Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa
File:                     e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa (raw, json)
Hash identifier:          nDen4QJkCZvzRjluiDuFB1BltteSWZjqMHR4dBDBryk=
Subject key identifier:   38:0F:BF:75:66:B0:37:F7:26:3A:CC:2B:25:9C:05:7E:E6:A8:2A:1F
Certificate issuer:       /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial:       010D0C9F43285849D85F9DB3DEDD7E79E0038600
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     16789
IP address blocks:        104.156.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:9d:b3:de:dd:7e:79:e0:03:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=9bd773e1-7402-4b4e-a916-9afa065a3632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:0f:15:ff:68:f5:0d:78:86:8c:b5:7a:d2:
                    9b:3f:7c:0d:a8:f3:0d:69:d1:52:02:f0:70:af:af:
                    e0:bb:ca:55:5f:84:a1:f5:33:6f:12:1d:c1:d6:2a:
                    52:9a:01:20:19:3c:a4:f4:f1:31:ec:87:3d:aa:5e:
                    e5:ed:7d:57:82:a6:39:33:07:af:c6:8d:d3:8c:24:
                    a1:5f:e0:c2:5e:fb:a6:7f:e5:c3:61:06:16:2e:93:
                    2f:0a:f1:30:a9:3f:cd:e9:b0:1a:33:be:d5:93:59:
                    09:3f:ba:78:53:a4:a2:9d:ba:e7:42:44:8b:cc:aa:
                    4d:e3:cc:bb:ac:c6:5d:08:b8:ab:27:94:4f:6d:1a:
                    e4:d7:d6:03:5f:c4:7b:69:5e:0a:2f:2b:6d:99:9e:
                    af:82:e1:8d:35:d6:13:28:db:d3:6a:c1:b0:ca:8d:
                    08:f8:1c:4a:ad:c2:45:7b:ef:c8:bc:5e:95:f2:2b:
                    99:dc:b5:ac:8c:c3:7b:a9:3d:79:89:23:99:34:49:
                    91:d0:8f:c1:9c:05:41:d7:1f:86:d7:3a:8c:47:13:
                    21:ac:5c:a4:92:b0:fb:63:04:ef:f7:fc:59:e9:89:
                    c0:58:74:e3:11:0a:8a:cd:97:26:2e:aa:78:b7:2b:
                    4a:4a:cd:5d:19:fa:ea:fb:9f:b3:03:dd:5b:33:4e:
                    f1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0F:BF:75:66:B0:37:F7:26:3A:CC:2B:25:9C:05:7E:E6:A8:2A:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl

            X509v3 Authority Key Identifier:
                keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:7e:45:16:62:08:85:4a:8c:55:0a:58:b7:f9:c6:58:e9:16:
         10:2f:6d:f0:35:9f:a5:61:5f:9b:8d:3f:d0:11:9b:8e:2c:8b:
         41:95:78:dc:f4:26:44:c9:a9:40:a4:5c:8e:64:ca:62:98:81:
         45:77:9f:0f:c2:31:d8:26:e4:d2:e1:e2:c8:f4:71:8f:57:a0:
         28:07:89:26:8b:78:37:6e:5a:db:d0:11:53:2d:df:f8:44:5f:
         fb:fa:79:3e:c4:8d:c2:85:ae:a3:b3:a7:5d:74:22:11:61:ba:
         98:5b:f3:95:19:bb:c0:31:a7:66:e0:48:b4:39:db:08:8a:02:
         d7:aa:ea:55:34:d9:23:b6:da:52:89:76:f3:34:6e:20:14:a4:
         bb:43:6f:d6:11:38:46:c1:de:7e:1b:69:33:38:41:a2:61:f7:
         90:d8:c2:e1:70:07:14:0c:95:23:64:58:48:45:19:3a:d7:00:
         53:e9:41:c5:04:0e:a5:e5:09:d7:66:37:6d:3c:1e:1a:44:81:
         7c:59:90:13:b6:db:9f:47:09:61:b3:b3:8d:63:55:44:e9:93:
         b8:0b:e6:a6:07:38:02:92:b7:7e:51:25:51:5a:76:f9:ad:f1:
         29:b2:05:5e:3f:4d:58:2b:8e:af:ac:43:03:33:ca:8f:ff:70:
         7e:58:1f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:02:43 2025 by rpki-client