Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/ccc94c91-4e3d-325d-90a8-849d7cd95512.roa
File:                     ccc94c91-4e3d-325d-90a8-849d7cd95512.roa (raw, json)
Hash identifier:          IOqGO9ks4HtZIejNJFk/sjxUb7oJvpnFcPLP6IvB/Sw=
Subject key identifier:   36:0E:65:E5:10:26:88:6B:BC:A7:BB:69:3A:57:91:08:31:04:B2:9A
Certificate issuer:       /CN=e56bf41b-dd67-437e-9f01-30ef0b12f925
Certificate serial:       010D0C9F43285849A1EF7548559CB3944F5450DC
Authority key identifier: AE:E7:46:C2:AD:C0:FC:19:54:11:53:A5:5B:AA:7F:75:80:E8:C2:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/ccc94c91-4e3d-325d-90a8-849d7cd95512.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        160.79.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e56bf41b-dd67-437e-9f01-30ef0b12f925.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e56bf41b-dd67-437e-9f01-30ef0b12f925.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:75:48:55:9c:b3:94:4f:54:50:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56bf41b-dd67-437e-9f01-30ef0b12f925
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=6357f7ea-9b97-48f7-89cd-2fb913b69cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1d:1c:da:61:a4:12:57:78:72:db:c2:8c:1a:
                    c2:08:7d:28:64:6d:13:77:15:69:29:2a:d8:1f:d0:
                    b3:3e:96:c3:75:af:7e:91:4d:37:7e:3f:3d:f4:e8:
                    6c:46:5c:64:a4:61:0e:43:26:c4:9e:67:6b:87:ae:
                    47:c9:c0:8b:87:83:86:ec:74:07:64:2f:b1:b0:ac:
                    cd:81:87:f2:d1:cc:7c:8d:45:eb:12:54:00:4f:83:
                    30:45:b4:de:ca:78:9c:f8:ab:17:44:c3:60:40:95:
                    84:35:ec:10:b4:e6:e9:e2:30:c1:fa:9e:0f:34:f8:
                    0d:53:a0:11:c7:e6:2b:27:1d:7f:ba:47:d3:6c:26:
                    5e:79:e5:42:da:ff:c4:09:59:39:b8:9f:11:cb:b4:
                    b5:05:91:59:92:32:48:cf:e5:44:84:6c:94:df:ac:
                    72:d2:b5:5e:a1:63:29:e4:b2:af:57:ce:86:2d:cd:
                    1e:14:53:5f:3d:9a:15:c1:36:55:f9:62:80:41:ee:
                    1f:54:30:4c:09:a1:1f:ef:31:35:d5:39:32:1a:12:
                    ef:1a:0d:ab:1c:a2:08:1a:a5:4b:4c:aa:0d:fd:8c:
                    85:75:52:cf:e4:a8:fe:25:6b:d1:ae:71:3d:33:86:
                    aa:66:2b:a3:2a:ab:de:3d:f2:d2:ba:82:7f:69:85:
                    8e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0E:65:E5:10:26:88:6B:BC:A7:BB:69:3A:57:91:08:31:04:B2:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/ccc94c91-4e3d-325d-90a8-849d7cd95512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e56bf41b-dd67-437e-9f01-30ef0b12f925.crl

            X509v3 Authority Key Identifier:
                keyid:AE:E7:46:C2:AD:C0:FC:19:54:11:53:A5:5B:AA:7F:75:80:E8:C2:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.79.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:76:39:af:71:ae:d1:5a:af:e4:96:a1:cd:e5:be:85:f6:ee:
         01:b5:7b:82:87:1a:22:7e:d2:11:c4:5c:0e:e5:a7:c6:ea:3d:
         46:dd:ab:bc:d8:ef:3c:39:c7:8b:0f:ba:b4:75:53:5c:cd:d9:
         9b:9a:b8:d8:02:28:4e:bc:44:ae:87:c1:fd:29:d6:69:5d:4c:
         9e:b9:4b:5e:db:08:66:96:2e:26:3c:57:7e:bd:11:fe:c7:ca:
         8c:9a:49:17:8a:c0:b6:c7:a5:ce:c8:db:4a:08:0c:38:03:9d:
         67:74:bb:1d:aa:d6:61:ef:2e:90:59:48:93:1d:df:8d:4c:26:
         6c:75:a6:f5:eb:50:59:a6:63:d4:19:9d:04:0c:4c:60:72:d2:
         e1:8f:de:1d:cb:5b:07:f1:d2:59:f3:d0:1f:4e:0c:b1:5c:21:
         7c:d0:72:47:6f:d9:42:1f:3c:11:b9:c5:9f:9d:e9:0d:76:b7:
         ef:ae:f8:0d:30:5c:ec:52:94:86:c8:7c:51:5e:ab:7f:dd:13:
         43:2e:c8:c3:ea:5f:70:8e:65:42:9a:75:a9:18:7f:ea:47:ab:
         43:74:6a:f0:c3:45:53:5c:0c:e9:5d:3a:79:b3:fe:33:15:38:
         5a:1b:bf:7a:90:32:54:e5:1b:b2:3f:e2:cf:e4:97:39:2b:9d:
         ed:de:3b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:18:15 2025 by rpki-client