Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/0704457f-e787-3224-a8dc-a525bf5aec40.roa
File:                     0704457f-e787-3224-a8dc-a525bf5aec40.roa (raw, json)
Hash identifier:          hKBdC0PXbQj07aEvzQa8aNx5dZlZjkBpuy5JbrJUJK4=
Subject key identifier:   52:1D:19:C9:C0:B1:BF:A3:64:91:04:1C:F9:4D:AD:0F:BE:65:AF:27
Certificate issuer:       /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
Certificate serial:       010D0C9F43285849DC86ACA75537B57D926AFA00
Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/0704457f-e787-3224-a8dc-a525bf5aec40.roa
Signing time:             Thu 15 May 2025 12:43:01 +0000
ROA not before:           Thu 15 May 2025 12:43:01 +0000
ROA not after:            Wed 13 Aug 2025 12:43:01 +0000
asID:                     14618
IP address blocks:        160.32.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:86:ac:a7:55:37:b5:7d:92:6a:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
        Validity
            Not Before: May 15 12:43:01 2025 GMT
            Not After : Aug 13 12:43:01 2025 GMT
        Subject: CN=3ade5859-ee20-448e-adde-24a8b421b70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:0e:95:b8:16:90:f0:cc:bb:92:e7:f0:d7:
                    77:83:f4:6f:27:43:40:5d:2f:f7:b6:a0:6d:03:ef:
                    3d:c3:22:1a:03:95:dd:2e:e2:ea:ce:a8:87:d7:51:
                    25:79:bb:90:c7:3d:5d:af:50:0d:90:7b:0a:bc:88:
                    fc:24:08:25:ee:5c:4e:1d:1b:d6:ba:28:68:ad:ef:
                    47:fd:71:3b:fb:88:17:44:29:47:65:c9:ce:38:74:
                    a1:57:b1:21:73:99:16:b5:dc:5c:f5:06:79:a9:60:
                    59:38:c5:35:d4:4a:98:1c:f7:bb:be:49:56:67:56:
                    9f:64:42:20:6d:bb:38:65:a9:5d:cf:82:59:93:6a:
                    f6:45:b3:8b:17:99:ca:6c:90:18:69:ce:2c:7d:df:
                    2d:bf:02:97:fc:e0:8f:46:7e:f9:d0:6c:2a:45:b0:
                    68:03:b6:64:7d:3d:ee:3b:0c:b4:a4:56:d8:11:57:
                    c6:71:ff:d3:fc:4f:dc:54:37:9f:e9:21:9f:10:0e:
                    34:ee:c0:d6:2e:39:f5:12:ab:8d:32:e8:f4:08:a6:
                    fa:37:6a:db:e7:5c:ab:2e:63:3c:58:8b:4c:d7:28:
                    e4:d8:6b:d8:66:90:b8:e5:7d:1e:85:ba:56:e3:bc:
                    33:33:21:03:10:74:72:c6:e1:d5:8f:2b:37:a1:c6:
                    0e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1D:19:C9:C0:B1:BF:A3:64:91:04:1C:F9:4D:AD:0F:BE:65:AF:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/0704457f-e787-3224-a8dc-a525bf5aec40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.32.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:da:1a:d9:99:e7:54:e5:c6:df:4b:99:86:a7:0d:6c:89:f3:
         0f:c0:5e:9f:56:19:0f:26:6f:29:2e:67:8f:29:25:f0:07:f9:
         09:ac:71:77:d8:ba:aa:ae:bb:10:c3:cb:2d:84:47:ea:04:34:
         ab:87:e7:97:f5:6a:b7:8c:96:4e:30:b6:24:b5:e1:6c:e2:ac:
         de:56:fb:bc:27:cf:fc:5b:df:5b:06:2e:f6:22:f0:bd:f7:01:
         b9:8f:ae:05:bc:c3:f8:3b:d5:c7:f1:02:0b:0b:fe:02:de:52:
         b1:44:70:1d:24:94:aa:61:2d:5e:a9:b6:55:cf:0b:d3:f0:e5:
         7c:88:6d:e7:49:c4:20:56:33:59:d3:43:b1:ba:27:e2:bf:1b:
         05:f0:1d:6e:6a:fd:5d:68:9e:bc:49:c1:8f:14:56:50:c6:5d:
         14:1d:b5:35:03:e5:47:a9:93:8e:bc:e2:f3:c9:61:26:ff:df:
         f4:9d:69:e6:1a:a0:36:49:d1:5f:66:5b:fd:67:f8:15:f0:d4:
         b2:f0:47:b1:b8:f2:1d:8a:59:47:67:fd:46:28:03:7f:e7:3e:
         ea:7c:56:11:f2:57:a7:c3:8a:00:f0:23:36:0d:de:28:6d:07:
         35:de:37:c5:5f:5f:fd:d7:bd:b2:ae:7e:ea:07:bc:4f:9d:b6:
         8d:09:33:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:51:44 2025 by rpki-client