Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/8e2f8cc9-5142-37fb-9672-203558a41e8e.roa
File:                     8e2f8cc9-5142-37fb-9672-203558a41e8e.roa (raw, json)
Hash identifier:          d9YhdfF6c8UV1PwN4BJ2p1gHW3Op4padYIzlIl+7YyQ=
Subject key identifier:   CE:9E:1B:26:CD:5F:CE:00:A4:59:1E:DF:57:3F:BF:DA:C4:4C:97:96
Certificate issuer:       /CN=e56bf41b-dd67-437e-9f01-30ef0b12f925
Certificate serial:       010D0C9F43285849A1EF7538AA32A457B939FE00
Authority key identifier: AE:E7:46:C2:AD:C0:FC:19:54:11:53:A5:5B:AA:7F:75:80:E8:C2:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/8e2f8cc9-5142-37fb-9672-203558a41e8e.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        160.79.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e56bf41b-dd67-437e-9f01-30ef0b12f925.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e56bf41b-dd67-437e-9f01-30ef0b12f925.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:75:38:aa:32:a4:57:b9:39:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56bf41b-dd67-437e-9f01-30ef0b12f925
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=e87cf749-de13-40df-af6c-ea1059cdede6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:61:d5:3c:e0:1a:cf:3e:b1:98:50:04:d3:c7:
                    ca:6c:15:8c:d9:d8:33:71:f0:9d:16:e2:05:f2:6f:
                    1b:72:e3:43:c9:16:b8:bf:cc:1a:a7:68:af:fb:07:
                    1e:7b:fc:1d:cf:3f:65:9c:4c:f9:15:3b:dd:64:a7:
                    c2:f0:f7:82:c3:5c:6b:47:a8:66:f4:2c:ec:e0:84:
                    dd:ad:8a:8e:01:c6:1c:74:80:5b:9f:4c:a1:e0:3d:
                    bc:3d:e0:4a:52:c3:97:1d:46:c5:57:ff:9b:41:e1:
                    3b:a5:e8:68:bd:dc:ff:08:6a:68:6b:88:f0:23:23:
                    14:64:ab:90:a3:65:4a:a2:eb:34:67:cc:c1:2a:53:
                    76:38:5f:77:41:39:16:47:4f:f8:30:c7:fd:43:c5:
                    fa:e6:32:ff:af:34:56:7e:37:26:51:cd:f5:57:69:
                    a7:d4:e4:5f:31:fc:7d:46:67:3b:b2:ed:d1:e0:c4:
                    d7:11:d9:7f:48:fe:28:c7:b0:d6:38:ab:27:d1:27:
                    fe:49:24:16:22:e7:6d:b6:9e:c4:f7:77:e1:d0:6a:
                    30:71:d9:52:c9:e8:e8:99:41:cc:6b:15:c1:33:63:
                    2e:58:36:e4:d7:60:ac:85:35:75:26:4a:da:c7:98:
                    7a:1b:35:5a:92:dd:04:44:c2:8a:9a:ec:b2:a9:87:
                    9b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9E:1B:26:CD:5F:CE:00:A4:59:1E:DF:57:3F:BF:DA:C4:4C:97:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/8e2f8cc9-5142-37fb-9672-203558a41e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e56bf41b-dd67-437e-9f01-30ef0b12f925.crl

            X509v3 Authority Key Identifier:
                keyid:AE:E7:46:C2:AD:C0:FC:19:54:11:53:A5:5B:AA:7F:75:80:E8:C2:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.79.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:33:70:22:72:fa:7c:7c:86:9e:c2:ae:ad:5b:e8:66:95:e3:
         51:24:a4:3f:6c:72:c2:a2:dc:b0:92:bf:58:4f:c4:1a:b6:74:
         c7:b2:3c:43:16:52:b4:95:a3:b3:cc:01:d8:57:71:1f:a1:04:
         ff:9f:de:3e:04:f3:a1:c3:ea:d3:ac:24:ac:2d:da:27:57:74:
         3e:0b:4e:a7:59:28:17:9b:e2:aa:96:22:bf:a6:85:cf:67:b8:
         24:bb:23:f8:d0:c4:76:96:f5:7b:11:f9:00:af:65:35:d9:bd:
         3a:86:e7:f6:67:f8:d1:cc:c5:6f:99:19:77:b6:a9:6e:87:11:
         3e:ef:05:5f:7c:01:df:16:36:10:cb:79:a6:65:6f:c9:f1:ff:
         0d:9c:02:5b:f8:d8:d6:0f:cb:ff:36:ef:fd:ae:55:ac:ab:07:
         d0:55:4a:72:4c:4e:32:a6:60:0b:a8:3d:46:2e:b3:4c:77:1d:
         a2:db:cf:63:14:b7:c2:38:48:af:59:90:66:8e:17:42:87:65:
         ea:50:04:97:f3:2b:be:a7:ad:82:b4:59:23:65:9a:52:59:ff:
         8e:9c:b9:67:30:f8:84:bb:a5:d5:2d:29:85:01:bb:8e:1b:1a:
         74:38:43:65:7f:4f:48:15:72:15:11:e5:0a:bd:65:60:f2:c3:
         55:8c:76:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:17:49 2025 by rpki-client