Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa
File:                     549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa (raw, json)
Hash identifier:          RhflXJOT69WBrwcJn2oioyN52ylwPe9sIvkBqnRWSBs=
Subject key identifier:   2A:E7:33:CE:89:58:E1:5A:2B:06:F2:DD:84:7C:3E:22:AA:AC:7F:BA
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584A050A7C655112D1B05B0D3E80
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     398156
IP address blocks:        158.120.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:7c:65:51:12:d1:b0:5b:0d:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=fd547668-822f-4ec4-a5cc-ba27395da782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:de:be:59:de:f7:77:ee:f0:a0:bc:79:f3:51:
                    a2:83:b8:9a:d5:d9:50:28:e4:4c:5c:20:4b:b8:33:
                    9c:d4:7d:ac:c1:51:85:6d:25:8b:55:bd:19:e7:f1:
                    05:34:26:8d:0c:ae:41:58:8d:65:ea:20:36:85:72:
                    b7:33:72:2f:f7:72:0c:dd:db:3a:68:63:ae:e2:b3:
                    4c:d9:58:2c:7f:fb:ea:f4:d6:06:69:56:b7:f9:92:
                    13:d0:12:56:e3:b1:38:1e:d0:57:f3:fe:0a:d1:d9:
                    87:f0:6b:36:4c:64:c1:4b:0e:6e:80:23:99:87:81:
                    d7:44:06:b3:d5:eb:6c:ff:10:34:ab:20:ba:f7:24:
                    7d:b3:6b:b5:db:57:51:19:50:b2:de:5d:11:ef:38:
                    6d:99:d1:38:cd:1d:a6:61:60:e5:92:0f:d0:ee:c4:
                    b3:b8:60:6e:cc:5f:5d:1b:9f:37:9e:35:b6:4d:db:
                    0d:08:15:1e:11:9a:1a:ba:05:d3:04:5f:56:2f:cb:
                    6d:3c:ad:cc:5f:5c:a0:5c:ed:9b:fb:a9:cc:70:1e:
                    7b:ae:ee:65:45:71:a9:a5:84:01:f5:56:46:d2:7f:
                    85:f8:94:d6:58:a3:6b:27:4a:66:b8:f6:c3:79:6f:
                    46:d0:ad:4e:08:1f:36:1c:f8:93:5c:cf:87:21:0f:
                    d8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E7:33:CE:89:58:E1:5A:2B:06:F2:DD:84:7C:3E:22:AA:AC:7F:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:67:3a:7e:29:2f:a2:98:4e:10:bc:e9:f2:f1:61:7d:ec:33:
         f0:6f:d1:75:e7:53:4d:09:71:dd:ce:88:a2:52:44:23:30:33:
         46:57:aa:e6:65:ed:98:d6:45:e3:cf:c6:95:a5:2c:1a:a8:9d:
         65:25:06:c4:03:5a:69:9c:a2:80:60:67:7e:fb:1f:3a:6b:31:
         4f:f7:47:c9:4d:a8:a0:1f:46:c3:9b:f2:79:60:ef:bf:b8:90:
         42:24:5b:f5:df:0a:e1:1e:29:6d:e7:33:11:88:b7:45:26:c2:
         fa:ca:cd:42:5b:cf:9e:1e:39:99:af:49:ee:bc:df:d7:5b:8d:
         2f:22:1a:f0:59:98:fa:64:66:1a:b1:40:ed:43:42:d5:5b:43:
         cd:8a:79:22:80:59:14:0e:7a:56:2d:ba:fb:4f:51:ff:f6:5a:
         51:c2:e4:c7:5b:6c:8c:d8:07:27:31:ab:85:c6:38:35:5b:69:
         e5:f5:79:2b:0a:63:18:e7:3c:f7:c4:3d:e8:33:c4:b5:47:33:
         45:f2:87:fb:64:f0:d2:42:55:76:25:81:7b:8b:bd:9b:8d:38:
         74:97:7f:91:b7:c0:e7:3b:5a:e6:22:e8:52:9b:2b:eb:91:f6:
         62:65:0e:ad:8a:68:7e:10:02:fc:8e:92:2c:96:62:a1:a0:ba:
         c1:54:bf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:07:17 2025 by rpki-client