Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/248ba07f-c147-3cdd-a4f7-d3ba5eb8adc5.roa
File:                     248ba07f-c147-3cdd-a4f7-d3ba5eb8adc5.roa (raw, json)
Hash identifier:          6Z+ruz9kwg/dc47d0B/7gLcffeuON6sYjmKhwSS2pIw=
Subject key identifier:   4D:D2:AA:D8:A5:3F:D2:67:F5:4F:78:21:0A:36:A0:FD:78:F5:22:DF
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F43285849AA4F678339451EA0073E1A40
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/248ba07f-c147-3cdd-a4f7-d3ba5eb8adc5.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     16433
IP address blocks:        147.160.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:67:83:39:45:1e:a0:07:3e:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=8e4abb40-3a85-44ab-a671-656ced1ed92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:39:a8:ba:f1:2e:46:53:90:14:b8:57:ff:95:
                    0f:23:1e:c2:d8:05:22:4d:2c:d9:f8:40:c2:93:98:
                    ea:62:81:18:98:b4:f1:2a:9b:42:b2:41:26:28:a8:
                    ac:b5:81:df:8e:db:ed:b4:7c:a4:4c:33:7e:07:dd:
                    6b:a1:17:2f:3f:94:fb:c6:ac:96:a6:47:9a:6d:75:
                    40:dd:5f:92:f1:b3:ca:48:0a:6f:e8:cb:05:02:54:
                    ca:f2:ef:39:a1:e2:f2:f3:10:0c:69:2e:26:05:82:
                    4e:78:f2:c0:cf:1b:b0:27:a8:f5:fb:23:19:58:b1:
                    1f:aa:56:8b:63:ad:c3:a5:07:93:8b:47:c6:fa:e3:
                    79:3b:5f:b1:a8:f0:bc:c8:37:fd:a6:f7:34:1d:9b:
                    fd:ea:dc:d8:b6:1a:c4:1f:c3:ee:f0:44:51:30:81:
                    05:9a:05:64:a1:5f:7b:d4:d6:62:0b:17:e0:48:52:
                    4d:f4:96:f2:4e:24:dc:2a:ab:9a:c1:bf:48:87:81:
                    57:cf:56:be:e4:18:88:fd:0f:32:f6:0a:dd:04:32:
                    f7:f3:01:da:3e:0e:4a:95:13:7b:0e:86:d9:93:c0:
                    51:32:f9:b4:0d:94:2d:31:ae:36:54:e5:d4:f1:fa:
                    9c:0a:76:4b:7c:52:fb:82:8e:9a:80:fd:23:26:44:
                    89:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D2:AA:D8:A5:3F:D2:67:F5:4F:78:21:0A:36:A0:FD:78:F5:22:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/248ba07f-c147-3cdd-a4f7-d3ba5eb8adc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:b1:43:8b:83:94:48:b3:47:16:03:35:ca:8b:0b:2d:68:7e:
         f5:fa:6c:74:4b:88:59:32:16:9a:2e:d1:b8:5b:7f:6b:25:e8:
         5b:c5:01:00:6b:86:5f:ce:ee:5a:c7:fc:6f:24:2d:11:81:00:
         a1:5f:c9:06:ac:2d:46:f0:97:66:ff:40:d9:c7:4e:c2:18:7f:
         93:41:ac:76:b3:60:bc:21:ef:a2:ab:34:52:07:8c:33:58:34:
         a7:ec:a7:69:d2:f2:68:5b:95:61:a6:72:ac:06:d9:ed:fb:b0:
         f0:77:db:25:93:80:45:3f:3b:9f:fd:7d:3f:f5:9d:16:a9:e3:
         00:f2:ee:1b:a6:56:d6:09:89:60:9d:4e:2d:30:ef:55:51:90:
         54:fa:34:46:f4:6e:33:7c:86:00:b6:2f:75:87:3b:c0:f4:0e:
         5a:18:ee:d7:92:b4:7d:80:55:45:4a:f3:7a:b4:cd:24:a1:45:
         a7:84:30:36:f9:f7:60:49:fa:62:7b:ee:51:ba:cd:e2:c6:6e:
         b7:ae:be:7d:83:fa:ab:bd:4e:37:d3:5c:62:13:24:24:88:f4:
         5e:8d:ae:8e:7f:87:d1:3e:20:55:05:9c:56:b3:be:5c:c7:c6:
         3a:dd:7d:46:e7:79:51:65:fb:46:87:b0:0b:ef:53:92:37:2a:
         0a:b3:70:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:20 2025 by rpki-client