Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/09a930bb-55eb-3fda-8b57-c185efb5138d.roa
File:                     09a930bb-55eb-3fda-8b57-c185efb5138d.roa (raw, json)
Hash identifier:          fuoXDDbDihtt2IRGQjl3CBJ3ULsg+XCJapAnHi7NsgY=
Subject key identifier:   B7:05:66:64:F8:08:9F:BE:1F:69:39:54:0B:E6:32:62:D0:DB:4E:47
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F43285849C20A1D75BFE9549A057E4D00
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/09a930bb-55eb-3fda-8b57-c185efb5138d.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     22418
IP address blocks:        192.157.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:1d:75:bf:e9:54:9a:05:7e:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=727e19d5-11ca-4a63-969c-c7078ec00adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e7:11:24:c1:aa:9e:2f:32:0c:dd:3b:af:7a:
                    7c:07:d7:fd:46:23:34:81:20:b4:6e:cc:24:64:ac:
                    47:7b:8f:a1:4e:c2:af:24:fa:a4:55:4c:53:7a:97:
                    cf:b1:7c:c2:8c:58:81:01:45:b7:47:30:6c:20:f3:
                    1a:2c:20:c5:20:a4:83:9b:23:e5:47:18:16:74:0e:
                    a7:29:bf:c4:91:e2:b8:1e:5c:8f:bd:b2:b7:4f:cb:
                    f6:51:75:5a:3b:39:cd:91:96:70:00:42:9a:f6:3c:
                    c1:76:6d:94:fe:93:5d:17:3a:43:e5:c6:5d:58:c5:
                    04:d9:65:bc:5f:fb:bb:4d:d0:67:59:a7:1e:03:05:
                    d4:ba:00:ae:8c:4d:da:8d:70:91:71:e4:fb:51:b3:
                    40:7c:f4:75:5a:bf:9b:f8:eb:77:7b:31:69:51:b0:
                    90:79:7d:ab:f9:7c:34:a7:dd:d8:2f:90:7d:bf:38:
                    e3:7f:65:fa:8d:15:76:0f:c3:6b:e2:71:6b:44:83:
                    e8:b8:43:c3:fa:c9:1e:14:c3:58:72:44:08:b5:97:
                    3b:9b:68:e8:99:47:fe:9e:9f:c1:d9:4c:c0:67:a7:
                    b5:67:ce:96:3f:f4:fc:a6:8c:c5:5e:52:7a:6f:8e:
                    e6:61:f2:a6:ee:14:4f:5d:e1:a7:d8:b1:b2:ec:7e:
                    47:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:05:66:64:F8:08:9F:BE:1F:69:39:54:0B:E6:32:62:D0:DB:4E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/09a930bb-55eb-3fda-8b57-c185efb5138d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:cf:b1:70:b4:23:f4:b8:b7:5b:7c:6a:7a:9a:25:86:df:6f:
         f5:2e:aa:12:4f:29:36:6c:94:c9:41:36:ba:49:a5:e2:cf:8c:
         ad:5e:06:87:82:77:cd:6b:d4:02:48:fe:c9:07:b3:ee:26:11:
         a6:79:e6:6f:09:00:2e:49:69:4b:59:54:47:d4:e4:95:54:06:
         9c:90:d3:01:b3:3a:44:ca:40:99:7b:50:6e:56:ab:84:3c:45:
         09:9d:3c:02:89:b8:2a:ae:f7:9f:ca:2f:34:f4:e3:d1:71:9e:
         a4:a7:65:07:a4:50:ff:aa:f8:3f:43:dd:14:e4:e7:25:00:9c:
         2d:4a:fc:ba:3a:1f:25:1d:75:89:31:e4:7f:f9:fa:ff:2f:a9:
         d8:0b:9b:a2:42:74:2c:8b:42:28:34:d8:da:f7:ad:94:8e:23:
         d0:d1:26:04:66:c3:c8:36:95:a1:aa:6f:73:8f:f1:2b:15:3a:
         80:32:41:e6:a6:eb:59:b9:a6:ed:63:60:3c:b7:82:6b:10:33:
         c8:2d:11:0b:d2:df:94:ee:dd:17:80:e2:14:e1:64:cb:a8:fa:
         ef:40:dd:06:a0:b2:7e:4e:1b:fd:b1:43:eb:b8:14:33:ef:03:
         00:cf:48:32:ae:82:73:eb:40:f6:ba:95:56:19:e8:67:e3:46:
         45:e4:11:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:29:34 2025 by rpki-client