Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/ed91cb22-1490-3426-9685-bf740558dd1f.roa
File:                     ed91cb22-1490-3426-9685-bf740558dd1f.roa (raw, json)
Hash identifier:          VoSD/pon5ZKasHCA7BdanTKmjBFjqTcYowm1trmFjBI=
Subject key identifier:   C1:64:21:B6:AD:37:EB:47:B3:0E:A3:F3:AF:4F:D8:3F:2E:CF:5B:25
Certificate issuer:       /CN=62ec8079-292d-409a-a736-bddf9af8d979
Certificate serial:       010D0C9F4328584A07D532FEF504A9BDA1CF3F80
Authority key identifier: 4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/ed91cb22-1490-3426-9685-bf740558dd1f.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     46353
IP address blocks:        199.167.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:32:fe:f5:04:a9:bd:a1:cf:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ec8079-292d-409a-a736-bddf9af8d979
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=28ccbf2a-9e1d-419c-bb9d-0450a99cd856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:5a:06:9a:c6:db:5e:59:0c:31:0d:f6:31:
                    e3:97:8f:9c:30:87:79:fb:9b:9a:00:9d:a0:72:2b:
                    1e:94:20:a8:32:0e:d6:20:4d:d2:e9:b1:84:f4:9d:
                    c9:4e:90:60:46:4b:48:0a:ff:aa:53:7f:aa:67:52:
                    23:1c:c4:8a:46:e9:e6:a4:26:a5:01:69:94:06:e9:
                    8c:23:cf:2e:03:1f:94:6e:83:7d:36:c3:c6:a2:92:
                    c4:d7:2a:92:46:b7:4d:3c:9b:fa:e7:2f:78:01:58:
                    13:f8:8d:ed:e0:f9:5a:5a:70:24:f2:76:c9:73:b1:
                    d0:49:66:0b:22:78:00:8b:89:5e:57:89:79:b2:c7:
                    5f:bb:6a:bc:7f:69:4b:72:7a:42:32:10:d4:61:bc:
                    e2:b0:74:53:0f:03:33:87:f3:af:5c:94:92:b4:45:
                    cb:e6:c4:68:7d:85:9e:d3:6a:a9:d9:f6:8b:30:d0:
                    72:5b:8d:6e:ff:ff:95:40:35:ba:7f:74:4f:e7:0e:
                    2b:23:5c:ed:91:3f:a8:06:97:1c:c8:4d:cc:dc:9a:
                    c8:fd:2c:fa:ca:ff:8d:91:04:65:45:05:66:9f:82:
                    e5:46:7c:61:d2:4b:ab:9a:75:48:e7:cc:4c:34:8e:
                    a7:d9:e2:a7:c3:b3:d6:a6:6d:5e:bf:19:0c:0e:c5:
                    d2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:64:21:B6:AD:37:EB:47:B3:0E:A3:F3:AF:4F:D8:3F:2E:CF:5B:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/ed91cb22-1490-3426-9685-bf740558dd1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl

            X509v3 Authority Key Identifier:
                keyid:4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:39:03:bb:f2:4f:73:22:05:5d:00:af:70:d5:51:78:be:3a:
         62:7e:ea:ea:84:36:b2:69:02:8a:de:2c:19:30:52:f4:fc:15:
         5d:77:11:93:0e:4d:2a:62:97:69:1e:72:85:96:1a:25:ef:29:
         fe:f9:9d:28:df:8b:ee:7d:df:9d:52:60:ba:ca:34:b0:78:08:
         a7:0d:fa:2c:79:34:da:3a:42:eb:21:f0:fc:10:22:7f:a3:96:
         c7:88:03:ec:23:07:1b:3c:2d:c6:de:6d:5f:f9:69:02:ad:43:
         bc:5e:53:95:c5:a1:40:fd:ae:40:48:b4:ab:26:2d:6d:33:fe:
         d0:02:7f:1f:45:d2:97:63:b1:eb:f4:d1:74:97:d1:13:45:ce:
         7a:8c:97:6a:97:c5:1a:39:61:f3:63:46:45:c1:a5:af:2b:32:
         d2:7f:c8:5d:74:f5:ed:e2:0c:ff:d3:bb:6f:fa:ea:2c:4a:e4:
         1f:48:37:a3:9a:e8:56:96:2f:a3:25:fb:16:3d:60:57:be:df:
         21:f6:00:40:62:c1:ec:aa:7b:e9:a5:59:b7:07:69:ad:29:21:
         a9:a8:41:f1:4a:1f:f8:30:52:c7:25:3c:20:e0:80:9b:0b:44:
         78:55:b2:df:85:b5:11:0a:ad:5a:cc:4a:84:60:cc:07:28:32:
         59:d5:5e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:05:01 2025 by rpki-client