Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/a317804f-60e4-3002-925a-258b38ed37e9.roa
File:                     a317804f-60e4-3002-925a-258b38ed37e9.roa (raw, json)
Hash identifier:          mwaDSCREYkwhYgiXYZ4BwUTCX5K3II0nteTEPZTpkdY=
Subject key identifier:   65:3D:D6:BB:72:86:88:BC:46:06:8F:BC:FC:F8:6F:0F:E7:C1:59:CA
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F43285849AD1A08D6E9957AB33F304880
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/a317804f-60e4-3002-925a-258b38ed37e9.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        157.248.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:08:d6:e9:95:7a:b3:3f:30:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=62f3b79a-bb6e-4274-ae54-a2582d567a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c4:23:f0:86:5a:76:3e:5b:d0:8e:c2:bb:c5:
                    55:6d:68:63:62:57:b6:d9:9a:1a:23:2a:98:66:b7:
                    64:13:8d:2b:7e:b0:fb:03:8b:ef:0d:3f:ad:a2:6d:
                    e1:27:a2:9e:18:b5:9c:7a:49:fe:33:32:d7:64:71:
                    f4:ed:1d:2a:07:81:03:c0:47:7c:aa:47:fe:30:a6:
                    9d:e1:2e:27:0f:b5:1d:88:09:4f:31:9e:54:87:be:
                    02:64:13:56:da:83:73:a9:94:18:fd:96:9b:cc:b2:
                    87:9c:48:6f:d0:67:69:79:fb:de:bd:4e:73:e5:1f:
                    00:6f:0e:aa:3a:9e:0f:88:58:91:db:0a:9d:ec:78:
                    0b:30:d7:09:cb:08:03:26:58:e2:cd:44:2c:fa:cb:
                    73:b5:b8:b5:14:a0:f7:61:b0:32:e6:f6:a2:da:c1:
                    0f:8d:aa:06:23:d3:61:a1:e9:8d:97:da:44:0b:34:
                    7d:6b:a8:28:25:57:2f:56:72:ad:98:41:08:94:33:
                    68:5b:ce:fb:45:0a:8b:32:b5:1d:e0:eb:1b:cf:16:
                    2f:6a:54:b2:6c:fa:1e:f0:b0:cf:65:12:3f:d1:58:
                    d0:f2:ad:5b:12:67:c6:7f:36:ce:4c:1e:4e:c6:0c:
                    c6:42:d7:7f:6c:a4:48:19:a8:54:cf:32:37:2e:6e:
                    15:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3D:D6:BB:72:86:88:BC:46:06:8F:BC:FC:F8:6F:0F:E7:C1:59:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/a317804f-60e4-3002-925a-258b38ed37e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:24:4b:0e:89:a9:80:38:71:8a:73:9b:16:da:c5:27:52:05:
         c8:97:b1:73:f8:9c:f1:80:ce:95:8b:e1:8e:fa:c4:13:0c:5b:
         18:88:84:d7:42:61:0a:70:50:c9:00:ae:05:c8:88:b9:16:a5:
         2b:96:4c:72:8b:57:7d:24:af:28:51:b6:a6:cc:35:56:c5:83:
         4f:d6:10:67:1f:ff:66:15:25:2d:08:96:f9:5a:15:b0:15:37:
         c0:ec:22:65:96:1e:1c:2f:0e:2f:f4:80:2a:e5:f0:c5:95:aa:
         5f:f0:0a:ee:c8:f6:5e:e6:76:15:6a:fe:27:df:cd:1f:f9:7c:
         4f:fb:dd:09:ca:8d:cb:d9:0e:88:3d:dd:38:f4:1d:1a:fc:9b:
         77:10:b1:01:6d:78:8a:68:4f:24:d1:2f:da:f9:4c:bb:a3:55:
         27:30:b3:a0:d3:0d:f3:ed:c4:92:4b:e2:27:6c:d5:d5:74:94:
         ab:30:b8:78:69:cb:a5:93:58:3e:cc:0f:8c:e8:fd:29:f3:57:
         b8:ed:38:cd:92:8f:4d:18:1c:b8:e8:49:fc:3e:83:15:e0:74:
         40:98:98:d7:eb:b5:31:8f:0d:62:21:4a:d3:86:c0:92:96:70:
         df:d8:0c:1f:10:5f:32:a4:ea:0f:61:e6:49:26:8e:52:ae:82:
         c6:40:34:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:53:01 2025 by rpki-client