Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/6e6384aa-a680-3c22-be99-4809074b9254.roa
File:                     6e6384aa-a680-3c22-be99-4809074b9254.roa (raw, json)
Hash identifier:          dA00HWle7aqcr5KZiEunxipWYnd9odjJSAIiDW/Mlzg=
Subject key identifier:   D7:8E:AA:AE:50:18:37:8F:48:BC:1E:E6:34:66:DC:8A:4D:A2:7B:54
Certificate issuer:       /CN=e5333a6e-37dc-4213-b928-ae0341454759
Certificate serial:       010D0C9F43285849CE9A4E9596048098AFF18818
Authority key identifier: 39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/6e6384aa-a680-3c22-be99-4809074b9254.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     46650
IP address blocks:        162.245.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:4e:95:96:04:80:98:af:f1:88:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5333a6e-37dc-4213-b928-ae0341454759
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=78e6e0de-497a-4e84-b046-2f4d6cbe73dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:66:08:50:c7:0e:d2:71:d2:80:ac:a0:a1:e1:
                    a8:1c:8c:64:8b:4c:55:4b:60:bb:c7:8b:17:2e:0a:
                    11:7d:0b:c6:8d:5a:66:03:26:d0:86:1c:8b:b2:6a:
                    c9:46:64:9a:cc:6d:0e:bb:c0:57:fa:ac:26:6e:ab:
                    59:72:3a:1f:c9:32:09:0a:a2:60:bc:0e:76:aa:44:
                    97:2b:ff:5e:67:ca:ab:c9:9d:19:6a:ea:03:f4:98:
                    8f:ad:5d:c6:14:46:a2:92:e1:db:6b:d7:00:21:c9:
                    8e:e4:fb:e1:52:36:83:38:bf:6b:c8:f6:f2:d9:c1:
                    e7:53:b0:d5:78:cd:8f:51:58:35:e2:39:7d:57:7a:
                    0d:91:c0:34:3f:f7:05:51:21:96:53:3e:98:81:07:
                    2d:9b:7a:ce:7c:da:d4:b0:e4:8c:ef:2b:e9:91:64:
                    f3:ce:22:60:f1:3b:c0:4b:6e:99:c6:09:86:23:08:
                    55:2b:de:08:07:05:9b:ed:4b:18:f2:c2:dd:3f:6f:
                    eb:ca:a9:17:ce:3e:88:78:ee:c6:8c:02:a0:e0:97:
                    73:6e:65:03:93:28:d0:28:9b:34:96:86:c9:7e:b3:
                    c3:d6:a5:bf:b6:5b:dc:9b:33:59:23:91:c4:ec:ab:
                    02:90:2e:ea:9f:21:61:94:58:63:c5:61:65:51:2b:
                    bd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8E:AA:AE:50:18:37:8F:48:BC:1E:E6:34:66:DC:8A:4D:A2:7B:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/6e6384aa-a680-3c22-be99-4809074b9254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl

            X509v3 Authority Key Identifier:
                keyid:39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.245.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:27:9a:00:41:f7:bd:7a:be:f3:6b:32:eb:ad:a0:5f:30:87:
         d4:27:28:69:18:27:ed:74:5f:9f:9c:ae:3f:50:9a:35:cd:f9:
         ba:14:80:81:84:83:c3:ba:25:f9:86:b3:d4:44:d5:14:cf:23:
         8a:f1:a5:05:d1:28:7c:a1:b1:a7:6b:0a:f8:8d:37:87:9d:22:
         a0:8e:9a:bc:ec:4f:3c:70:73:1d:ed:16:a3:b1:6f:38:1d:16:
         2b:a4:fd:e4:67:24:1b:38:78:24:d5:a5:95:fc:9e:e9:70:46:
         ce:ea:9b:b7:fa:f7:ae:25:a2:69:08:ce:96:8a:4e:22:ce:6b:
         66:a9:f3:bb:5f:60:12:6d:ae:94:c6:58:4e:55:6b:9e:41:bf:
         c3:9b:a3:ac:8f:40:8a:f0:b0:19:d0:95:8a:cf:18:92:3e:8e:
         cc:10:1c:0e:b2:57:cd:88:15:6b:a9:f9:ff:90:af:51:68:42:
         6f:76:c0:23:0c:78:db:92:da:fa:51:ee:d4:cc:6d:31:31:b6:
         3e:0f:b3:19:a5:11:e6:1e:5a:c3:32:19:b1:65:2c:74:0c:29:
         06:1c:cb:ab:7d:95:f1:b0:14:6b:7f:8c:b7:7d:e0:d7:d0:2b:
         d9:33:25:a8:4e:2e:8a:69:f7:38:92:a9:b2:7d:94:dc:c8:8b:
         e1:60:db:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:42:55 2025 by rpki-client