Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/c680d96c-ff82-375e-822b-e0d09613fa44.roa
File:                     c680d96c-ff82-375e-822b-e0d09613fa44.roa (raw, json)
Hash identifier:          yx3wYsVq5sLI/b2YRQyWdGtPUFoaxKzbxafBP0eJLfc=
Subject key identifier:   CE:0D:AE:37:F5:10:2E:3B:6B:AC:51:70:4B:72:01:8B:FF:3B:7A:9E
Certificate issuer:       /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
Certificate serial:       010D0C9F43285848E59BC0730D4D11A4482D6FA0
Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/c680d96c-ff82-375e-822b-e0d09613fa44.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     397457
IP address blocks:        147.160.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:c0:73:0d:4d:11:a4:48:2d:6f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=e0ead775-747a-4c59-8d98-e36740b12e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3a:c5:20:97:e0:87:8e:90:40:98:0b:16:01:
                    7f:25:9d:47:35:a1:b2:8b:02:fb:ec:39:dd:02:e5:
                    15:ce:e1:8b:7d:91:d2:ff:c9:2e:33:92:f0:70:7b:
                    49:08:5b:30:d5:d0:a7:27:bb:5f:ff:f5:59:ec:14:
                    a8:f3:dc:0d:7d:dc:71:48:b4:35:8a:8a:37:7d:12:
                    ac:b8:19:a9:60:f5:0b:7f:91:f9:59:c3:4f:42:35:
                    95:29:6c:a1:08:9d:cd:26:b7:a6:6f:08:73:0f:c2:
                    88:87:06:c7:0e:24:bf:72:80:1b:50:69:73:45:9f:
                    61:2d:9a:33:1c:ce:ba:0d:7f:ed:07:13:ba:1b:37:
                    28:9a:44:4a:28:45:1f:1a:36:4a:35:3d:3e:c0:51:
                    03:80:0a:b8:dc:1e:e1:66:f5:fd:ad:88:e6:7b:78:
                    c9:f9:f0:c9:61:54:e9:cc:19:40:1e:6c:0d:8d:52:
                    10:7a:82:09:31:dd:fe:eb:6b:5f:58:76:04:9a:d0:
                    67:de:82:6a:d0:f4:18:9c:84:84:89:c9:f4:86:7c:
                    15:9f:da:6d:06:ac:da:43:57:df:9c:48:52:d4:83:
                    42:92:c9:bb:0a:70:15:c9:fa:05:e9:21:82:e0:fd:
                    3b:f9:6a:54:9e:ee:31:69:26:85:b8:8c:9c:85:c2:
                    6f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0D:AE:37:F5:10:2E:3B:6B:AC:51:70:4B:72:01:8B:FF:3B:7A:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/c680d96c-ff82-375e-822b-e0d09613fa44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl

            X509v3 Authority Key Identifier:
                keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:98:3a:23:6e:4e:01:c3:e9:26:4b:2c:e4:bb:8f:95:15:8b:
         14:8b:0c:8a:17:db:07:fe:0f:d3:ee:05:56:8b:01:34:ce:3c:
         bd:ef:d8:6c:6b:24:89:9a:b8:ca:6d:32:8e:78:17:81:cf:b1:
         c0:ed:8a:72:32:71:ce:c8:fe:7c:ad:eb:8c:a9:27:58:cc:a5:
         74:cd:f5:2b:e5:72:84:8d:8e:cf:9d:61:7b:3e:7d:03:76:d8:
         ce:df:ab:e8:bc:25:dd:68:f6:f5:bc:67:b2:10:2f:ee:d8:1b:
         54:ef:6f:3b:40:a4:8d:c2:d8:ae:bb:58:11:f5:19:d0:22:db:
         35:b3:9f:a1:b1:73:9e:2f:8e:3a:39:0e:c1:8e:a1:bb:66:86:
         bc:0c:0a:60:19:0e:95:6d:86:0a:9d:cd:50:53:47:1c:a6:d3:
         52:2c:b5:58:24:05:e8:68:73:f6:c0:71:27:75:76:8e:0e:54:
         5f:e0:8d:72:53:64:44:18:5f:f3:a6:af:00:f8:9d:2d:f9:55:
         97:d0:03:cf:18:25:1a:34:ab:0b:23:57:33:0d:33:9d:a9:a4:
         a8:a5:9c:f8:0b:e5:7e:0c:ec:08:51:17:d5:ec:7c:e5:3c:8a:
         3e:73:a4:71:f2:da:33:ea:23:8d:a0:29:64:00:4b:4c:0b:ec:
         1f:59:fc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:07:00 2025 by rpki-client