Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/a1938fc5-2350-385d-a647-f833e035e7be.roa
File:                     a1938fc5-2350-385d-a647-f833e035e7be.roa (raw, json)
Hash identifier:          9/GxHYbroBhUF9DrfJBLSvLrEiu7tFxUzR7u8BuKUog=
Subject key identifier:   B9:B8:FA:8E:27:98:70:1D:27:EC:3E:7A:79:2C:26:81:05:85:E8:D2
Certificate issuer:       /CN=39bc904e-c316-4e84-92fb-2339457361b2
Certificate serial:       010D0C9F432858498CFF10C276AE37A331C61080
Authority key identifier: 6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/a1938fc5-2350-385d-a647-f833e035e7be.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     40102
IP address blocks:        160.253.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:10:c2:76:ae:37:a3:31:c6:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39bc904e-c316-4e84-92fb-2339457361b2
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=8a91c27b-8c90-41b9-b66c-a20bb398cb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:e9:c9:38:ad:25:d3:5f:7b:65:58:5e:ea:
                    49:d2:a0:45:e0:c0:80:89:1c:38:a0:9e:ae:de:fe:
                    b3:f7:4a:41:e2:cb:e6:b4:c8:d6:7c:50:18:b3:fa:
                    20:a6:00:8e:c3:ca:cb:8c:1a:25:d8:a2:c1:47:2e:
                    4b:25:10:c2:32:b1:da:1a:12:45:d7:49:23:13:e0:
                    c5:26:71:8b:be:7f:fa:e3:d2:04:ce:bb:6f:69:a0:
                    ec:fe:70:0b:64:f4:ba:4e:1c:b9:0c:72:46:14:c9:
                    4c:b0:10:43:30:e6:63:f6:6b:b2:5d:b8:2a:1a:2a:
                    b1:ff:09:34:9c:f9:52:04:98:2e:d0:28:a8:3d:a1:
                    ea:3f:50:e2:87:d8:75:f1:41:7c:d3:4f:e7:af:fd:
                    63:da:55:e3:0f:18:75:ff:d7:87:e5:0e:2b:be:33:
                    67:98:8c:df:3d:38:c7:8a:6f:a0:10:68:1a:ed:29:
                    0f:cf:b9:03:7d:c8:28:2c:1a:d3:e7:8d:61:e4:b4:
                    24:2e:b7:d2:d2:9b:c9:85:56:6e:6d:4c:c8:e6:b3:
                    07:b6:22:b1:b2:8e:ec:db:0a:89:a4:35:28:c9:e3:
                    af:ed:b8:f2:c7:a7:6b:e3:38:61:b2:d5:99:b0:e7:
                    b9:a2:90:24:3f:f5:50:89:a3:80:26:0b:d2:fb:cb:
                    39:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B8:FA:8E:27:98:70:1D:27:EC:3E:7A:79:2C:26:81:05:85:E8:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/a1938fc5-2350-385d-a647-f833e035e7be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl

            X509v3 Authority Key Identifier:
                keyid:6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.253.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:21:72:7d:de:61:9b:21:6c:fe:b3:54:b7:14:e2:f3:65:b0:
         03:86:27:ed:bf:b5:16:f9:1d:b9:e8:d1:25:84:a3:aa:17:97:
         8b:c8:66:64:34:b9:ba:31:b9:49:12:2e:ec:98:3f:29:bc:a2:
         3c:84:72:51:62:66:6e:85:0f:22:9a:b4:1f:7e:c3:21:d6:61:
         db:73:b5:3b:50:7c:c4:20:2e:60:85:76:ee:3c:19:b2:4f:38:
         48:3b:08:13:a9:6f:05:02:fa:53:21:97:52:3e:7c:29:61:16:
         7c:35:72:74:fb:c6:c8:4c:cf:29:8e:69:c7:ca:eb:55:4b:7c:
         50:01:ee:ed:ab:ae:96:db:b5:16:e5:ff:51:cd:7e:29:ee:68:
         e4:33:68:0a:76:b2:fd:55:e9:f9:a1:ce:89:8d:9b:56:c9:94:
         b8:e7:44:b9:1f:06:6f:dc:28:70:27:ca:39:ab:87:1b:0f:9d:
         28:67:50:a3:e3:7a:a1:06:36:9b:4a:01:88:1f:4b:61:c0:c4:
         6d:08:b4:32:63:0a:96:66:db:69:a6:93:9b:11:53:d6:29:70:
         99:5f:57:55:2c:61:6f:45:3d:be:c0:83:cc:ca:19:00:d6:bc:
         0f:24:ae:dc:eb:06:a1:68:53:f8:ee:8b:28:c3:dc:fa:46:c1:
         ea:42:c1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:29:29 2025 by rpki-client