Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/3448726e-72e4-3593-8522-e2d3b13765df.roa
File:                     3448726e-72e4-3593-8522-e2d3b13765df.roa (raw, json)
Hash identifier:          TxbhjSNm8ag3v9N/Z2k1CH0tdELumsAfe++0qENN7lc=
Subject key identifier:   CA:7E:CE:0E:87:59:49:6C:FF:7C:50:6E:11:6D:F5:B2:7D:C3:75:90
Certificate issuer:       /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
Certificate serial:       010D0C9F43285849F17FB06795EC743A0B5E6AE8
Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/3448726e-72e4-3593-8522-e2d3b13765df.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     20454
IP address blocks:        69.160.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b0:67:95:ec:74:3a:0b:5e:6a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=4ccd139e-3a65-4ab6-9897-6b16c5d6671d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f3:65:88:bb:1b:18:d4:90:f8:f2:02:21:14:
                    1e:56:15:ae:9f:9a:da:35:d5:e1:e6:85:78:8f:80:
                    b7:64:7a:42:35:9c:fa:a4:2e:89:4c:e2:15:c2:0d:
                    02:47:ee:f4:f6:d8:1d:a9:2b:e9:c0:dc:bb:b4:da:
                    ba:d0:c0:67:3c:fa:e3:e7:0b:98:32:e6:cd:b7:cd:
                    ac:47:f3:95:b2:f2:87:bb:8d:e5:b4:12:56:80:f5:
                    0b:2a:d0:4f:43:81:ad:9f:cf:f8:11:32:3e:64:42:
                    a9:e7:8b:9d:e4:1b:af:e5:32:7f:2a:72:72:79:38:
                    7a:47:e2:83:06:59:7c:6f:6a:02:2c:6e:28:22:df:
                    f0:d4:c8:11:3e:9f:25:94:17:62:b3:b6:a9:d5:30:
                    a0:39:43:22:c9:3e:42:82:98:67:87:fb:d5:30:6c:
                    6d:b0:a8:be:34:62:d0:af:b6:88:1b:b4:48:7c:70:
                    3b:26:a6:ec:6d:94:ab:2c:7a:ee:d6:16:1a:06:32:
                    42:22:b3:7b:80:01:e2:70:d8:65:71:fe:3e:0b:32:
                    38:bc:21:54:c1:d3:eb:ff:bd:3f:2a:c3:29:8e:97:
                    3c:7e:76:02:42:97:d2:cf:87:15:8d:8e:f1:46:46:
                    f9:e8:03:d9:d3:f7:9e:17:1d:30:6f:73:ab:8d:fb:
                    87:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7E:CE:0E:87:59:49:6C:FF:7C:50:6E:11:6D:F5:B2:7D:C3:75:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/3448726e-72e4-3593-8522-e2d3b13765df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl

            X509v3 Authority Key Identifier:
                keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.160.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:9b:77:14:65:82:46:d8:df:a3:7c:5f:3e:52:e0:ca:6f:07:
         d7:1b:89:06:01:e1:ed:b0:dc:51:68:c8:9d:f9:8a:15:f5:44:
         53:c0:16:6c:8f:c1:5f:5f:70:f6:ff:5a:90:4b:a1:7f:43:f7:
         a4:c3:14:4d:57:17:72:aa:1b:a5:96:e4:d1:de:0a:43:04:fd:
         9c:af:8d:ec:25:b2:8b:d0:11:93:84:92:4a:c0:77:fa:16:5a:
         23:72:ab:2a:17:35:26:7f:ab:e8:28:af:01:1f:4e:62:bb:35:
         68:c3:b2:0a:a6:6b:d2:b2:78:0e:f5:98:19:78:54:ba:39:39:
         d9:cd:5a:d6:ee:03:87:43:32:50:00:82:c3:87:1b:ae:59:4d:
         e2:cb:cc:d8:05:f8:57:f8:c0:96:93:41:63:62:bd:41:b5:e5:
         fa:5e:8b:4c:20:36:b3:7d:a1:5e:03:4a:15:4e:de:f7:a9:2d:
         a9:76:ab:28:92:59:17:64:8d:86:e7:e9:35:21:4d:62:90:e6:
         f8:3a:0c:02:f3:b0:fb:d9:dd:37:ec:e0:d6:58:41:8b:96:4e:
         f9:72:5e:a4:c9:19:3b:20:84:31:3d:00:64:60:09:c1:ac:8c:
         9b:3d:71:8b:29:9c:35:ed:7a:2c:b8:11:5e:26:b8:04:a8:25:
         f1:98:86:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:37:26 2025 by rpki-client