Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/81dd7eab-457c-366d-bc78-6b4815bec6df.roa
File:                     81dd7eab-457c-366d-bc78-6b4815bec6df.roa (raw, json)
Hash identifier:          d4txeoZHCIJ4i77eOXujVfwPu5ivvYU/YjuB/mCL3Xg=
Subject key identifier:   83:B1:A4:A9:81:22:36:A3:09:04:30:AD:31:D5:D6:C8:33:44:1C:54
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F43285848FD56BD27535901ABF1B53540
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/81dd7eab-457c-366d-bc78-6b4815bec6df.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     16696
IP address blocks:        161.38.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:bd:27:53:59:01:ab:f1:b5:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=abd5cfb9-2cf1-45bc-a2f9-b61bbc7e3ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:22:29:21:c9:f1:66:5e:5a:40:2f:3b:52:94:
                    b8:0d:c6:53:60:8f:d3:bf:83:55:38:67:6e:47:40:
                    67:f4:ea:03:bc:ce:51:1c:cc:77:f9:13:5c:31:b0:
                    13:06:e7:68:2a:ec:f9:31:26:d1:ab:06:a5:1c:e3:
                    68:04:62:f9:98:2d:0a:a9:aa:ed:44:99:8f:5f:fc:
                    26:69:4d:26:a4:6a:93:5c:db:1d:8c:45:b3:c3:2e:
                    88:37:32:b5:b8:79:11:69:13:52:96:5a:dd:99:f1:
                    2f:b9:c4:6c:54:21:ad:8d:13:e8:22:35:85:bb:8a:
                    bd:28:86:19:15:9a:14:98:09:44:a7:28:2e:56:dc:
                    23:f1:bf:1a:16:8d:82:ef:61:8b:de:c4:b7:09:69:
                    28:c5:fc:bb:3e:9c:65:d1:03:85:c0:16:12:6b:5e:
                    08:9a:0b:73:7a:8a:19:19:c1:34:5c:07:73:86:8f:
                    f6:73:d7:c9:a0:d6:2e:48:ed:f4:7b:1d:65:74:cf:
                    74:3f:f3:5a:52:94:2d:d5:69:ad:11:61:ca:a9:bc:
                    34:2b:8d:17:7f:23:f7:62:5b:8c:76:42:84:26:5a:
                    af:0b:ca:5e:cd:61:dc:52:55:a4:4b:a3:74:c3:ed:
                    ad:a9:bf:06:91:cc:27:96:04:05:df:db:f2:9d:8d:
                    61:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B1:A4:A9:81:22:36:A3:09:04:30:AD:31:D5:D6:C8:33:44:1C:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/81dd7eab-457c-366d-bc78-6b4815bec6df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:7f:f1:c7:5f:e3:68:eb:f4:eb:67:ff:30:b1:5a:73:b5:51:
         d2:59:6e:c6:36:3a:a9:be:1f:70:f9:64:2a:a2:a8:b0:6a:94:
         2a:53:59:d5:e5:a2:7f:68:04:39:ab:10:89:2a:ae:82:0d:3a:
         95:0f:78:09:1d:85:f9:12:9e:6c:e4:5e:f7:42:e6:07:1f:c2:
         ba:7f:4b:17:9d:bc:96:d7:d2:91:9b:71:1e:b9:3a:2b:4d:79:
         1e:a3:3b:46:eb:5c:19:b6:b1:61:7b:22:bb:26:66:8f:05:59:
         cd:ab:56:83:d5:0e:6e:ea:56:92:e6:be:07:a4:bc:96:62:07:
         85:f6:d9:6c:2f:ba:91:6d:18:05:d0:13:c4:e9:66:51:d1:9a:
         65:67:44:98:28:f4:db:9b:ff:50:b8:d6:74:5f:43:09:a5:e0:
         f4:e3:a8:52:9b:47:13:86:c3:0b:29:11:ff:d5:3a:fd:58:f5:
         7f:f0:6f:36:49:11:fc:67:39:02:2c:73:69:50:44:11:b5:c8:
         dd:2a:b4:e2:f6:ab:c3:cb:aa:0e:24:60:28:2a:2d:9b:fa:4e:
         8d:83:e8:bb:93:3c:73:20:df:d7:4a:84:70:14:65:6d:60:b9:
         ea:70:cd:0c:63:93:44:1d:8b:cf:1b:53:bf:dc:48:b2:f3:4e:
         83:1c:b7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:44:01 2025 by rpki-client