Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/38630d3b-d521-32b3-bf75-7d1f8014e5e0.roa
File:                     38630d3b-d521-32b3-bf75-7d1f8014e5e0.roa (raw, json)
Hash identifier:          zKjqT4VIEkwfUc1WOPNzkMbuhTPBTzRcoVTQlyW8xKI=
Subject key identifier:   99:77:C8:F2:10:66:7C:05:94:3E:A4:B8:12:4D:AA:D0:CA:02:90:F1
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F432858498CFF1C0E89A627BAD4AE9A70
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/38630d3b-d521-32b3-bf75-7d1f8014e5e0.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     14793
IP address blocks:        76.164.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:1c:0e:89:a6:27:ba:d4:ae:9a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=57d9e550-9d27-46df-aa7d-593fb0b45455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0b:2c:8d:8e:f7:b9:1e:d3:33:4b:c0:d1:c7:
                    dc:c4:b6:a9:29:bc:44:91:5f:db:9f:e0:e9:a6:ba:
                    4f:6c:23:20:35:5c:43:a6:24:13:58:b4:f3:d2:f2:
                    a7:3e:dc:e7:6c:a7:6f:38:76:86:9c:b7:61:e5:57:
                    bd:c2:dc:a7:6c:48:fd:aa:dc:c7:98:94:45:2a:d5:
                    c2:11:fb:58:4c:9f:b4:41:e5:be:f6:c6:8c:11:0d:
                    7e:7d:e7:d4:c5:9a:57:3d:99:92:ed:d0:2f:74:91:
                    4f:a0:80:2e:83:cf:29:2e:9c:b0:f2:d4:fa:6a:c8:
                    f2:e1:4f:12:91:01:cf:a8:3b:45:63:c6:7d:b0:b1:
                    2c:03:29:14:8c:f1:24:ae:ca:14:31:86:c0:a5:32:
                    bf:2c:c5:f4:56:8f:2d:85:67:1a:79:62:5c:93:e8:
                    7e:17:40:8b:99:df:83:d4:9c:64:6e:ff:fc:7c:91:
                    9c:56:c4:e8:38:8b:52:60:a2:a2:9a:31:6d:e8:a6:
                    79:73:7b:da:02:aa:65:0e:7d:9b:02:50:12:a1:9b:
                    e9:4b:5b:96:5e:1c:bf:c5:46:12:ab:dc:ec:e5:e3:
                    e8:6b:e3:05:01:57:f4:1e:f8:9a:45:2c:6a:4f:f5:
                    c2:c9:a5:9a:6b:54:46:17:fc:0e:b5:1f:57:60:29:
                    9d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:77:C8:F2:10:66:7C:05:94:3E:A4:B8:12:4D:AA:D0:CA:02:90:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/38630d3b-d521-32b3-bf75-7d1f8014e5e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:41:a4:36:7b:e9:c3:41:86:0a:b8:30:46:ac:0c:43:45:cc:
         23:39:1e:0a:4e:bd:13:56:2a:42:2b:e9:b6:d2:c5:b8:4e:3b:
         4f:9c:37:ff:1c:50:a2:82:20:38:76:a2:fe:58:04:1e:9f:26:
         e1:2f:48:87:04:5e:f6:e1:82:f7:b6:c7:b2:91:98:60:5d:49:
         6f:4b:fc:59:9d:17:84:01:b4:d0:10:3d:a6:97:21:4f:3c:0a:
         78:98:30:2c:f8:5e:fe:37:56:bd:51:c2:ae:04:12:c5:d6:41:
         3e:70:1f:b0:27:df:ce:55:c5:0f:42:7b:86:35:e0:20:c2:84:
         b3:b9:87:c3:a5:b1:83:d7:88:2a:53:2e:57:df:c8:10:9f:1b:
         9e:75:a8:ea:93:16:64:92:7d:9a:62:c7:7e:2d:20:36:9c:9b:
         cd:65:f2:d6:24:9c:4c:59:3f:fc:98:f6:0d:cd:73:f6:17:a9:
         94:3c:73:79:47:a7:25:48:f5:12:9a:c0:a4:66:2d:07:f0:a9:
         3d:06:14:63:6d:a3:5b:10:8b:f3:0b:b4:a9:69:fb:47:b6:3f:
         59:68:12:a4:3a:04:a6:f9:56:4d:03:6e:8e:10:89:da:a7:7d:
         0a:0e:ce:06:01:da:05:99:d2:a9:c2:7a:c2:07:be:11:78:7f:
         e6:db:bf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:39 2025 by rpki-client