Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e6a8771f-0008-3305-9aea-b2fbca43621d.roa
File:                     e6a8771f-0008-3305-9aea-b2fbca43621d.roa (raw, json)
Hash identifier:          vCcA4+Idxl3SKvfcrmFnD0ywV6fPCj2AENnqb37tEqY=
Subject key identifier:   D2:13:EF:93:91:D0:D1:44:56:25:78:00:28:7F:B5:7C:21:72:E0:84
Certificate issuer:       /CN=e56bf41b-dd67-437e-9f01-30ef0b12f925
Certificate serial:       010D0C9F4328584A814654FB5213DA5E8CC94A50
Authority key identifier: AE:E7:46:C2:AD:C0:FC:19:54:11:53:A5:5B:AA:7F:75:80:E8:C2:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e6a8771f-0008-3305-9aea-b2fbca43621d.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        160.79.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e56bf41b-dd67-437e-9f01-30ef0b12f925.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e56bf41b-dd67-437e-9f01-30ef0b12f925.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:54:fb:52:13:da:5e:8c:c9:4a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56bf41b-dd67-437e-9f01-30ef0b12f925
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=209e7a31-b988-4c1d-a892-398dc69ebe1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:02:5e:34:17:0c:f4:a7:9e:b1:17:10:e4:bd:
                    bc:86:cc:80:2d:a1:2e:7d:fc:5f:a8:f3:db:1e:20:
                    8c:dc:92:4d:91:a5:7e:75:26:30:9d:5b:82:0b:0a:
                    10:36:e2:e8:63:41:df:ee:e5:0c:e7:44:46:8d:2a:
                    88:42:fc:47:6d:9a:eb:0a:f2:d6:13:20:8f:20:f8:
                    47:44:2d:39:d5:31:a9:44:55:6a:0f:a2:0d:a9:52:
                    1d:59:a3:75:26:72:33:7b:c8:cb:fe:18:fd:62:49:
                    68:09:b2:f3:ae:82:0e:3f:3f:75:55:fc:32:f1:e3:
                    42:3e:e1:8c:f8:57:02:47:0b:df:bd:ac:36:dc:23:
                    77:e4:54:a9:3f:31:60:e6:6b:be:3e:65:4b:31:ba:
                    a0:3b:c4:ab:b6:10:f5:2f:03:11:50:b5:bf:ab:e8:
                    a1:67:4d:32:02:a2:08:28:fb:27:17:51:fd:f3:85:
                    3b:75:93:66:34:da:65:b6:c1:95:76:4a:3f:4d:1d:
                    48:bb:53:17:b9:7c:6a:88:8c:08:5b:24:cf:48:30:
                    a7:c3:ac:16:62:cb:c3:0b:1c:0f:09:bb:3c:f8:be:
                    d3:9c:26:28:e4:72:db:34:8c:ef:b0:f4:d0:ef:4f:
                    9e:03:fe:c5:52:b6:1c:50:3f:71:f9:f9:3d:bf:13:
                    76:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:13:EF:93:91:D0:D1:44:56:25:78:00:28:7F:B5:7C:21:72:E0:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e6a8771f-0008-3305-9aea-b2fbca43621d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e56bf41b-dd67-437e-9f01-30ef0b12f925.crl

            X509v3 Authority Key Identifier:
                keyid:AE:E7:46:C2:AD:C0:FC:19:54:11:53:A5:5B:AA:7F:75:80:E8:C2:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.79.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:69:12:8a:56:e9:f3:d4:a0:0e:f6:c9:db:68:e0:75:84:57:
         20:25:c9:97:23:71:df:43:61:48:6e:58:44:8f:ed:ab:5e:90:
         e1:ae:44:a3:70:7d:d3:bb:4f:0f:b9:60:9d:c9:cd:76:cf:95:
         a1:d3:29:81:70:38:ea:4e:75:42:6f:17:0d:31:c1:d2:f4:d6:
         98:4a:49:ee:49:a9:46:b5:b8:98:60:ab:a1:84:c7:57:a5:22:
         f5:18:d4:a9:23:80:8e:a1:00:08:03:84:de:ed:09:cf:c2:6d:
         fa:0f:8c:2d:a9:71:2a:2d:c4:ff:90:4f:36:33:69:8c:fe:08:
         2c:95:a6:e7:96:5d:01:16:ae:13:48:05:48:d4:76:35:f6:f7:
         2b:63:26:58:aa:18:e3:79:a9:19:02:28:16:e8:bc:64:25:29:
         ca:20:88:04:e8:9f:1a:25:77:b0:93:0f:a1:e0:2b:f1:fe:e1:
         dc:14:8f:ed:a5:28:3c:4e:0e:f7:3e:9f:1a:2f:07:97:7d:fb:
         19:9f:5c:45:28:93:a6:1a:77:2a:7b:91:3a:e2:ce:cf:53:6c:
         d8:3f:7f:36:23:e0:24:25:d7:80:98:e4:e1:7b:e2:a1:92:71:
         4b:9f:a2:30:2d:eb:fb:da:49:83:c9:bf:72:38:45:73:b4:85:
         d2:c4:31:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:24:50 2025 by rpki-client