Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/94000a91-5bcf-357f-8271-f114ec50a698.roa
File:                     94000a91-5bcf-357f-8271-f114ec50a698.roa (raw, json)
Hash identifier:          hi3kkSUGwHZILQSnfSYnh/iEc+yN0siS1AucXXJZWjM=
Subject key identifier:   98:A8:41:2F:59:03:BA:11:76:35:BD:48:69:52:BD:B5:21:93:B7:1D
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F43285849E22524D9050DF7D04CEC9410
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/94000a91-5bcf-357f-8271-f114ec50a698.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     1273
IP address blocks:        166.63.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:24:d9:05:0d:f7:d0:4c:ec:94:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=3c552706-732f-452a-8ecc-97e5941e182d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:10:dd:9a:81:b2:56:08:74:96:31:23:0f:
                    af:f9:69:74:51:6d:0e:f3:e9:77:9d:bf:a0:b1:54:
                    a4:47:ef:07:1b:e0:13:50:c7:24:ed:84:90:1f:b6:
                    a4:f3:37:82:71:c4:cb:89:41:e4:d1:66:7f:c5:a4:
                    94:cb:87:01:a1:13:bc:f5:b7:5c:0e:56:a8:da:bb:
                    97:3c:21:85:2b:91:24:1f:fa:49:79:cb:ab:9c:bd:
                    56:2b:11:13:7f:01:09:0f:8d:21:36:a9:07:78:8c:
                    22:b1:3b:e7:42:aa:63:df:93:ce:41:de:db:95:46:
                    db:67:0a:6f:33:b4:24:5e:50:61:5e:5b:96:64:2d:
                    b2:60:10:0c:c8:1d:ce:fa:c1:fc:7b:21:e7:a3:32:
                    be:e7:10:83:81:61:fa:3b:98:f2:01:e0:08:ec:6a:
                    42:ff:d8:72:a2:81:59:b1:2e:fe:75:51:ac:e9:44:
                    60:be:92:67:0b:41:96:2e:95:2b:f7:8c:03:a5:2a:
                    17:e7:ce:54:b1:0c:83:84:63:98:de:2a:e2:7e:f3:
                    e7:1e:49:b4:66:05:03:f6:af:b1:65:f4:67:4b:51:
                    75:c2:2a:12:9f:39:fd:9f:3c:1c:ad:d7:f0:6c:00:
                    85:17:ad:cf:d7:0b:bd:ef:e3:21:5e:8f:f7:16:c7:
                    cc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A8:41:2F:59:03:BA:11:76:35:BD:48:69:52:BD:B5:21:93:B7:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/94000a91-5bcf-357f-8271-f114ec50a698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.63.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a5:42:20:fd:bf:4f:b1:91:9b:ee:72:b5:58:50:62:3e:b6:
         7d:03:75:ba:b8:b8:dd:1f:f7:9d:ac:f7:9c:b5:be:7f:4c:78:
         b2:49:5b:9d:43:6f:eb:f8:c0:10:aa:87:fd:8c:89:4c:e5:5f:
         87:27:c3:af:09:d3:d1:74:c6:f3:28:75:4c:a5:ad:30:cd:ff:
         f6:00:4c:53:0a:90:eb:6c:d8:42:77:cc:88:81:dd:b6:55:04:
         99:d9:dd:1f:70:e0:aa:53:ff:17:b8:68:f0:94:a3:c0:f2:76:
         ab:05:21:7b:b2:fd:10:48:47:1a:ca:86:26:83:81:e1:8b:f1:
         82:a9:ec:0f:cd:b5:1a:4d:88:fd:43:62:7a:e9:d5:5e:ae:a7:
         11:66:00:40:42:65:68:29:76:65:28:45:f7:01:1e:2e:e8:05:
         7c:ad:98:2c:9a:2b:d8:53:94:9f:46:72:23:a1:65:fa:90:92:
         89:b9:fe:59:ab:aa:de:87:84:c5:64:da:78:ff:67:4c:15:af:
         e2:b0:79:0e:ec:c9:0c:ca:8d:65:67:df:0e:03:54:43:fa:bc:
         e4:e4:ea:b0:f2:3f:3d:db:04:b4:c7:3c:a7:c5:3c:30:a3:32:
         b3:ea:8d:74:aa:6a:86:e2:d9:1d:a4:9d:59:37:1c:ab:ae:fe:
         f1:9a:22:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:22:21 2025 by rpki-client