Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/397dc0ec-3da7-3245-b34a-fd0c48fd3756.roa
File:                     397dc0ec-3da7-3245-b34a-fd0c48fd3756.roa (raw, json)
Hash identifier:          +cSOeihALx48PMZFjPLAEz6rknRdqtjwPmvw6TJFd2w=
Subject key identifier:   0E:AB:0C:FA:4D:53:74:D5:8A:78:9D:0A:85:03:6C:BE:05:D1:3B:B2
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285849DC8FC5D4C1D3A759A58AE4C0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/397dc0ec-3da7-3245-b34a-fd0c48fd3756.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     53508
IP address blocks:        209.127.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c5:d4:c1:d3:a7:59:a5:8a:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=5d38957e-6764-4a80-823b-e4c93a3ce627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:77:91:0c:02:1e:65:f3:dc:ad:34:63:af:
                    77:63:dd:6a:69:84:3f:6f:49:a2:8a:8d:3f:8d:ed:
                    41:21:e7:0c:b4:f6:96:1a:76:fe:74:e2:33:8d:bb:
                    aa:e2:24:29:dd:17:b6:2a:96:71:5c:eb:8a:ee:17:
                    97:15:e9:96:ae:dd:71:4e:09:64:e0:00:14:f7:91:
                    81:7f:f4:70:91:0e:a8:03:72:f8:0c:75:01:97:64:
                    e7:fa:35:9f:9f:2d:ff:43:dc:75:8b:8c:72:14:b7:
                    1c:de:5a:01:0b:cf:5d:0e:c1:8b:29:29:0d:61:4f:
                    51:87:f8:07:ef:fa:c0:51:89:61:30:41:50:58:7a:
                    f7:1a:e6:99:f7:81:6e:00:5b:53:c2:b6:77:0f:72:
                    e3:f4:ef:fb:c4:79:5a:df:ae:9f:e7:f1:c0:66:06:
                    64:2c:be:5d:e9:34:08:6b:d8:06:9f:71:3a:41:02:
                    15:5a:cb:07:0c:db:d4:0a:3b:4b:80:02:b6:26:5a:
                    c1:91:2d:11:76:aa:dd:e6:98:92:b3:a7:cd:03:1d:
                    ee:70:25:db:95:a7:68:e0:3c:c7:ab:3e:9d:b7:52:
                    af:d0:6e:4a:c4:43:46:c6:64:a5:40:18:92:8d:ff:
                    60:aa:bf:71:25:b3:80:ed:46:70:e4:34:3c:d9:e7:
                    cb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AB:0C:FA:4D:53:74:D5:8A:78:9D:0A:85:03:6C:BE:05:D1:3B:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/397dc0ec-3da7-3245-b34a-fd0c48fd3756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:cd:41:6b:90:42:10:e7:5a:e9:65:27:04:7f:a1:fc:dd:b9:
         57:d6:0e:06:87:4b:7d:6a:a3:09:64:f8:0a:74:a9:8a:3e:0c:
         79:9d:9b:64:7e:b9:4e:3f:d2:f5:c3:a7:20:10:d0:e7:9c:3a:
         a5:34:b9:8e:cf:7c:09:9a:42:12:06:87:bd:07:50:cd:b2:08:
         14:d2:eb:03:2a:2a:d0:99:96:c3:b9:ff:18:cc:3f:c7:41:5e:
         8c:54:0b:6e:8a:50:50:66:77:5d:09:c8:fd:4b:e1:f8:52:15:
         a0:63:43:d8:b0:35:59:79:ff:e2:db:46:38:c7:e6:84:fa:c2:
         80:3e:da:83:3f:35:c0:28:f4:f1:7c:7f:07:c4:1d:4f:e0:40:
         7a:71:4b:8d:e5:db:82:3d:2e:72:66:1d:be:c0:9a:31:8e:8f:
         ef:5f:1a:e8:69:6d:6a:eb:ab:f4:b1:ab:5a:82:d6:13:75:b5:
         a4:5f:de:cf:4e:14:f4:9b:d2:14:10:2a:dd:f2:7e:52:61:66:
         de:85:63:e8:bc:05:c7:84:76:08:1e:41:c5:bb:b5:c8:df:18:
         8d:b0:cd:55:23:ed:c5:f6:1b:11:aa:0a:45:08:3a:85:2a:98:
         97:b3:26:c5:35:07:42:1b:b1:58:72:90:3c:90:e5:0a:73:ba:
         4c:6e:61:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:55:47 2025 by rpki-client