Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/d5178762-3c63-3330-b84e-86a303475fbf.roa
File:                     d5178762-3c63-3330-b84e-86a303475fbf.roa (raw, json)
Hash identifier:          bOD2o8hP/o/zvBsMcK4QB7Tk0OkzyMch8uxEJWHHYos=
Subject key identifier:   FC:1C:21:48:9E:6C:2E:F8:33:F2:D7:45:23:22:58:92:89:9E:67:09
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285849C20A0CC229CA838F14943600
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/d5178762-3c63-3330-b84e-86a303475fbf.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11164
IP address blocks:        162.252.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:0c:c2:29:ca:83:8f:14:94:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=7b195ec0-f556-4eaa-be6d-df9446faaed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:1e:a3:4b:22:d9:82:0c:86:70:95:43:99:
                    93:b7:78:62:36:3d:33:c4:fc:42:de:c7:fb:c8:0f:
                    98:4e:ac:21:31:64:e9:98:59:4a:51:4a:3f:48:f9:
                    f7:f5:24:13:ea:87:59:8b:c6:5c:e1:86:5f:0b:5d:
                    d2:03:20:42:c5:ca:5f:74:8e:dc:b6:41:53:c1:aa:
                    01:9a:4b:69:66:25:e9:61:15:8a:5a:78:3d:f6:73:
                    7d:1a:ea:bd:28:28:45:e6:c7:fe:bf:ff:6b:83:6a:
                    e5:ee:bc:f1:85:4c:c4:ea:8a:ee:d6:7b:2a:8b:66:
                    71:96:d1:f9:04:14:32:f8:af:14:24:22:b8:df:92:
                    3c:57:1a:31:5d:c2:97:1e:46:22:63:92:fd:f1:d0:
                    b3:7e:3e:e2:05:b2:0a:a4:d7:82:9f:be:96:c7:c2:
                    59:7d:0f:d2:6a:71:88:fe:4a:99:3d:59:4a:ca:58:
                    9e:99:8c:d2:cd:a5:dd:f8:83:7a:50:ac:e6:5f:35:
                    37:3a:60:98:9e:e9:60:72:f5:f1:1c:d0:39:11:df:
                    f7:08:74:2b:30:c7:a6:e6:7c:a4:cd:4e:9d:93:d8:
                    d4:42:ba:eb:bf:d3:96:71:1d:25:66:1d:51:66:e5:
                    d4:53:3f:00:68:e2:14:d3:1d:5f:08:ce:c3:3f:c9:
                    c3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1C:21:48:9E:6C:2E:F8:33:F2:D7:45:23:22:58:92:89:9E:67:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/d5178762-3c63-3330-b84e-86a303475fbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:db:89:bb:8b:12:8f:12:c6:40:dc:f6:f5:f3:25:a5:cc:a3:
         38:c1:c1:92:08:c4:90:9d:10:5e:7a:30:d5:53:97:a6:3b:ff:
         c9:62:8f:5c:34:cc:ad:92:5e:c3:d5:35:5e:f1:a7:0e:c6:ab:
         b3:b6:ee:74:2b:17:00:af:87:a4:99:18:e8:62:e0:6f:51:e5:
         7b:1c:85:27:8b:b2:97:a1:61:0d:58:26:33:1d:6e:d1:bd:5c:
         2d:71:3c:fa:d3:ed:37:f8:ab:af:46:70:a0:fa:05:8e:02:50:
         4c:85:d6:16:6b:f4:ff:f9:d1:7d:16:bb:53:99:01:ca:fb:63:
         79:fa:0e:ee:a5:dc:81:38:14:17:88:dc:e9:e0:7e:05:88:9a:
         39:ff:82:f6:54:5e:ac:58:5b:37:f3:0f:1f:ce:23:3e:5e:b7:
         bb:3b:a7:a7:83:f8:ce:a4:09:b0:4b:10:54:8d:3d:cb:bd:a5:
         07:81:00:cc:ab:e8:8d:85:26:a2:dc:08:75:16:eb:fd:af:9f:
         c8:04:81:f1:14:01:82:b0:04:d3:36:e7:23:4f:69:9a:f7:f6:
         d5:ad:bf:e7:9c:5a:db:f5:eb:96:e6:8c:ed:6e:15:7f:bc:af:
         65:75:13:06:2a:98:ed:56:5f:62:90:89:4f:d5:a4:c9:62:fd:
         7a:87:0a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:40:59 2025 by rpki-client