Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/d5aeed0f-9c56-30bd-9ea3-2835773c74bb.roa
File:                     d5aeed0f-9c56-30bd-9ea3-2835773c74bb.roa (raw, json)
Hash identifier:          Mt6kgwzlnQe+BYo+hg0i4Xer3+K8bhqZjOTQU9U5+ro=
Subject key identifier:   82:53:17:F4:71:D8:8A:75:1F:2F:E7:02:AD:4C:EE:FA:CB:36:B0:FA
Certificate issuer:       /CN=b493bda5-0caa-4a42-8d7a-d94d27b079ea
Certificate serial:       010D0C9F432858499294A1509F60D3AD5F22C630
Authority key identifier: 41:03:7A:0E:B7:0C:51:C0:85:17:D3:8C:50:A7:12:96:E7:39:58:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/d5aeed0f-9c56-30bd-9ea3-2835773c74bb.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     46887
IP address blocks:        162.252.165.0/24 maxlen: 24
                          162.252.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:a1:50:9f:60:d3:ad:5f:22:c6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b493bda5-0caa-4a42-8d7a-d94d27b079ea
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=a14a3ebf-f77e-4210-b86a-dde4a50cd4b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b9:fd:a0:de:4b:db:bd:00:7e:be:9d:26:ee:
                    53:6e:d9:45:91:20:f5:9f:30:ff:a2:c7:55:49:45:
                    57:6a:5d:0b:ad:95:8b:ca:e6:e5:40:43:53:aa:b7:
                    99:8f:5d:9e:a5:fe:35:2e:c5:83:1d:7d:b5:94:ea:
                    6c:e1:a9:8d:12:96:0b:aa:ee:df:86:b3:03:92:e7:
                    89:f5:24:9f:1b:6a:6c:3f:87:73:81:e9:e1:bf:6e:
                    e5:76:48:7c:fb:c6:e1:d7:94:51:06:69:cc:f8:65:
                    e3:5c:2b:47:d0:c7:27:b9:c4:b1:19:62:d0:4b:97:
                    c2:f0:0c:d4:6b:91:3a:fd:99:75:6e:cf:7d:78:14:
                    e6:1b:61:44:a7:1b:9c:8f:7c:6f:a9:69:36:7b:de:
                    b0:7e:06:47:8c:a5:cd:f0:44:4c:4e:36:f8:58:bb:
                    ab:d8:d1:d0:db:89:c9:23:2c:98:80:0b:4c:11:ec:
                    1f:8b:7b:d9:6c:ac:a3:09:5c:17:03:b5:b7:10:ee:
                    83:2f:9a:56:81:a8:f4:50:2e:0e:0f:72:82:60:f9:
                    7d:18:e5:2e:8c:61:c9:4d:03:36:86:fc:12:30:59:
                    56:32:c1:6d:80:e9:ef:67:ca:a8:30:fc:3c:d0:5c:
                    2b:be:3a:9b:1b:ff:3f:05:36:b8:c7:63:2d:50:9f:
                    47:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:53:17:F4:71:D8:8A:75:1F:2F:E7:02:AD:4C:EE:FA:CB:36:B0:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/d5aeed0f-9c56-30bd-9ea3-2835773c74bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.crl

            X509v3 Authority Key Identifier:
                keyid:41:03:7A:0E:B7:0C:51:C0:85:17:D3:8C:50:A7:12:96:E7:39:58:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.165.0-162.252.166.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:70:da:d2:f8:46:d6:db:f8:ba:fc:d5:9f:99:c8:72:51:d0:
         72:92:88:0d:57:2c:73:1b:dc:b9:b4:d4:0e:c2:90:c8:63:58:
         80:18:57:1a:e9:06:50:cf:30:58:64:cd:d3:e6:69:43:13:30:
         f0:60:de:5e:ce:c0:df:e4:a2:21:44:f3:b9:e2:04:74:3f:dc:
         99:0d:4c:09:f3:90:26:47:ab:d8:11:05:28:6c:6f:ca:42:7f:
         ed:1a:f6:4e:77:1d:e0:72:c7:06:36:de:91:e7:61:89:d0:04:
         aa:79:11:90:f7:7d:30:4f:10:5e:59:7b:3e:87:b7:cf:bd:c3:
         8a:bc:3d:ea:59:51:79:9d:3b:30:76:0c:8a:c3:1e:b6:4b:6a:
         5b:6f:92:af:f3:c5:0d:69:2a:e2:c0:d1:80:81:be:5d:17:f4:
         9d:d4:f9:55:21:3f:6a:65:f3:ad:2b:0f:b4:a5:da:46:0d:0c:
         a9:ab:f5:31:16:1d:6a:2b:cf:39:89:18:07:2f:dc:3a:8c:91:
         d4:2d:d1:19:ec:2a:ab:17:1a:40:dd:ac:e4:67:62:47:ed:d5:
         d7:72:70:c1:2f:59:d0:82:4f:21:b4:d2:8c:dd:bc:8b:ed:f4:
         80:c9:27:13:47:54:4f:93:a6:08:25:3b:d6:56:f5:7c:68:5c:
         07:70:7d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:09:35 2025 by rpki-client