Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e6a8771f-0008-3305-9aea-b2fbca43621d.roa
File:                     e6a8771f-0008-3305-9aea-b2fbca43621d.roa (raw, json)
Hash identifier:          crJqmFWEACcUWTFSiMTPXXxCMhc1ycjLi1kfU7/0/q4=
Subject key identifier:   1D:BF:2A:82:AA:F4:1A:12:F4:5D:33:76:42:DE:D6:EE:7A:08:BE:BD
Certificate issuer:       /CN=e56bf41b-dd67-437e-9f01-30ef0b12f925
Certificate serial:       010D0C9F43285849A1EF7529791EA32FDBB01B80
Authority key identifier: AE:E7:46:C2:AD:C0:FC:19:54:11:53:A5:5B:AA:7F:75:80:E8:C2:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e6a8771f-0008-3305-9aea-b2fbca43621d.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        160.79.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e56bf41b-dd67-437e-9f01-30ef0b12f925.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e56bf41b-dd67-437e-9f01-30ef0b12f925.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:75:29:79:1e:a3:2f:db:b0:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56bf41b-dd67-437e-9f01-30ef0b12f925
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=c2d49556-54d1-4af7-b102-8bb3729a66da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:08:07:9a:cc:64:4c:36:e8:7e:02:d7:14:e3:
                    12:f3:ad:5a:1f:8f:a4:a3:5b:48:67:90:fe:8e:b7:
                    e0:91:f0:78:67:4d:fb:d9:45:c0:c0:d5:fa:a0:ca:
                    49:95:b5:9e:bb:30:0e:0d:fa:43:b6:6f:8b:84:02:
                    c0:c8:6a:3f:00:97:59:9b:32:4c:b5:43:60:08:ce:
                    ca:09:e4:49:6f:ea:6a:2d:a3:68:d6:47:4b:3e:da:
                    51:93:79:02:17:2f:52:1b:7d:49:1b:f2:75:2b:17:
                    8e:32:3e:46:21:95:71:cf:5b:13:4f:03:4f:30:5e:
                    14:28:30:e0:01:2f:29:43:cd:57:fe:41:f2:4a:63:
                    83:04:0f:20:51:ec:51:06:4f:be:40:99:c6:99:9e:
                    a7:79:75:bd:4e:3c:b6:6f:cc:e3:33:8f:44:60:25:
                    e6:84:fb:8c:19:93:ac:56:81:6a:a8:ef:17:42:9a:
                    0f:94:13:be:64:d5:e8:b8:da:a3:b6:42:1a:8b:a6:
                    93:28:7d:f5:f6:4f:d2:f6:d2:ea:e5:31:c8:3a:6c:
                    9f:28:e5:dd:35:dc:67:04:bc:83:65:96:93:27:8c:
                    a9:25:3c:e6:dc:4b:29:03:6e:9b:4e:85:80:74:b9:
                    b6:43:2e:4f:9b:81:04:56:46:24:c0:91:26:a3:71:
                    9e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BF:2A:82:AA:F4:1A:12:F4:5D:33:76:42:DE:D6:EE:7A:08:BE:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e6a8771f-0008-3305-9aea-b2fbca43621d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e56bf41b-dd67-437e-9f01-30ef0b12f925.crl

            X509v3 Authority Key Identifier:
                keyid:AE:E7:46:C2:AD:C0:FC:19:54:11:53:A5:5B:AA:7F:75:80:E8:C2:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.79.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:4b:21:aa:c2:50:65:21:e4:d7:66:61:fb:4e:af:2c:6b:af:
         1f:15:81:86:3f:e9:47:92:b2:db:08:c8:28:30:ba:7d:d8:d3:
         5c:19:0b:43:41:86:0a:4d:a3:d7:da:ad:8c:c4:6e:a7:19:b4:
         90:b3:c4:32:1d:22:ff:a1:65:ea:3d:6a:e1:48:01:af:47:ec:
         26:61:c1:c8:cb:1a:96:a7:61:38:7c:6e:66:f3:c5:fb:ac:4a:
         a2:c1:66:15:9e:0f:e6:1d:b3:88:83:b7:0f:01:76:1a:1c:f2:
         76:ef:a4:bb:bc:08:3c:f8:99:00:04:62:cb:41:55:02:9a:61:
         de:b0:87:d4:22:a0:33:6e:90:3f:d7:fd:52:f3:49:d7:84:4b:
         16:ea:e6:b2:4f:79:22:39:98:73:44:e3:b7:c4:fd:f3:f8:d5:
         42:08:92:d5:3e:ff:d4:41:ee:4e:37:24:a5:bc:9a:fb:8f:2a:
         5b:89:ac:c8:5d:3f:4b:ec:f3:e2:91:4f:51:68:dd:f3:95:07:
         01:37:f8:dd:4f:4d:0c:e6:55:2e:20:d2:79:dc:0b:45:c7:ac:
         82:64:3d:4b:8a:73:d1:8c:39:78:06:89:ee:51:35:ff:57:f5:
         e4:f3:fb:90:bd:a6:3b:f7:b6:b3:1a:ff:42:54:0a:1f:65:bc:
         99:e5:d1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:05:23 2025 by rpki-client