Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a/01b70b6f-84d6-3c4a-9b52-f27ce67df6de.roa
File:                     01b70b6f-84d6-3c4a-9b52-f27ce67df6de.roa (raw, json)
Hash identifier:          Y8haFrWkOmryRffEH5Pw44DWckwqfzmoEOGqLFxHhzE=
Subject key identifier:   9F:7C:5B:8C:DA:52:CA:B1:82:67:03:44:CF:15:88:B2:68:14:EB:4F
Certificate issuer:       /CN=160965a9-ceab-4a04-8e58-1c844268d35a
Certificate serial:       010D0C9F432858496E498A50517F6B22C3264080
Authority key identifier: A8:AD:66:52:62:08:9B:D1:1B:3A:A8:C1:71:D4:1B:5D:B4:86:FA:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a/01b70b6f-84d6-3c4a-9b52-f27ce67df6de.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     8075
IP address blocks:        204.152.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a/160965a9-ceab-4a04-8e58-1c844268d35a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a/160965a9-ceab-4a04-8e58-1c844268d35a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:8a:50:51:7f:6b:22:c3:26:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160965a9-ceab-4a04-8e58-1c844268d35a
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=0660c20f-a9d8-49a2-b330-97e76a6332f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4d:70:a6:b2:2d:f1:e7:b4:37:63:93:d5:c9:
                    02:28:a1:71:7a:ad:e0:18:64:84:c4:67:00:65:10:
                    69:49:40:7d:c8:bb:b9:8a:3d:6b:0b:a7:de:e3:a6:
                    31:67:37:51:5a:9d:a4:a3:55:f0:38:c2:2a:9d:3e:
                    dd:53:13:11:c7:e8:2c:b2:ed:ec:fe:a3:76:98:0d:
                    e5:80:8e:79:bc:c7:bf:a5:72:4e:ad:4a:83:6d:d4:
                    42:c0:b0:31:2d:e4:6e:48:90:e2:c1:48:3e:55:4a:
                    31:ef:1d:65:19:3a:69:a2:10:ce:68:b4:a6:db:70:
                    f0:d4:df:ef:44:d0:7f:c2:1b:75:d9:b0:47:19:db:
                    ea:09:a4:54:27:21:09:de:d7:26:56:91:08:75:05:
                    38:b0:94:bf:f8:04:28:59:28:10:b2:38:e3:45:75:
                    f1:b7:7a:ae:78:c9:e1:65:d8:95:19:03:20:16:84:
                    cf:73:33:a6:ab:83:e6:52:80:ce:1f:e9:87:01:ce:
                    f7:65:64:14:d7:8b:ea:31:30:6f:ec:f6:46:35:15:
                    b9:f1:c3:33:d6:24:18:b6:26:31:bd:38:75:f0:fc:
                    cc:ae:ea:21:00:7e:cd:1e:f1:b9:fd:f6:b9:8c:45:
                    b9:84:50:90:10:8f:0a:9e:db:ca:4f:d6:d1:01:8b:
                    de:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7C:5B:8C:DA:52:CA:B1:82:67:03:44:CF:15:88:B2:68:14:EB:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a/01b70b6f-84d6-3c4a-9b52-f27ce67df6de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a/160965a9-ceab-4a04-8e58-1c844268d35a.crl

            X509v3 Authority Key Identifier:
                keyid:A8:AD:66:52:62:08:9B:D1:1B:3A:A8:C1:71:D4:1B:5D:B4:86:FA:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:cf:f1:8e:b7:cd:55:c7:27:9c:4e:80:2c:ab:3c:8b:bd:5e:
         a2:0b:d9:37:e1:6b:e0:58:7d:22:4c:bf:6e:41:13:f2:b7:6d:
         6c:32:9f:67:61:9f:93:22:c4:4a:ba:76:3e:17:33:19:65:85:
         66:24:9b:af:5f:da:8d:08:b1:e0:78:e4:57:53:74:86:e1:b9:
         a0:f7:67:db:60:28:85:79:01:fd:73:91:28:e0:eb:e7:76:dc:
         dc:33:05:5f:7b:39:97:c6:d5:cb:28:1d:0f:81:35:c7:6a:e3:
         4f:11:42:1b:71:a6:8a:b6:07:2e:c1:1e:06:d1:fd:ea:b6:b7:
         7b:94:63:1f:62:47:ed:6a:9b:de:0f:0e:9d:6e:24:73:71:73:
         b5:01:c6:0c:4d:77:b2:fa:6d:5c:91:c2:eb:28:d3:ba:e0:e6:
         82:14:4f:d4:ab:0a:5b:ed:67:ab:21:a7:8c:7a:87:7a:f9:75:
         2f:06:f2:e5:e0:1c:1c:fb:1a:48:d3:02:6f:78:2d:0f:41:14:
         1e:53:a7:ae:6e:56:f8:61:35:1f:74:02:42:26:9f:ea:47:db:
         18:6c:9f:84:ec:85:6f:84:b4:1e:f0:c9:9b:7f:3f:1c:03:e5:
         48:3a:41:1a:bb:31:2a:ac:d0:08:96:0f:0a:b1:7d:0c:41:67:
         75:41:1e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:24:54 2025 by rpki-client