Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/f0fef11b-fd18-3aa2-8573-f66dbff15626.roa
File:                     f0fef11b-fd18-3aa2-8573-f66dbff15626.roa (raw, json)
Hash identifier:          GEoqB65YY0/oInG2pJYRbtcYY3KkzmlRfqYdmoqO1kE=
Subject key identifier:   B3:9A:D0:5C:82:9B:25:2E:78:1F:68:C8:BE:B8:D0:7B:77:B9:A8:7F
Certificate issuer:       /CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
Certificate serial:       010D0C9F43285849B14A0C1C00B4F81753ABD280
Authority key identifier: 9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/f0fef11b-fd18-3aa2-8573-f66dbff15626.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     18615
IP address blocks:        147.160.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:0c:1c:00:b4:f8:17:53:ab:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=4d18dd9b-a301-48ac-b4ef-8b60c91790d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:9b:36:b8:34:9d:c8:f4:1e:51:49:d6:af:
                    e7:ea:06:93:7f:d7:c6:ee:c3:49:e8:7c:af:ae:59:
                    59:a6:3c:f0:ac:91:2a:8a:b7:c9:16:a8:01:05:9e:
                    3f:d9:85:59:93:49:08:2c:bc:ae:22:0a:a1:2f:59:
                    01:95:fb:ed:ef:63:86:44:cc:c0:02:b2:61:67:b0:
                    54:71:60:49:59:15:56:e1:36:be:2f:09:66:51:85:
                    15:81:0a:a8:85:d2:c8:7f:18:ab:e1:3f:58:af:76:
                    ef:4f:a2:91:58:e6:a1:82:29:e4:00:e6:bb:b8:e4:
                    49:6d:72:a6:05:16:59:ab:53:ae:98:5a:5e:00:30:
                    57:d8:30:38:d6:e3:fa:6c:1a:eb:3e:75:79:f2:1b:
                    f0:f9:3b:d4:64:13:a4:71:a9:61:48:9b:e7:6f:ac:
                    34:b7:56:79:3d:11:ed:31:89:45:a8:15:2e:10:79:
                    51:2a:ce:2d:82:33:b0:53:e0:c5:31:e6:70:49:09:
                    e5:6f:e0:6c:50:1c:f1:72:f7:15:06:84:99:3e:10:
                    40:67:0f:a8:43:af:b6:ff:fd:50:18:e0:d2:24:42:
                    c0:ef:33:f7:b2:73:83:b2:17:f2:08:ea:25:c4:f6:
                    3a:22:a6:28:1f:68:55:16:ef:7e:7e:74:78:63:75:
                    8b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9A:D0:5C:82:9B:25:2E:78:1F:68:C8:BE:B8:D0:7B:77:B9:A8:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/f0fef11b-fd18-3aa2-8573-f66dbff15626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl

            X509v3 Authority Key Identifier:
                keyid:9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:67:fe:07:ea:7e:9f:8e:35:1d:f1:4e:95:05:a6:1a:d2:1d:
         e7:1c:85:bb:3d:0b:0d:d6:17:bf:a4:fe:df:5c:4a:78:00:b7:
         24:72:d3:50:e4:37:31:aa:90:9e:b1:f2:48:46:49:c4:12:23:
         04:dd:d4:c9:53:9a:29:a2:b3:1f:47:18:c9:94:43:7d:21:df:
         ff:99:b1:08:1b:4c:84:3f:7f:81:17:a8:d2:09:85:05:36:7c:
         55:28:09:d3:9b:08:9e:2d:fd:d8:9d:97:f9:f3:7e:89:62:e5:
         56:f0:2a:35:01:68:40:c6:cf:d3:47:94:91:c7:0d:b3:70:0b:
         e5:00:83:b7:46:d3:f6:d9:56:4c:32:7c:bd:3f:21:44:9b:91:
         bc:03:dc:1a:26:7d:ec:1b:bb:0e:bc:7b:06:b7:f8:f0:0c:24:
         ea:ef:af:9a:0b:01:1a:03:31:44:76:c1:7d:67:8d:b4:dd:7f:
         90:94:5b:af:72:2f:52:bf:22:af:6a:28:f3:3c:44:87:90:ee:
         2a:10:6b:2e:09:1c:84:58:e7:37:ea:48:51:9c:01:ba:ac:6d:
         53:30:2e:5f:6c:45:d0:37:a6:a1:a5:1d:c5:a5:95:75:93:5f:
         f5:26:f6:f0:94:16:90:12:7f:59:ae:df:6e:c9:53:59:b9:7b:
         0b:59:87:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:48:02 2025 by rpki-client