Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/541b454a-f70e-3454-bcae-4a7dff7be3ef.roa
File:                     541b454a-f70e-3454-bcae-4a7dff7be3ef.roa (raw, json)
Hash identifier:          yr3UEX1uNCexmVLmgEMSjGQnvsJZoUgIpyoz10vlQCg=
Subject key identifier:   54:26:7D:7F:E2:E0:4B:58:19:84:C2:C3:EE:67:10:97:B7:59:3A:97
Certificate issuer:       /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Certificate serial:       010D0C9F4328584A3E45B1315C2A63229BC78E80
Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/541b454a-f70e-3454-bcae-4a7dff7be3ef.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        162.212.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:b1:31:5c:2a:63:22:9b:c7:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=ad0c39db-395e-4589-b86e-b9e1420c0131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ff:cb:2a:84:b4:ce:be:c6:ca:cd:f2:9c:ce:
                    a3:dc:4e:a9:ac:ff:b7:86:3b:56:fc:9f:11:11:b6:
                    9b:fc:d2:cd:38:c8:89:21:ab:5c:d2:e7:91:a2:dd:
                    47:47:ff:54:8e:e4:3a:6e:a3:79:9e:68:a0:7d:31:
                    dc:ec:81:01:18:37:d5:4f:d7:e2:be:2a:6a:4b:15:
                    65:08:8a:b4:7a:37:d5:53:c7:3d:6b:18:9b:1c:d8:
                    92:67:58:3a:66:30:0a:21:c5:6b:ac:ba:13:c9:99:
                    44:21:d1:19:7f:39:a8:5f:10:68:16:55:fa:ce:8b:
                    3a:08:07:74:6c:ee:c6:27:22:39:d6:7e:e8:b9:ae:
                    e3:87:97:5d:78:26:5f:d0:69:e6:13:ab:3b:0a:d6:
                    19:b9:8b:e7:be:61:d6:1d:e8:26:74:33:b5:a0:a4:
                    14:6f:7a:b2:47:50:f9:f4:72:17:97:8d:98:83:17:
                    c3:3e:20:aa:1d:12:da:dc:ea:aa:c5:8c:15:e8:a0:
                    be:f4:8d:eb:6d:5b:f5:96:26:83:ac:23:3a:cb:e7:
                    b9:7b:de:fb:07:94:3c:61:51:84:d2:d5:66:1c:d6:
                    98:c7:da:e8:9c:ec:8a:30:7e:0f:d2:66:c2:70:cf:
                    a5:27:c9:5e:f1:25:f5:79:df:69:f0:39:9f:75:a7:
                    de:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:26:7D:7F:E2:E0:4B:58:19:84:C2:C3:EE:67:10:97:B7:59:3A:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/541b454a-f70e-3454-bcae-4a7dff7be3ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl

            X509v3 Authority Key Identifier:
                keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:34:fb:f1:0f:fb:f5:40:68:2b:99:68:7f:55:b4:d0:9c:be:
         06:80:d3:e4:57:3c:01:02:03:39:22:59:ed:2d:f8:4f:fe:73:
         63:88:a1:bf:5a:ed:9d:bf:50:3a:ee:3d:85:59:fd:63:71:4d:
         f1:ca:e1:10:4c:06:6b:e6:20:3a:da:65:b1:2d:bc:07:fb:cf:
         af:93:83:79:3d:20:e8:c7:d7:18:bf:3e:ff:ab:fb:97:d5:c9:
         a1:0f:2d:a8:63:a8:21:d6:c5:54:4b:24:9d:ea:8c:37:c2:84:
         18:1d:3a:1a:7d:b8:eb:bd:73:ae:6b:88:f4:aa:ad:26:f4:77:
         cb:c1:1a:b1:d2:27:c0:19:ab:71:59:0e:fa:50:a7:cc:8b:e5:
         2a:d6:e9:a3:9a:c4:e9:af:96:04:09:01:26:c0:cd:c3:71:a4:
         36:83:db:97:17:ae:e3:3b:ca:f8:6c:e0:02:ef:11:82:c4:f1:
         46:8a:68:fa:80:a0:a1:e4:5d:e6:cd:03:99:f6:ec:dc:bc:da:
         e9:3c:09:c8:22:99:39:a7:81:1f:7d:7a:c6:b3:0c:01:32:2c:
         93:df:02:1f:dc:1e:ff:05:c0:c1:46:5a:34:60:e7:e2:75:8f:
         87:87:50:1c:25:ef:a6:20:6b:27:6e:7c:43:37:8e:4a:93:b9:
         83:fa:c6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:27:24 2025 by rpki-client