Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/28d5ed5a-717b-35dc-b627-203d741bc9dc.roa
File:                     28d5ed5a-717b-35dc-b627-203d741bc9dc.roa (raw, json)
Hash identifier:          GHEHmEZUxY7I+ln/lM/Lr2nBhUq9eUrMUOsedCv4E7c=
Subject key identifier:   AC:CB:4F:AC:C1:1A:A9:64:64:32:CA:F5:46:96:DF:AD:AF:D6:22:BA
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328584A331AF36BFB0D20D4CE6B0100
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/28d5ed5a-717b-35dc-b627-203d741bc9dc.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     5662
IP address blocks:        157.166.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f3:6b:fb:0d:20:d4:ce:6b:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=2fbcad95-bf43-4121-8959-20d596700e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bc:f5:78:0c:06:5e:07:05:84:7b:ec:19:60:
                    1b:9c:81:85:47:46:db:cf:41:69:2e:48:49:e5:f4:
                    50:fd:10:be:44:76:4d:d0:65:39:36:0b:38:08:56:
                    aa:98:c5:da:a3:22:f7:b3:82:f0:46:48:ee:50:03:
                    32:ca:a8:c6:23:30:96:df:d3:32:dd:a3:7b:6a:5b:
                    75:5a:4a:4b:4b:d1:8b:63:ca:94:69:2b:6a:f8:2f:
                    a0:d6:71:a1:10:2e:34:f8:22:68:50:8f:59:0e:c4:
                    5c:8c:54:d2:35:c0:f5:68:03:70:df:43:46:7e:63:
                    af:1e:fc:8d:a0:a6:a0:d5:bd:06:c4:c2:32:66:28:
                    0a:b9:ed:bd:6f:fa:aa:48:f6:b5:22:70:56:00:76:
                    b7:d1:a0:ce:28:54:8c:a5:13:91:b5:f7:58:4b:9a:
                    01:1b:23:4d:73:a8:e8:18:ce:37:a3:d6:6d:0b:07:
                    51:a3:15:fc:8f:e8:20:73:9f:80:56:44:24:7a:0c:
                    8c:02:96:7d:99:18:61:28:41:b0:b7:ac:33:27:2c:
                    6b:eb:e3:a7:f8:39:12:f4:fe:82:f7:ee:92:52:70:
                    46:df:28:81:69:d0:09:e1:82:72:0a:10:35:6d:0f:
                    a5:57:01:7e:3e:e1:e6:fc:f4:3b:ba:24:ef:80:35:
                    12:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CB:4F:AC:C1:1A:A9:64:64:32:CA:F5:46:96:DF:AD:AF:D6:22:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/28d5ed5a-717b-35dc-b627-203d741bc9dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:37:5a:ec:1c:bd:1c:92:d7:ea:3c:e4:d4:09:65:db:9a:10:
         d6:e2:bc:4d:66:17:28:40:b5:23:04:59:1e:a2:e8:cf:37:92:
         15:ae:04:fb:43:96:ac:39:7c:38:0d:7b:4d:b7:9a:f1:a1:0f:
         32:de:22:aa:a2:5e:13:b9:50:87:e9:6b:2e:b8:9d:9b:70:f3:
         8a:f1:f5:fd:12:2a:ae:92:b5:ed:eb:a5:8d:d1:f8:38:3f:43:
         6b:76:8c:0a:dd:2f:34:51:58:57:c1:88:d1:cc:83:d5:43:cc:
         ca:d8:1f:c3:df:5e:ad:69:dc:91:c3:10:52:8a:e0:e0:72:da:
         65:90:e2:46:ad:f3:8d:31:aa:f7:b4:f7:43:47:b5:aa:5b:e7:
         c1:5f:d0:af:3a:3d:d3:1b:36:27:87:60:c9:1d:62:f9:d7:07:
         08:bc:7d:19:a5:dc:a2:79:e8:c3:8c:14:ea:e1:a0:08:c4:24:
         19:45:5a:b7:50:22:e9:35:2e:e7:ab:78:04:7b:8d:f8:97:b2:
         9f:5d:25:1c:31:70:b3:2f:7a:9e:f9:61:ff:41:10:49:b5:20:
         ff:5e:3a:47:5e:ca:9b:f9:17:6a:10:99:e4:fb:a0:2d:cc:03:
         46:80:2a:e2:7a:74:d9:96:32:a5:92:e0:02:95:55:d4:cc:8a:
         2f:3f:71:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:10:46 2025 by rpki-client