Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cbe3e75-3b76-3c8d-9a52-f69cc935fb43.roa
File:                     8cbe3e75-3b76-3c8d-9a52-f69cc935fb43.roa (raw, json)
Hash identifier:          5ia++8TBzje3gSliIQqNO6GJqSAVjNy90eGyhaPAmdM=
Subject key identifier:   FB:4D:D5:CA:DA:AB:79:F5:62:60:EA:04:4F:E1:E1:02:EA:A5:E6:C9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D42FC2019632819DC57B9500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cbe3e75-3b76-3c8d-9a52-f69cc935fb43.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        67.160.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:c2:01:96:32:81:9d:c5:7b:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=0ac1bf91-c051-46af-b855-1e50bb44e627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:4b:6c:bb:b0:2d:8b:f8:86:f9:3d:57:32:
                    44:29:b4:4d:dc:5e:6c:a6:6d:c0:18:57:b1:bb:5e:
                    82:fd:47:bb:1f:1e:46:bd:12:e8:35:fc:c9:13:8d:
                    ca:9c:8a:09:e5:16:a9:d7:1b:82:b5:08:66:eb:bc:
                    c3:f2:58:9f:82:05:bf:4f:20:13:0d:c7:02:28:6f:
                    cf:db:6a:e2:cf:fa:9f:fe:6d:95:f4:87:87:79:83:
                    af:c4:09:d8:47:aa:a6:15:94:49:92:e3:2c:3a:4f:
                    3d:1b:ba:71:85:6a:81:35:e8:03:47:20:67:8f:5d:
                    25:83:31:17:01:f1:b8:07:ec:d3:9e:f2:d9:cf:b4:
                    f8:33:3b:21:6a:9c:2d:bd:41:16:71:08:11:b6:00:
                    31:08:05:dd:1f:82:2a:4b:31:51:04:b1:9f:d5:0c:
                    38:12:15:5b:6f:26:f0:1b:d3:38:cf:e5:67:ad:14:
                    d9:94:05:92:92:73:44:e8:41:1a:b6:ff:d3:84:b5:
                    5a:8a:de:99:ce:9a:77:d9:fa:1a:f1:3c:79:ed:af:
                    ec:06:9c:f6:01:94:c7:69:f8:2d:7f:fe:df:35:ef:
                    28:7c:ac:85:f9:05:a0:2a:3a:2f:83:3f:80:ec:a6:
                    11:28:06:43:0c:29:10:55:91:e9:e4:4e:09:af:dc:
                    7f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4D:D5:CA:DA:AB:79:F5:62:60:EA:04:4F:E1:E1:02:EA:A5:E6:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cbe3e75-3b76-3c8d-9a52-f69cc935fb43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.160.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:45:f4:ca:1d:8a:83:e1:71:66:b5:84:53:d5:38:e2:10:1c:
         d8:78:40:d0:eb:ef:d4:8c:3a:5e:da:9a:25:f7:d0:6d:6f:7d:
         c9:d7:4d:b7:cd:40:5f:c1:90:38:9f:e5:6a:54:ea:04:f5:98:
         0c:79:6b:e2:fc:73:00:b0:a7:25:7c:38:73:08:7f:85:8a:5c:
         d3:15:61:76:e1:2c:6b:c2:93:70:05:ae:be:f5:cc:06:5b:ae:
         a2:dd:3c:2c:16:8f:fa:51:32:55:66:2a:62:f5:cc:d8:06:9b:
         c9:64:88:58:88:28:3a:43:2b:9f:dd:3d:38:8b:d8:53:c5:26:
         65:e5:8f:4d:29:9a:6a:c1:6c:ff:3a:ee:2b:a1:15:90:59:08:
         13:9a:c9:f7:11:a5:f8:5a:34:5e:f2:c5:05:1a:f0:89:b7:47:
         13:b1:2f:d8:1f:8e:9c:71:d6:4f:f7:b4:e0:f0:50:66:8d:79:
         23:b8:58:1d:65:90:f1:17:e8:e3:0f:37:0e:4a:43:a6:43:a9:
         a6:74:56:62:f7:4c:07:05:0a:62:80:93:e4:77:81:9f:d4:83:
         ad:b4:45:1a:68:e0:10:fd:85:4f:0d:57:a0:3e:bf:78:4a:11:
         c1:c0:b1:2d:12:1c:52:05:e5:55:f4:49:6a:a6:87:58:db:96:
         5b:64:2b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:15:26 2025 by rpki-client