Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22b4377d-f762-33b6-a5f1-c7c3f92831e5.roa
File:                     22b4377d-f762-33b6-a5f1-c7c3f92831e5.roa (raw, json)
Hash identifier:          IfQuDDLQO/azasL9Cz1oyCs1lNla4judwGO9GeJYaX4=
Subject key identifier:   FD:3A:83:09:A5:EB:FD:90:85:81:1F:DC:F2:BA:91:86:E1:E1:E0:C8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B3ABB672F184A51730A40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22b4377d-f762-33b6-a5f1-c7c3f92831e5.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     701
IP address blocks:        162.84.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:3a:bb:67:2f:18:4a:51:73:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=0d48cc49-ef51-4594-9c8c-98b0a1237c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f7:d0:23:37:06:0f:c3:31:25:8b:6e:19:33:
                    ae:a7:18:4e:0b:d4:c5:78:c0:8d:1c:e8:f1:f7:8b:
                    02:5e:1c:30:5b:9a:c8:06:a8:4b:f5:34:2c:bc:aa:
                    a4:5f:66:75:e0:26:a4:89:7c:f3:18:c7:5d:e3:1b:
                    2c:fc:08:d8:d1:23:25:01:86:e6:6d:73:fd:cb:74:
                    31:e4:8e:fe:02:92:0f:4a:12:4a:14:15:08:27:49:
                    6b:35:82:e8:1d:42:d2:f4:a4:e7:a1:33:7e:05:e5:
                    64:f9:66:14:a7:d7:1e:b1:03:fc:fd:d2:fa:11:29:
                    a6:3c:69:91:65:3d:6b:b7:6f:e7:a9:4d:b3:a8:51:
                    da:b0:ca:6d:e1:df:a6:87:1b:d8:da:a6:f3:fa:d7:
                    6a:48:b8:a7:59:86:0e:b5:88:ee:82:93:fb:97:dd:
                    22:9c:bb:ff:71:68:c3:a3:30:cc:35:59:cf:6a:31:
                    f5:d9:08:65:12:00:7e:41:e3:a1:7c:05:fd:a8:e1:
                    77:a4:73:47:1b:8e:75:c4:7e:e6:34:ae:9c:32:2e:
                    dc:0a:aa:2d:66:61:13:67:73:a0:11:cb:ff:89:ff:
                    f6:96:58:44:b7:93:9b:47:a7:f3:45:9b:d6:8e:81:
                    0b:47:d4:18:63:94:03:7e:24:e7:3c:5f:df:25:01:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3A:83:09:A5:EB:FD:90:85:81:1F:DC:F2:BA:91:86:E1:E1:E0:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22b4377d-f762-33b6-a5f1-c7c3f92831e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.84.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:46:90:b0:35:d0:3e:47:10:13:b7:cf:b5:35:b9:1f:ae:b2:
         95:07:da:7a:ad:93:be:9b:e5:5c:8e:34:12:55:12:de:5e:ca:
         d6:2a:d3:ac:a9:d7:43:09:87:3b:bd:5b:5c:d0:e7:e3:b9:65:
         a4:31:dc:09:8f:fd:b9:b5:e2:f0:58:b4:a7:de:72:fd:1d:fb:
         f2:fe:c7:6d:62:e3:1f:24:c9:eb:72:00:3a:4f:0a:a3:0e:e5:
         c4:90:d5:7e:19:ae:39:7b:97:a8:65:3f:93:79:75:3d:38:29:
         b1:13:3e:3b:e7:f9:6a:bb:15:7e:c4:1b:ef:bb:1f:f6:57:ec:
         1c:83:33:69:ce:fc:1b:21:cc:ae:eb:cf:ee:12:ac:11:a6:1f:
         b3:1e:cf:9b:77:a9:aa:06:dd:44:ab:f5:59:ba:13:e4:0d:b3:
         4c:eb:28:e1:da:7b:92:a5:3d:4b:1c:6c:42:03:4e:4c:e3:9f:
         12:ab:35:9f:cf:30:13:ae:9a:62:23:e7:54:fb:7e:e4:b2:94:
         8a:4b:60:7e:6d:b7:23:0c:62:a8:58:3c:13:50:4b:66:0d:3a:
         42:bd:e2:7e:fa:3b:65:89:5c:b3:06:9b:b0:b6:a7:8b:e5:c7:
         e3:ac:9c:f2:d7:fe:4f:b4:26:2c:53:f0:e2:23:dc:38:bc:ea:
         3c:13:72:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:47:45 2025 by rpki-client