Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/a470d1cc-8d3f-3e49-813f-a96c3c389107.roa
File:                     a470d1cc-8d3f-3e49-813f-a96c3c389107.roa (raw, json)
Hash identifier:          Nf3aw0znSaWsrUS/jSUL/hbAqd4z9gQIF5LI8G2orB0=
Subject key identifier:   14:BC:E1:17:D1:16:1C:9D:45:C1:8C:0E:37:6D:E7:BB:E4:0F:C7:27
Certificate issuer:       /CN=10fde7ec-a369-497a-a493-87b3e2e08143
Certificate serial:       010D0C9F4328584A857601A0B4F69A4015EA4E00
Authority key identifier: 3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/a470d1cc-8d3f-3e49-813f-a96c3c389107.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     397606
IP address blocks:        147.160.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:76:01:a0:b4:f6:9a:40:15:ea:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fde7ec-a369-497a-a493-87b3e2e08143
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=f4919290-d056-473b-8a38-1ab7b1eb2032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bb:a0:12:07:b6:d9:cb:9d:0b:7c:35:f3:00:
                    2b:de:6b:0b:f0:a3:9e:57:56:5d:17:67:a5:e2:95:
                    5a:88:d6:35:ca:99:4f:ce:ab:bd:28:f1:6d:b7:23:
                    db:27:87:bd:e3:83:4e:ab:6d:c4:08:8e:f2:54:e2:
                    45:af:3f:84:0e:5d:f9:10:ac:2b:6c:18:6a:9f:49:
                    68:bc:f6:05:de:be:cc:f9:e2:70:7a:22:bc:12:6c:
                    a6:0a:89:ea:c2:d2:d5:e2:51:92:8a:ed:f1:08:a7:
                    35:aa:08:d7:64:19:3b:be:73:f1:c2:7c:20:bd:10:
                    66:66:eb:77:41:41:56:1a:33:f7:9d:9d:e7:de:f5:
                    f0:e4:76:d7:13:9f:58:de:72:76:0e:ae:3a:f3:fa:
                    a5:b3:56:30:ff:63:88:8d:d6:a3:3c:42:2b:a2:2c:
                    29:c4:e8:71:ac:95:9a:ad:f3:85:3a:87:91:1b:e0:
                    ee:15:ff:d7:0d:36:f8:47:63:6d:19:87:28:b7:d5:
                    ee:4c:05:31:90:ad:ab:ed:d4:cc:5c:96:b4:46:e1:
                    61:4f:33:7d:0a:9f:6e:0d:70:d3:50:4d:c8:b8:45:
                    fb:b1:3f:86:0c:2c:06:78:3a:1c:59:2e:18:5d:94:
                    14:88:00:7f:13:1d:71:bf:a7:f5:ce:e1:53:49:ee:
                    4d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BC:E1:17:D1:16:1C:9D:45:C1:8C:0E:37:6D:E7:BB:E4:0F:C7:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/a470d1cc-8d3f-3e49-813f-a96c3c389107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl

            X509v3 Authority Key Identifier:
                keyid:3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:74:39:78:c1:ca:df:91:0f:09:a8:f4:09:7d:b4:27:29:a2:
         a4:a5:06:a5:24:43:f8:36:b2:2d:f5:c6:99:a1:d3:85:a5:77:
         bc:18:a2:cd:3c:bc:0e:14:7b:57:8a:35:aa:20:10:21:8c:6a:
         cf:cd:90:98:e4:75:16:b0:f0:cd:1b:36:5d:40:11:f6:3a:20:
         d0:cb:2d:5a:ff:de:a4:75:62:aa:83:5a:2a:f9:30:1b:37:cf:
         a4:1c:5d:5c:2f:7f:27:fa:f4:82:9b:9e:75:75:f2:77:ff:40:
         8d:24:6a:56:51:b5:d4:7b:0b:da:86:6e:72:31:52:fc:2a:f0:
         41:b1:af:37:00:c4:47:7d:d8:16:7d:5c:a1:39:3f:be:9c:9c:
         47:21:9c:d3:04:d8:a8:83:50:40:a4:e7:b9:1b:57:7e:18:c0:
         ff:65:7b:92:ed:9e:2f:60:cc:fd:77:8e:dd:ed:4b:a0:05:03:
         84:8f:10:53:30:63:6c:81:26:22:47:62:07:b1:55:e9:96:7e:
         7d:79:18:70:31:b2:17:d9:3a:64:7e:97:56:32:3e:0a:93:79:
         e0:52:aa:d6:e4:cd:64:1b:e0:81:66:08:f7:1a:a8:6e:57:74:
         9f:cd:22:dd:8c:79:e2:48:92:e9:ef:3e:41:91:cf:e5:f3:b9:
         74:61:d4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:08:30 2025 by rpki-client