Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/16315bab-49c8-3caf-be0c-7c6a9af964f5.roa
File:                     16315bab-49c8-3caf-be0c-7c6a9af964f5.roa (raw, json)
Hash identifier:          5nCw5K4DGr+GNUN3ouFZ4YY4kGS+df4MtCpYoRLIZgI=
Subject key identifier:   26:07:E6:07:FF:15:51:B8:25:21:9C:6E:D2:75:C6:48:82:52:CB:A5
Certificate issuer:       /CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
Certificate serial:       010D0C9F43285849DF5A5C40A5C3705324F32900
Authority key identifier: 1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/16315bab-49c8-3caf-be0c-7c6a9af964f5.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     14618
IP address blocks:        161.199.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:5c:40:a5:c3:70:53:24:f3:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=c5ac5801-4635-4701-afd0-767d1e55b2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ed:8f:63:79:ae:6a:38:58:66:bd:4c:a1:43:
                    3c:e4:9b:df:30:dc:f3:94:c3:90:4c:9d:2d:b4:e3:
                    34:87:72:a0:51:19:6d:43:a0:79:0a:cc:ad:36:60:
                    16:28:4a:3e:50:1c:18:23:3a:2c:af:b9:4d:f8:23:
                    50:69:6f:11:54:ca:02:ae:35:b1:73:dc:91:61:16:
                    72:a6:e9:8b:c3:a9:b5:5c:44:a5:79:e6:f9:f4:9c:
                    b0:1f:83:8a:70:62:1a:75:b0:b9:62:ec:ba:73:5b:
                    a5:c6:5f:e0:8e:5e:a9:83:cd:d7:dc:ef:f4:a3:96:
                    08:e6:dc:5b:df:60:f6:49:10:97:de:e6:ec:cb:ed:
                    28:d3:32:21:c5:10:8d:ed:40:e8:c5:b1:11:b4:9a:
                    4a:c3:21:b7:c8:d9:37:70:53:c0:01:f2:e3:3f:68:
                    87:aa:49:17:67:16:e9:f5:24:37:49:b0:50:52:a1:
                    a6:84:91:6d:88:30:9b:77:5d:95:57:e1:f0:45:14:
                    54:26:72:dc:13:a5:c1:a7:60:11:f7:c3:17:14:b9:
                    b2:f4:2b:03:13:e3:5f:b2:51:91:74:c1:47:0c:e3:
                    36:82:f5:d1:1a:a6:8f:a4:8e:08:84:01:3b:21:bb:
                    e3:e7:ee:d6:80:26:6a:68:c6:a5:92:f0:f2:9b:84:
                    b0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:07:E6:07:FF:15:51:B8:25:21:9C:6E:D2:75:C6:48:82:52:CB:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/16315bab-49c8-3caf-be0c-7c6a9af964f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl

            X509v3 Authority Key Identifier:
                keyid:1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:9d:39:48:9f:27:33:30:87:a7:ee:f4:1c:3b:f1:c5:de:9a:
         3d:c7:15:8f:fa:8c:87:26:9d:01:21:4d:fe:8c:63:8a:57:40:
         eb:0e:ac:8e:cd:e8:6c:ad:43:11:d9:38:95:1b:59:c6:a2:77:
         a2:ad:4d:20:ca:5f:7d:1d:00:11:06:e6:e1:39:87:c3:f5:38:
         84:66:40:ea:13:86:02:0f:ed:ed:30:d0:38:93:3a:68:13:4d:
         a3:6e:43:54:d6:26:6d:ee:db:ca:70:2c:ec:01:e1:bc:48:51:
         8d:f8:d7:a4:a6:d2:f8:11:ac:d7:4b:7f:aa:06:16:fe:94:2c:
         2f:b5:0d:1a:f4:ee:a2:1f:97:04:10:a4:ae:e5:d5:6f:3c:7b:
         da:ae:69:09:cf:dd:90:bf:ec:de:55:92:e4:9c:96:57:51:b6:
         57:16:db:53:32:58:28:0a:35:0c:bb:5b:c8:c5:18:6c:7a:8f:
         1e:a6:ec:e0:e9:a6:81:9c:71:f9:9a:cd:8e:0c:79:34:96:f0:
         89:2e:b5:16:36:0b:f0:e4:d0:32:59:24:fb:59:4b:da:34:4a:
         af:86:64:fb:90:f3:69:68:74:47:a3:3b:29:1b:11:35:b5:bb:
         8e:59:32:e4:8c:0d:92:96:0b:e6:00:e4:71:88:8a:71:7a:5a:
         8c:60:a6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:34:24 2025 by rpki-client