Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/b128983c-c95a-3a6c-a73c-ef27e90b6450.roa
File:                     b128983c-c95a-3a6c-a73c-ef27e90b6450.roa (raw, json)
Hash identifier:          mYmRv9ISrwEit6ncE8PiYc7E2jlRKp/u41tyjI1oWYw=
Subject key identifier:   37:D4:98:68:AF:77:25:B8:B0:81:8F:30:AD:C0:A6:40:93:BA:0D:7A
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F432858498A346408A527A42850597C80
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/b128983c-c95a-3a6c-a73c-ef27e90b6450.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     19901
IP address blocks:        208.161.160.0/19 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:64:08:a5:27:a4:28:50:59:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=ae22f9d7-9c25-44d1-9f30-9b7f583667f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e1:21:a2:f1:0c:be:fc:30:c6:3a:47:94:07:
                    55:7c:f5:78:d1:25:f0:23:07:b9:09:f6:08:92:30:
                    41:ca:c3:45:f0:53:de:9b:01:f7:08:cf:7f:cd:fc:
                    aa:77:4a:f1:ef:6f:f6:d8:62:50:07:67:78:c7:84:
                    cd:bf:fb:7a:1f:89:4f:ff:e3:c9:48:2a:25:dc:81:
                    ae:99:25:22:fc:2a:3b:9e:44:ff:cc:d4:19:34:ce:
                    1f:a9:87:83:9c:3d:64:97:2f:4e:3c:4e:e8:5f:eb:
                    94:d7:0b:3a:b0:3e:87:31:ea:55:71:17:d6:58:fc:
                    86:b5:0f:84:e1:31:44:80:74:2e:6e:ef:c3:6b:24:
                    73:31:e5:f3:7e:c8:da:de:b5:28:98:e9:8b:db:82:
                    46:a6:4a:56:13:68:62:09:ee:4d:e7:ae:95:6f:74:
                    c3:c1:ae:2c:0b:86:80:16:37:ea:98:89:73:a9:0a:
                    e3:7f:68:3f:f0:50:99:e1:29:92:37:4e:0e:7a:21:
                    38:b5:54:cb:54:7d:79:41:6e:1a:2f:b0:ae:87:70:
                    e9:83:3b:28:fd:49:27:cb:8f:43:ca:65:9e:ba:34:
                    b2:8b:37:e3:13:fd:59:a9:a3:79:60:1a:bf:eb:12:
                    ad:b2:d6:52:4d:a5:d4:aa:01:3a:12:18:20:7e:e1:
                    bc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D4:98:68:AF:77:25:B8:B0:81:8F:30:AD:C0:A6:40:93:BA:0D:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/b128983c-c95a-3a6c-a73c-ef27e90b6450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.161.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:4e:39:50:ad:5b:bc:6d:7f:34:d6:fa:c7:55:40:14:6a:
         59:4b:2d:3e:22:89:04:31:ab:a1:11:cb:a3:1c:8f:05:90:09:
         68:74:eb:c9:b1:ca:38:c5:88:95:9f:24:5d:b3:bc:80:06:c9:
         6a:04:68:1f:ae:6e:2d:43:64:ea:5a:4f:43:28:0e:ba:42:92:
         e5:6b:86:9e:31:fc:6d:a4:d9:b7:ca:61:bd:65:5f:15:97:14:
         6c:9e:15:1f:58:c2:24:f6:1c:02:b5:6e:ae:a6:9b:2a:89:d9:
         c4:e1:8b:22:fb:d7:4b:85:8c:99:ab:69:84:98:ae:ee:2a:70:
         4f:49:30:9d:28:f3:f9:6a:c7:8e:4c:4c:b8:2c:f9:71:e1:ff:
         26:3f:35:d9:89:85:44:04:a9:b0:88:a0:fb:c5:da:f2:49:70:
         45:2e:42:f8:a0:56:d3:26:1d:d8:07:4b:8b:cf:1e:be:11:66:
         ff:50:15:9e:d2:f2:a4:85:28:21:58:88:ea:60:27:21:a6:96:
         89:a7:3c:8c:bb:fc:e9:c4:8e:16:fd:50:3d:9f:7d:27:f9:77:
         e8:80:c0:2d:68:80:92:d3:d6:a2:b0:8c:26:5d:62:5d:f0:a5:
         fe:a2:2a:86:ca:1a:71:3a:80:4f:e9:5c:e1:78:1b:f8:79:05:
         eb:a2:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:52:13 2025 by rpki-client