Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa
File:                     7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa (raw, json)
Hash identifier:          rAGkXjdEX7d/hRgYVo9BEqxUVqg2HN3kTAmbB045dhw=
Subject key identifier:   0C:15:7F:C5:28:FB:A2:AF:36:0A:92:BB:7B:8C:71:49:E9:56:7A:C9
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F43285849AD1A00A8C09EEF2B01E78304
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     18934
IP address blocks:        162.208.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:00:a8:c0:9e:ef:2b:01:e7:83:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=82ed61d2-382b-4ca3-bacf-de07be99012b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:17:2e:89:3b:e1:3b:4b:88:c1:12:64:eb:72:
                    43:09:38:31:a6:42:e9:71:00:b1:da:b5:83:13:46:
                    e0:8e:32:3c:60:ef:b5:0c:fa:f5:60:44:98:c1:88:
                    b2:8e:e0:8f:9f:31:d6:87:67:03:29:0d:34:5e:05:
                    b4:4d:cb:56:e9:2c:cc:60:23:b1:b6:0d:09:51:cf:
                    4d:70:de:8b:d4:fa:ff:83:22:0c:43:68:7e:64:87:
                    2a:ac:6a:a2:f9:ae:37:44:89:f6:23:e7:47:70:94:
                    63:00:2c:a4:80:af:5f:4a:60:e7:07:2c:16:f6:33:
                    27:46:fb:67:b2:bb:75:92:9d:ad:22:da:ef:b2:5f:
                    a2:60:13:4b:8c:5e:62:f9:76:16:df:10:53:9f:d3:
                    95:52:22:4c:a7:b4:63:c1:49:a2:9c:a0:f1:d5:60:
                    78:ac:de:9b:9f:68:65:bc:70:88:9d:9c:fd:5e:2d:
                    1f:6f:be:81:78:a7:56:2f:0a:b9:e1:5d:73:9d:fb:
                    fd:90:14:84:1f:fc:75:ae:58:2d:35:8c:cc:08:26:
                    12:d0:bc:e1:7b:02:a7:83:9a:95:5e:58:b4:fe:29:
                    00:ee:43:d6:3c:59:80:8c:53:d2:c7:17:3e:90:ed:
                    e8:aa:69:d4:d5:be:78:66:e7:2f:75:ce:a2:74:65:
                    6d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:15:7F:C5:28:FB:A2:AF:36:0A:92:BB:7B:8C:71:49:E9:56:7A:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:4f:9e:3c:07:b8:35:e2:f9:8d:27:d7:1d:0e:c4:13:71:81:
         d9:96:4f:9d:1b:9c:7c:c3:00:ce:14:10:54:37:6e:cf:04:59:
         d2:3e:82:7d:c6:e9:35:4c:b2:9c:fd:d1:57:07:ca:a3:63:4e:
         74:84:8e:dd:08:b1:ee:23:71:fb:86:d0:b4:97:9e:29:1f:2c:
         6c:42:5a:06:56:04:ad:c1:2e:28:c0:69:be:eb:67:4f:84:d8:
         05:6a:10:9a:3b:15:e6:af:69:98:71:53:90:de:25:ff:a6:0d:
         7b:74:f0:f1:c5:c5:0d:32:22:52:d0:eb:46:f0:dc:cc:85:7f:
         46:59:c4:1a:9e:41:47:52:8a:3d:d6:e4:38:6d:bc:7c:29:47:
         5a:a6:3c:90:dc:9b:58:d4:51:05:3e:91:dc:9c:1e:3a:a8:b3:
         f4:ab:46:bf:1b:c5:b6:cc:56:92:61:68:c6:dc:4f:7d:b3:19:
         c0:4b:b4:37:ab:b3:8c:40:45:68:82:1f:be:ce:80:9c:60:a1:
         39:e8:1e:74:7c:94:fc:53:54:a3:99:97:03:d9:89:4f:d1:73:
         90:8e:c3:e9:c4:51:55:27:03:86:4c:d0:33:1c:c5:be:5f:6b:
         59:a9:a6:48:95:01:f6:80:ee:5f:b7:30:72:a2:14:aa:84:71:
         4c:a2:e3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:09:49 2025 by rpki-client