Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/160b632f-22be-3db4-9aa4-71302437048d.roa
File:                     160b632f-22be-3db4-9aa4-71302437048d.roa (raw, json)
Hash identifier:          Fzxzj1bjeshgkH5IIs+CE+eq/Y8Y3x5MSNthByJVyOM=
Subject key identifier:   2F:55:95:D3:38:77:45:EF:F8:6A:E1:0E:BA:9A:1A:F4:84:67:E1:A0
Certificate issuer:       /CN=677759b4-a247-47ea-badb-bb809bc80a31
Certificate serial:       010D0C9F43285849D2CA1CB8CE3D7311588B69B8
Authority key identifier: 49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/160b632f-22be-3db4-9aa4-71302437048d.roa
Signing time:             Mon 12 May 2025 01:00:47 +0000
ROA not before:           Mon 12 May 2025 01:00:47 +0000
ROA not after:            Sun 10 Aug 2025 01:00:47 +0000
asID:                     14955
IP address blocks:        74.221.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d2:ca:1c:b8:ce:3d:73:11:58:8b:69:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677759b4-a247-47ea-badb-bb809bc80a31
        Validity
            Not Before: May 12 01:00:47 2025 GMT
            Not After : Aug 10 01:00:47 2025 GMT
        Subject: CN=6274d8e8-f9ac-4109-9218-3e47ce725afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b8:fa:3c:d8:e7:40:76:79:bf:46:cd:3c:61:
                    ab:da:06:95:72:d4:c0:c7:ba:09:a4:b3:4e:09:ac:
                    87:2e:6f:4c:ff:79:0a:1d:42:f2:57:9d:a0:32:90:
                    e7:5e:bc:6b:ec:5c:f8:1f:7e:ea:06:0c:51:4e:ec:
                    ad:4c:8f:0f:67:bf:99:dd:1c:a5:e0:36:2a:26:21:
                    7c:0b:17:af:43:d9:6c:97:2c:ef:d4:c4:7f:25:c4:
                    1c:a3:12:74:f4:c8:1a:cf:4e:ae:ed:02:44:6d:77:
                    d4:ec:c6:a4:a2:b3:85:44:45:04:a2:c5:5d:27:27:
                    ec:36:7d:fd:79:f8:dd:19:5f:8e:88:ec:fb:66:6b:
                    ed:64:d0:19:34:bc:76:c3:6b:a4:4a:b7:70:95:24:
                    3b:dc:e7:7e:8c:7b:aa:e9:22:ec:62:a4:ef:06:47:
                    f3:15:4e:43:70:c5:75:28:e9:43:33:04:e6:b5:ac:
                    60:eb:fc:e4:b5:b4:8f:a0:07:78:c6:15:89:70:f2:
                    25:ef:32:1f:4d:99:9d:48:b6:1c:b7:46:7e:9b:6f:
                    77:67:d6:6e:92:c2:49:d2:09:b7:39:f6:8f:f1:35:
                    3e:df:13:46:75:36:cc:03:da:c4:37:fd:20:48:38:
                    0e:53:48:ea:f3:6f:f5:36:e8:4e:d8:95:ac:3a:b1:
                    6e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:55:95:D3:38:77:45:EF:F8:6A:E1:0E:BA:9A:1A:F4:84:67:E1:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/160b632f-22be-3db4-9aa4-71302437048d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl

            X509v3 Authority Key Identifier:
                keyid:49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:61:d1:cd:7a:f2:9d:18:ac:eb:35:b7:06:1a:6a:d3:c2:79:
         98:c5:88:c5:64:c5:4f:2f:f8:af:d3:47:d0:32:3a:a1:d5:2a:
         9a:25:f7:4b:35:fa:1f:68:72:81:2d:ad:8b:0a:3e:17:e6:79:
         1e:cf:d6:ab:8a:4d:24:6f:47:1d:d5:42:80:33:05:a7:a2:15:
         ab:40:ef:1f:c7:28:9e:6d:0c:8c:a5:90:e1:7b:ad:5c:c8:52:
         4c:11:9a:2c:06:39:e5:3b:0f:b0:a7:d4:ff:71:d0:d3:fb:e3:
         7c:1d:ea:05:ac:e6:48:26:9b:75:b4:ad:e9:0f:4a:01:bc:57:
         47:41:e3:09:41:18:0d:ae:74:f7:f4:21:8d:8b:cb:8e:1c:8a:
         b4:4e:8b:3e:48:ef:c4:de:f8:c0:d7:97:53:7f:be:4c:dd:47:
         09:8f:2d:62:8b:5a:ff:c9:ed:a3:02:b5:6c:8d:dc:f0:0a:00:
         92:b9:a1:37:65:61:e4:47:91:53:51:d6:d1:3a:b7:1e:72:05:
         74:a4:e7:cc:eb:8b:bc:f5:6c:80:d3:d2:5c:1a:7d:bf:fa:7a:
         c3:ed:d1:e4:de:81:7b:2d:00:0c:ca:b3:52:cc:ef:f5:b5:e9:
         33:98:97:fd:9e:f4:22:26:f0:11:3a:0d:7f:8f:86:e2:b3:16:
         02:b7:81:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:34:20 2025 by rpki-client