Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/a470d1cc-8d3f-3e49-813f-a96c3c389107.roa
File:                     a470d1cc-8d3f-3e49-813f-a96c3c389107.roa (raw, json)
Hash identifier:          vlLGCixSX3/+1Hw74T/eZ9qrD7SC3QMds8Ai+OylcZ4=
Subject key identifier:   A3:07:78:62:4C:CE:3F:88:68:C9:8B:F0:98:C7:9C:24:F7:CC:D8:C6
Certificate issuer:       /CN=10fde7ec-a369-497a-a493-87b3e2e08143
Certificate serial:       010D0C9F43285849A61F47FC53D03F8CEA76FB10
Authority key identifier: 3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/a470d1cc-8d3f-3e49-813f-a96c3c389107.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     397606
IP address blocks:        147.160.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:47:fc:53:d0:3f:8c:ea:76:fb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fde7ec-a369-497a-a493-87b3e2e08143
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=ee6ba555-44f1-4486-b1ad-71abeafe8f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:31:ef:ab:b4:84:d0:e7:c1:43:6f:96:f5:8c:
                    0e:07:db:41:cc:b4:1f:b2:83:b2:60:92:16:e2:14:
                    b2:51:e3:53:d5:6a:bc:ee:78:a8:33:e1:82:e1:d1:
                    35:d1:87:5c:26:85:aa:cd:58:de:96:4d:63:a8:0a:
                    c4:07:64:e2:12:da:5a:90:4d:b1:47:6b:6e:ce:10:
                    c4:28:53:85:c0:74:eb:8e:3d:2c:dc:ff:e4:43:a8:
                    76:49:67:c2:0f:69:32:d0:02:61:49:e0:74:01:57:
                    0d:9d:46:18:7a:24:8b:52:d2:28:2b:1b:b3:39:46:
                    71:ed:59:2c:23:cc:49:59:36:d9:e4:d8:8e:b1:7b:
                    23:74:86:e2:30:db:7e:03:9a:9b:09:9b:55:78:32:
                    b4:81:af:af:be:b1:d8:f8:65:a4:58:ea:0f:65:79:
                    57:56:95:67:e4:49:74:4c:e7:d2:8c:02:6f:46:6e:
                    df:2c:7d:8d:8d:5b:47:bd:53:5a:19:3e:54:f1:98:
                    a6:8f:0e:34:dc:4e:7d:83:e4:1a:b4:50:3e:dd:91:
                    5f:75:1f:42:cc:c7:59:c9:e0:45:6c:2e:6a:b8:04:
                    3d:c8:7a:20:85:66:76:a3:ff:03:c6:78:7b:e2:76:
                    62:ae:18:bf:39:62:60:45:09:5a:fe:28:be:cc:57:
                    0d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:07:78:62:4C:CE:3F:88:68:C9:8B:F0:98:C7:9C:24:F7:CC:D8:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/a470d1cc-8d3f-3e49-813f-a96c3c389107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl

            X509v3 Authority Key Identifier:
                keyid:3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d5:88:09:f1:a5:e9:fe:52:28:31:bb:47:0f:ca:0a:3f:15:
         26:b1:72:c9:82:a6:be:e0:4a:a5:b4:f6:e3:49:62:d9:47:de:
         95:3f:f4:78:a2:c7:f7:21:d6:c7:f8:fa:56:26:57:91:87:32:
         c5:72:39:17:55:63:36:00:94:77:38:82:25:a7:85:d2:56:05:
         5d:ba:8f:6d:ce:72:20:7e:02:49:f0:de:6a:91:2a:ad:b7:d0:
         31:4a:07:d7:bf:e8:af:a2:57:93:82:58:dc:4b:a5:e2:b5:9f:
         3b:42:75:5d:60:fe:0a:e5:15:5b:0c:88:a8:cf:3e:f2:3f:4d:
         5e:b8:eb:2a:c0:84:fd:db:62:d1:12:b7:eb:da:25:1a:01:7f:
         51:ab:c7:25:e7:fd:e4:e3:83:25:63:57:13:69:16:e2:22:81:
         88:5c:37:a9:37:8b:98:c7:5c:82:e0:83:15:1e:de:b7:59:da:
         68:ca:95:4c:04:14:be:84:e3:cf:0c:66:b4:0c:13:39:3a:05:
         7c:ae:9b:bb:f7:e8:c5:d5:0b:88:8b:53:46:00:28:7d:cf:15:
         5e:20:0a:33:b2:46:27:bd:92:81:7c:4f:8a:cd:54:37:79:3f:
         41:a2:8b:c4:46:18:78:94:17:bd:37:0a:5d:f0:e3:09:13:63:
         6d:47:62:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:57:33 2025 by rpki-client