Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c1dcd54c-383d-3372-b220-849655424f31.roa
File:                     c1dcd54c-383d-3372-b220-849655424f31.roa (raw, json)
Hash identifier:          dbAaODNh5LIZE2ktCDNFmq17HDU63+2ZNev2N/Bdbrg=
Subject key identifier:   C6:97:A6:99:12:ED:B0:B3:8B:95:BD:B4:CC:B6:4A:EB:F2:54:72:7D
Certificate issuer:       /CN=fd83f526-dd8b-4cf3-b500-0525ad5fac1a
Certificate serial:       010D0C9F43285849CBCF8DA11B332CFBAD36AA80
Authority key identifier: EA:D5:99:AA:D7:81:62:8C:7F:6D:44:F6:D9:D7:B6:CD:15:5A:AE:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c1dcd54c-383d-3372-b220-849655424f31.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     33291
IP address blocks:        162.210.243.0/24 maxlen: 24
                          162.244.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:8d:a1:1b:33:2c:fb:ad:36:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd83f526-dd8b-4cf3-b500-0525ad5fac1a
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=71c65e0e-b03f-408e-9e50-5271685d5665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:c2:15:d9:67:7a:e9:28:c2:5e:95:32:e3:
                    50:a2:db:4e:3c:ae:0b:44:c8:df:de:e8:7b:b3:3b:
                    ed:2d:a7:71:6a:0f:dd:3f:6f:48:99:ec:7e:38:16:
                    bd:19:ef:60:cc:f8:c1:12:33:f0:50:b7:5a:15:c4:
                    66:c0:85:1e:9c:9d:a5:90:bc:5e:b4:8d:d7:dd:9a:
                    75:22:d8:c3:79:b2:b3:a8:ef:a8:c3:01:df:08:57:
                    08:6a:20:f5:f7:b3:51:d8:48:96:c8:fa:55:e9:6f:
                    a0:11:19:31:46:68:a9:cf:8d:db:d6:3a:6f:83:2b:
                    6a:23:2a:35:41:96:80:3d:3b:3d:0f:c5:27:6d:a5:
                    d2:ed:0c:70:aa:da:1b:05:8a:81:1c:76:e7:30:3c:
                    06:3a:c0:73:2a:41:04:d6:59:e3:d8:55:f5:22:94:
                    43:50:96:ec:1a:8c:fb:9f:d7:33:25:60:0c:6a:66:
                    0a:82:72:9f:45:0b:b4:88:f2:d3:14:a2:e4:3d:54:
                    95:8e:8d:83:c8:3b:a7:f8:01:80:f8:ea:56:1e:29:
                    24:6a:0c:ce:79:af:0b:17:69:78:35:03:dd:a1:7d:
                    e1:51:81:a2:4e:08:46:87:be:e5:a5:a2:cf:7d:96:
                    c3:b5:c2:b6:fc:51:d5:3e:bb:9b:f1:e3:cd:8e:9c:
                    65:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:97:A6:99:12:ED:B0:B3:8B:95:BD:B4:CC:B6:4A:EB:F2:54:72:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c1dcd54c-383d-3372-b220-849655424f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.crl

            X509v3 Authority Key Identifier:
                keyid:EA:D5:99:AA:D7:81:62:8C:7F:6D:44:F6:D9:D7:B6:CD:15:5A:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.243.0/24
                  162.244.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:db:f9:d3:41:d0:1b:a8:d6:50:a5:4b:d7:2a:32:be:8e:85:
         0b:e9:af:81:be:a5:24:63:3c:4b:9e:2b:1c:fc:d1:53:52:26:
         03:47:55:c0:39:e3:d6:34:7e:2c:bd:93:33:79:13:41:8d:60:
         b5:ea:e9:8d:cc:66:03:23:53:eb:eb:be:31:20:12:c7:e3:36:
         e2:63:20:a6:81:7a:c3:a2:cc:16:5f:32:85:c2:12:a7:1a:85:
         be:d5:7f:82:da:06:8d:a9:70:06:dc:fd:36:af:3c:5d:de:96:
         90:a3:d1:5c:38:fe:38:2c:4f:fc:6c:66:74:06:ac:e1:af:27:
         1b:be:42:aa:3f:b5:3d:35:cd:9e:0b:4c:56:c1:1c:d3:01:60:
         2e:09:00:1a:03:17:c9:7a:d0:a4:30:47:f0:4c:df:dd:bd:18:
         d7:a5:0f:ec:e8:59:c2:11:fc:d5:cc:7d:09:85:d9:4e:58:58:
         37:35:50:b8:a1:2f:72:33:f0:33:57:e4:5a:d8:2d:81:12:2e:
         63:60:26:65:e8:cc:e0:cd:d9:e3:38:c8:ae:99:bf:5a:11:35:
         9d:2e:0b:2a:9a:71:9f:de:0f:db:a4:08:91:a8:c8:5c:d6:67:
         fe:5f:4b:e2:57:b6:1c:ae:00:89:b0:0c:74:2e:60:27:95:48:
         13:a9:20:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:50:09 2025 by rpki-client