E4:34:0D:5F:84:E0:75:05:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/3bca850c-a082-395e-b6b3-a870cbd395cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.22.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:7a:95:42:fc:cc:84:f7:d0:a0:8d:bc:b0:81:ad:e4:58:5d:
         87:48:62:e2:0d:ce:5f:89:8d:fc:d0:db:e5:9f:70:b2:a0:ef:
         47:c5:c9:20:21:31:9c:9d:77:21:bc:c6:82:c0:12:3f:bf:a2:
         70:2e:60:1b:f0:2b:af:75:47:bd:99:7c:3c:a8:05:74:2d:86:
         f7:4a:7b:11:78:0d:ef:d2:4d:5b:b3:e3:3f:d6:f7:3a:b1:c7:
         dd:78:06:81:22:d6:27:68:f5:98:81:46:6e:1b:79:1d:83:57:
         e1:61:8e:3a:00:f2:2d:ff:2e:e1:24:4c:61:06:b6:ee:6a:e1:
         93:0b:96:c7:9f:d5:85:cf:36:24:ea:2e:3c:ac:1b:b8:5a:fe:
         54:08:bc:94:08:9a:ff:69:23:61:36:f1:b5:2c:8b:79:5a:01:
         de:70:e8:91:08:7a:42:6a:11:58:63:2a:25:af:e5:84:6e:d7:
         b8:78:5e:f9:3c:d6:6d:ee:f3:c1:b7:1e:07:69:86:9c:b8:49:
         d4:f6:4f:69:9e:e0:66:8c:3b:18:5c:d6:5f:02:8a:99:c7:db:
         70:2e:7d:ca:26:39:ed:0c:1d:0b:72:7e:9a:d8:fc:08:35:fc:
         47:3f:86:6e:c2:7e:ea:fd:a0:a4:a7:3a:f3:1b:d1:db:bd:88:
         d1:7d:51:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:46:16 2025 by rpki-client