Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/8a1ac6fb-19ef-3295-ab25-55d37d8c7f74.roa
File:                     8a1ac6fb-19ef-3295-ab25-55d37d8c7f74.roa (raw, json)
Hash identifier:          jaFRH6W4407TuljE7pUDpF2JGpjBBvnp7izd9zxjxHs=
Subject key identifier:   BB:67:44:BE:58:07:0B:A1:C8:F9:EF:46:0D:2E:1F:31:15:55:89:AF
Certificate issuer:       /CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
Certificate serial:       010D0C9F4328584A225ABF3DD1A03476DA641900
Authority key identifier: 1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/8a1ac6fb-19ef-3295-ab25-55d37d8c7f74.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     17161
IP address blocks:        167.245.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:bf:3d:d1:a0:34:76:da:64:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=54589ebb-b117-4068-aea5-397ec8fbdf27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:12:b9:8e:83:4a:91:92:6d:32:55:ae:4c:
                    32:cf:58:84:f0:80:35:23:d3:d8:48:e5:d5:5d:d3:
                    70:ce:b0:8a:be:e5:ac:ec:da:39:58:b7:42:3c:ba:
                    94:88:b7:bd:91:7a:88:48:18:23:83:2c:a9:2e:c8:
                    72:2e:8d:2c:2c:32:0d:18:2b:b2:f8:40:cb:c8:fa:
                    8d:3b:a3:65:45:2b:69:d7:b0:4b:3a:ab:a3:1f:f5:
                    0e:f4:0a:ae:af:d8:22:ee:27:ab:5b:e5:b8:e2:85:
                    9a:01:0f:17:6e:a9:c3:25:00:a7:56:c4:a3:29:db:
                    01:72:5f:0a:7e:14:39:a3:88:e9:eb:97:81:c6:dc:
                    87:3c:ef:00:c8:ee:bd:e0:73:e1:cb:de:3f:3d:de:
                    93:ea:40:a8:c7:f9:06:a7:3e:e9:39:76:b3:f1:4d:
                    3d:63:c5:5e:1f:e8:28:ae:a0:0b:f3:7d:cc:85:4e:
                    01:4e:b3:94:40:c9:46:ae:0d:2d:fa:45:07:a7:13:
                    e2:32:e4:1e:02:7f:f7:5b:92:7d:39:9d:a2:e7:51:
                    6b:cf:c6:83:cf:74:3c:89:80:f0:51:fd:7f:00:55:
                    63:0e:03:a5:22:17:7e:4d:a0:c9:9a:d4:84:a8:83:
                    ef:12:b5:d1:a0:cf:fd:61:0d:0a:a4:44:9c:77:81:
                    3c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:67:44:BE:58:07:0B:A1:C8:F9:EF:46:0D:2E:1F:31:15:55:89:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/8a1ac6fb-19ef-3295-ab25-55d37d8c7f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl

            X509v3 Authority Key Identifier:
                keyid:1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.245.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:5a:1d:9e:85:05:b8:34:18:5e:0e:10:e5:4f:aa:10:96:c9:
         f7:5d:aa:2f:3f:7e:eb:75:ff:8e:4a:b5:8c:a2:0a:b8:77:c6:
         87:59:11:a1:59:ee:cd:9e:23:54:13:9f:b0:76:8f:b9:91:c0:
         82:4e:68:3b:56:cd:6a:77:eb:ab:16:6b:b6:8a:e4:95:5a:29:
         29:79:24:16:cb:cd:71:d6:c4:f3:7f:dd:8e:67:53:e8:97:50:
         80:f3:50:46:00:32:c2:6c:0a:fc:8e:5a:98:70:c0:34:0a:f2:
         65:78:d0:13:78:fc:72:44:2f:8d:09:64:35:b9:c0:e5:81:a0:
         45:bb:d4:dc:ae:bf:98:cc:46:fb:a7:92:9f:d8:58:9d:db:de:
         e4:0b:67:dc:35:cd:e0:88:74:ca:f7:ce:85:17:f1:0a:5d:f0:
         e8:15:65:a3:1f:57:28:2d:e8:df:08:e6:c8:15:2e:1e:35:68:
         1d:e0:56:a2:12:ba:9d:c9:35:1d:d2:4c:c5:4d:d5:5d:36:02:
         ec:df:2e:c0:61:d7:26:6b:8b:28:61:c7:f1:b0:40:21:9c:eb:
         59:a6:79:cb:ac:80:44:32:63:32:a2:c0:2a:ae:d5:f7:5f:3e:
         ff:bc:8a:ea:87:31:fb:62:c6:0b:13:36:d7:85:1b:61:b3:af:
         22:82:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:15 2025 by rpki-client