Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/5cff1dce-742c-3f6f-bcc7-a5e00f0af5f3.roa
File:                     5cff1dce-742c-3f6f-bcc7-a5e00f0af5f3.roa (raw, json)
Hash identifier:          lI1VSl2S70CM3PqBYVNuzP743KeKvnrrwqyOtKPiQxM=
Subject key identifier:   53:EF:7D:5F:59:4D:0D:EB:9B:74:06:6B:93:A0:1D:12:65:C6:62:02
Certificate issuer:       /CN=9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a
Certificate serial:       010D0C9F43285848A29B4D37FC7EF54C09926BC0
Authority key identifier: E1:C1:D3:7A:4C:9C:9C:5B:88:AA:59:1C:49:70:60:9B:47:48:6A:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/5cff1dce-742c-3f6f-bcc7-a5e00f0af5f3.roa
Signing time:             Thu 23 Jan 2025 02:00:40 +0000
ROA not before:           Thu 23 Jan 2025 02:00:40 +0000
ROA not after:            Wed 23 Apr 2025 01:00:40 +0000
asID:                     397573
IP address blocks:        69.171.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:9b:4d:37:fc:7e:f5:4c:09:92:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a
        Validity
            Not Before: Jan 23 02:00:40 2025 GMT
            Not After : Apr 23 01:00:40 2025 GMT
        Subject: CN=e1dd71b0-f682-45f0-99fe-c27a8fbfed5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:de:42:f9:cc:96:5f:e0:32:65:47:78:77:
                    17:6d:88:65:17:00:4a:59:34:24:f2:88:bc:ff:2f:
                    5d:fc:9e:29:a2:c7:cf:34:03:c2:37:ee:0f:08:9b:
                    2c:37:35:64:79:92:19:40:e5:0c:37:b2:42:c5:d5:
                    ad:1f:df:40:60:dc:2a:01:c6:b8:27:ef:1d:8b:bc:
                    4e:c4:37:22:e3:8c:5b:9d:ab:88:f3:64:e6:5b:e3:
                    49:f0:28:4b:4a:6b:a9:e4:76:02:3c:4c:89:3d:c3:
                    94:1e:4b:47:04:0f:62:7c:18:24:43:b4:83:9a:fe:
                    51:a7:f5:96:01:3a:e8:4b:d5:65:bb:3a:59:0f:ef:
                    d4:cb:fa:cd:03:f7:cf:bb:e1:0c:b1:47:c4:5f:aa:
                    92:ec:72:ab:7c:b7:d6:0c:e9:dd:97:61:05:4f:44:
                    95:1f:62:96:28:d1:b6:d3:7b:8b:9e:5b:56:35:4c:
                    c6:99:e5:22:d8:09:ad:9a:2a:81:e9:00:b1:57:3a:
                    bd:a6:43:b8:9d:88:fd:57:da:f6:d7:df:25:d4:f0:
                    e5:e7:06:f6:23:45:90:7a:97:34:f7:27:84:2d:35:
                    0e:f2:7b:fd:e6:67:71:8f:1e:38:13:9e:e9:4c:89:
                    27:32:fc:55:e9:0e:e1:d6:17:b7:2c:1a:c5:fa:de:
                    3f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EF:7D:5F:59:4D:0D:EB:9B:74:06:6B:93:A0:1D:12:65:C6:62:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/5cff1dce-742c-3f6f-bcc7-a5e00f0af5f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C1:D3:7A:4C:9C:9C:5B:88:AA:59:1C:49:70:60:9B:47:48:6A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.171.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:f6:e5:3e:05:89:4c:30:ae:35:ec:d3:d6:c8:02:db:a8:de:
         c7:b1:7c:e8:3a:52:60:b8:78:69:a4:46:90:f7:00:29:d0:10:
         37:11:36:46:89:60:99:34:a4:3b:a2:a2:ec:64:d9:c4:0c:73:
         aa:6f:ac:5c:28:b9:ca:09:8e:39:d4:ab:4b:b1:bd:b3:fa:e5:
         37:cf:e6:6c:e8:b4:18:7a:29:d4:f8:0d:0a:61:3e:8f:cc:9f:
         ef:2f:8e:27:5c:b5:f6:20:42:91:2c:f5:de:c6:8d:28:93:98:
         6c:24:5b:42:01:00:e9:c3:81:63:99:86:ee:7b:dc:d3:ba:71:
         fa:9f:70:44:58:70:a0:1d:14:14:72:6f:18:35:cd:ac:fe:fe:
         be:43:d9:aa:82:6e:0c:f0:48:3b:6a:ea:f5:96:94:e7:65:f5:
         7c:39:d1:eb:71:99:b7:88:12:50:b8:e6:fc:c3:48:ce:61:4a:
         0b:a9:9e:a1:39:cf:be:6f:06:4f:ff:dd:c7:9d:bd:ac:21:bc:
         65:f1:a6:c3:fa:63:0e:3a:1b:74:f0:b2:44:b2:86:30:f8:90:
         9e:c9:bd:2d:87:9b:f2:1b:99:43:3c:50:9f:70:12:fc:38:d3:
         06:db:41:52:90:20:28:8f:b0:19:47:63:06:f6:90:17:5f:a4:
         f6:3f:d3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:46 2025 by rpki-client