Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b162a178-6588-3407-9b0b-ec6e1d70ce8b.roa
File:                     b162a178-6588-3407-9b0b-ec6e1d70ce8b.roa (raw, json)
Hash identifier:          dSJqG0YkVJlVrA+MoW1Au6UInn2hlN9H4lsRSWUXBTA=
Subject key identifier:   25:19:AB:16:22:48:A9:35:8E:79:B3:26:7F:02:A2:EE:95:25:93:B0
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2F18E82F548AD67017A80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b162a178-6588-3407-9b0b-ec6e1d70ce8b.roa
Signing time:             Mon 07 Apr 2025 16:33:14 +0000
ROA not before:           Mon 07 Apr 2025 16:33:14 +0000
ROA not after:            Sun 06 Jul 2025 16:33:14 +0000
asID:                     81
IP address blocks:        192.101.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:f1:8e:82:f5:48:ad:67:01:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:14 2025 GMT
            Not After : Jul  6 16:33:14 2025 GMT
        Subject: CN=74f53947-6515-4a48-bff6-5c7630be0402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:cd:c5:4a:d3:25:35:cd:03:73:6f:1b:9d:
                    df:0e:4e:be:31:40:35:68:24:78:c4:77:91:26:7b:
                    c0:06:4d:9b:93:03:03:4d:98:32:fc:0a:e5:0b:79:
                    c4:84:c9:b3:c7:f5:fe:9e:bb:9f:e3:13:51:47:7b:
                    1f:9e:87:ec:fd:42:8b:8c:4c:ca:0f:19:4e:ad:df:
                    bb:7e:d4:65:f6:ac:82:d6:ec:b5:a1:e1:33:25:97:
                    07:4e:00:5b:e8:e8:f3:a8:e6:d1:4a:e7:1e:32:2d:
                    fc:dc:3a:e3:05:7a:41:74:cd:d0:28:6c:92:63:e2:
                    38:41:ff:a4:d6:ac:81:09:8f:02:ef:72:73:8f:57:
                    f8:90:8f:bc:83:7a:cd:73:f6:05:08:68:03:11:7d:
                    1a:7f:a6:c1:32:71:36:9c:2c:6b:19:3a:4f:f2:72:
                    95:d0:a7:7d:70:44:0b:47:c8:bc:eb:71:1b:7e:d9:
                    7d:08:df:1c:a7:85:75:22:c1:e6:93:57:f1:c5:a1:
                    e8:bb:f5:08:81:0b:e9:ea:c1:9e:cc:cd:bd:4d:b4:
                    a2:be:d5:ca:0f:41:c5:40:dc:d3:02:7e:b7:dc:fc:
                    08:04:5a:fa:42:6b:a4:51:41:ed:0d:13:f1:6f:be:
                    df:61:53:30:56:a2:9f:1c:c1:b5:2c:67:f3:36:0a:
                    d0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:19:AB:16:22:48:A9:35:8E:79:B3:26:7F:02:A2:EE:95:25:93:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b162a178-6588-3407-9b0b-ec6e1d70ce8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:f7:b2:d2:97:43:84:cf:4f:9d:0e:06:2b:5d:72:85:3a:e0:
         4e:0d:04:e3:73:2d:b0:11:60:a9:59:c2:5f:ff:5d:7f:a6:ed:
         50:d1:16:bf:bb:89:e1:f7:21:14:42:89:59:7b:41:6f:96:fe:
         aa:28:08:89:4d:ba:f2:41:8e:11:ac:7c:e0:34:39:f1:0b:9a:
         c2:cb:77:4d:a8:6d:51:b3:10:67:f4:4c:6c:06:86:f0:90:57:
         7e:38:e2:32:dd:f9:40:41:4f:a6:ba:a5:8a:cd:93:b2:76:b4:
         93:1f:98:2c:a4:8f:61:ac:44:17:88:99:95:16:c7:4f:a9:dc:
         c4:77:55:34:59:28:dc:fa:3b:fd:21:39:1b:8b:0a:1d:09:b4:
         5a:b1:ae:c6:0d:8e:bc:77:57:33:a2:4d:a7:71:46:27:fb:83:
         e2:d3:bf:f9:5a:d7:10:4e:a6:d7:3f:e9:54:7d:cd:0d:36:f4:
         09:81:50:af:24:1e:77:c3:ac:a5:c8:d6:52:77:d6:c7:79:63:
         7e:3e:91:87:4c:fc:af:23:fa:c0:ae:08:ec:b0:36:20:4b:37:
         e4:51:d5:92:55:7c:a6:ad:41:4c:30:82:42:cf:56:0e:eb:6d:
         7a:48:80:3a:99:12:fd:42:41:42:14:50:aa:a8:cc:dc:03:13:
         65:33:97:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:07:03 2025 by rpki-client