Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/313df310-96e3-3f94-8aec-692872adb64e.roa
File:                     313df310-96e3-3f94-8aec-692872adb64e.roa (raw, json)
Hash identifier:          rCduPKN2Ohpe8Q5dTsNj+F96X73kwQc98wJoza732fk=
Subject key identifier:   B0:2B:F2:BA:07:B8:BC:D6:DA:87:95:EC:1F:49:17:DE:91:21:CB:36
Certificate issuer:       /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Certificate serial:       010D0C9F43285849C4D4CAFB5D1E7D4F059EAD00
Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/313df310-96e3-3f94-8aec-692872adb64e.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     3356
IP address blocks:        161.151.162.0/23 maxlen: 24
                          161.151.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:ca:fb:5d:1e:7d:4f:05:9e:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=c7c8e11d-0fc4-4c04-8fc7-564b4da59b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cb:af:35:d9:6e:2e:ce:d4:a1:ce:9e:0f:1a:
                    22:28:22:90:22:48:ac:83:44:ec:22:93:f7:ff:02:
                    40:a2:b0:5c:46:62:14:75:fd:16:92:c9:49:60:b0:
                    fc:ec:c6:70:e4:5b:fb:09:41:77:86:fd:1a:0b:cf:
                    d7:2e:7c:73:b9:3c:7b:ba:bc:f5:b2:26:61:39:9c:
                    d6:86:52:ff:1c:ac:e3:62:95:6b:b3:c2:02:10:0c:
                    6b:d6:d0:5a:7a:15:b3:ae:9d:83:52:26:d8:0b:0d:
                    4b:f0:a0:82:01:4e:b4:f1:78:5e:f5:db:8e:66:d7:
                    29:a3:ec:1a:74:c2:f8:63:79:a8:20:b4:df:ae:7b:
                    bc:9c:cd:25:7e:ae:a3:3f:3c:46:de:be:51:0f:03:
                    68:e0:6e:95:2e:a5:8a:c9:1d:ef:75:c6:27:58:33:
                    de:0d:51:32:59:e7:04:ae:6d:c9:b8:af:71:c7:6e:
                    0e:72:1d:7c:ff:24:d1:48:d3:c0:3f:ef:40:e0:c3:
                    2c:1e:3d:54:e3:84:d1:30:76:f3:d2:bf:89:87:36:
                    dd:77:08:33:a8:d6:27:5d:7d:d8:26:e6:79:be:f8:
                    b0:77:b0:96:79:24:69:0b:1b:de:12:44:cd:6d:f4:
                    38:96:c3:d1:19:c7:0c:0f:a1:47:5d:61:d4:10:16:
                    98:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2B:F2:BA:07:B8:BC:D6:DA:87:95:EC:1F:49:17:DE:91:21:CB:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/313df310-96e3-3f94-8aec-692872adb64e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.151.162.0/23
                  161.151.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:2b:b2:e7:b3:cb:4e:a2:c9:bd:c6:00:ce:70:4a:8e:e5:14:
         6f:a6:22:08:1e:8f:ff:06:1f:d9:da:28:1a:31:93:6c:87:a8:
         2e:a3:0e:ec:7d:4b:7c:56:9b:7a:0e:09:ca:a3:da:ab:d6:b7:
         ab:4e:7f:95:66:be:b1:d5:69:99:98:30:e1:f3:ad:49:1b:62:
         ec:c6:7a:f8:87:c3:7b:d5:20:58:1c:35:58:ad:77:e7:c6:27:
         ad:e0:55:71:cd:2d:9a:81:9f:6e:18:65:e3:99:97:2a:82:b6:
         74:fb:e8:b4:d7:a7:5b:88:40:18:9a:b9:8c:c5:db:3a:3a:97:
         37:be:81:9a:10:e2:ed:b3:e7:3e:34:ea:0f:cf:58:a5:31:84:
         c5:56:65:5f:2d:b3:65:a2:d4:83:e8:52:b4:8f:b6:1f:f4:ad:
         9d:4f:3c:a5:e8:4e:7f:05:2b:74:29:b2:4e:8f:bf:89:f3:38:
         d3:fb:39:23:e9:77:1c:fa:24:99:1f:a4:b9:01:8f:c1:41:fb:
         00:f9:8d:73:af:61:1d:d9:fa:7a:01:e3:6c:51:b7:4c:aa:e6:
         fd:4b:56:7d:93:2e:22:ba:a8:79:ae:51:4a:7c:2e:a3:e7:f3:
         4b:61:20:30:0f:5f:68:26:65:6e:ae:9a:d2:af:9a:ef:55:6b:
         d7:d6:85:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:36:25 2025 by rpki-client