Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/257892b4-8dd2-3d1c-b6d9-d838d7aed918.roa
File:                     257892b4-8dd2-3d1c-b6d9-d838d7aed918.roa (raw, json)
Hash identifier:          FviRoEGUkXc7lZkVDx5Fa0+qutLZaxG1W+9OaNJ0Flo=
Subject key identifier:   4F:27:44:B3:A1:35:22:11:83:00:F7:28:87:8E:E5:FC:85:CC:F3:FB
Certificate issuer:       /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial:       010D0C9F4328584988CF189F3614EFB24FF04000
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/257892b4-8dd2-3d1c-b6d9-d838d7aed918.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     22612
IP address blocks:        162.0.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:18:9f:36:14:ef:b2:4f:f0:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=ce3ac2b5-1e63-456f-8f2d-3b1e0f377280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:33:9d:b2:c8:7e:51:f0:92:bf:75:79:c8:90:
                    bb:e7:66:76:4a:47:dc:92:61:58:81:e3:ef:8d:79:
                    75:3b:31:5e:66:85:b4:8e:b1:c3:0e:4b:a3:f5:e8:
                    eb:2d:74:f6:96:fe:14:c2:89:1c:b7:8b:c8:b2:ab:
                    53:62:a2:ae:aa:36:21:09:64:9a:94:2e:c1:8a:f0:
                    0a:6f:ca:68:4f:4d:95:4f:08:dd:b5:8d:bb:2f:88:
                    3b:64:00:1f:a0:f5:a8:f9:d0:ac:13:2f:dc:b4:94:
                    71:2e:06:d7:d7:aa:a4:6c:b1:fe:5d:42:84:c5:4f:
                    ba:96:eb:7e:43:5b:56:4e:64:b9:d4:44:1c:ca:b8:
                    2a:2e:64:8f:7b:8b:a4:94:66:43:a7:c9:00:c4:a7:
                    5f:9f:05:7b:17:b6:39:1e:86:e0:be:b6:2a:88:48:
                    94:8d:c0:24:a9:89:73:61:f3:4a:b6:84:80:f7:c9:
                    fd:18:4b:72:73:59:3b:ce:18:f8:9e:70:3e:3b:4d:
                    68:b9:e5:7b:e6:ab:1f:c9:64:d2:b8:d4:1e:89:55:
                    22:c2:b3:3b:cc:8a:bc:77:94:57:a3:e2:3a:22:dc:
                    3a:f9:7e:92:0a:1d:08:8e:40:f8:08:8b:f4:a2:ac:
                    50:d6:8c:bd:8a:c5:4d:30:a9:75:d4:f1:c9:46:e3:
                    3a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:27:44:B3:A1:35:22:11:83:00:F7:28:87:8E:E5:FC:85:CC:F3:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/257892b4-8dd2-3d1c-b6d9-d838d7aed918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl

            X509v3 Authority Key Identifier:
                keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.0.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:0b:d2:59:c2:54:39:dc:f0:0a:b4:98:3c:09:44:c5:e7:35:
         e8:6d:38:31:a1:af:2b:be:14:58:7d:a4:9e:e0:9d:93:13:0d:
         e1:f9:ca:ff:dc:41:e7:a0:e1:5e:e2:62:57:4e:01:5b:57:28:
         45:f8:2d:a3:66:1d:40:46:4e:3e:2c:45:8d:c5:5f:fc:d4:fb:
         ea:81:c9:70:13:20:4a:92:ec:e9:8c:29:83:66:b5:c1:c0:5d:
         5d:05:a2:4a:8d:f5:50:62:c2:b5:64:25:c5:2d:39:48:5e:ae:
         0a:e4:4d:a5:04:7b:7b:ad:28:f8:50:62:cc:2f:ef:13:76:9d:
         32:69:e8:0f:a8:5d:bc:04:cd:b1:bd:c5:67:3e:6f:7d:93:8d:
         20:81:e8:d3:03:d4:25:40:e3:1f:9e:98:14:41:0f:f1:da:8e:
         34:1e:1a:eb:07:c9:ba:22:25:98:2c:ca:ad:57:3f:cd:e0:84:
         19:04:28:d6:5e:3a:7e:4c:b6:9b:7e:f8:6c:4b:77:61:ce:8b:
         ff:d6:b7:8e:6c:f1:a7:72:ac:df:3b:e2:e1:93:ce:dd:31:32:
         71:2d:79:bc:57:2b:69:fa:c3:2f:3c:ae:c4:0b:96:23:be:61:
         d0:d7:8a:73:96:ed:90:33:f3:c0:dd:24:6f:5a:2f:58:85:20:
         29:63:5e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:31:26 2025 by rpki-client