Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84112744-e979-3151-afdd-e00f78cf013d.roa
File:                     84112744-e979-3151-afdd-e00f78cf013d.roa (raw, json)
Hash identifier:          HPni+KANTKcuOOVoqkvdrRuuL48DA+UQqX6uYgcTiJk=
Subject key identifier:   2A:83:C0:4C:E8:89:0C:BE:D9:BE:5B:7B:FC:15:59:5A:17:B4:71:BB
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848D2112049C2EC3496D6A1C900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84112744-e979-3151-afdd-e00f78cf013d.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        76.160.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:20:49:c2:ec:34:96:d6:a1:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=2464ad8e-b9a6-4386-be1c-be19354f41f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ad:7b:f8:77:0c:49:2e:45:97:32:14:61:ea:
                    0b:c7:9b:d3:40:51:33:90:83:46:cb:a2:98:3f:ae:
                    c2:8f:21:d5:da:95:74:a7:65:7e:7f:8c:5a:e9:6e:
                    8a:66:f6:05:31:fa:3f:1c:1a:b4:c0:f5:0d:00:dd:
                    ae:05:58:66:24:ea:01:36:11:5f:d7:d6:37:37:7e:
                    4f:50:b9:a1:71:b8:15:21:f5:fa:86:07:29:92:62:
                    1b:0d:36:85:23:ec:9f:6d:d5:1e:a3:b8:24:0f:88:
                    6b:01:1a:32:b7:70:70:ba:ef:04:60:63:f9:f8:d9:
                    2a:9b:cc:c7:86:96:1a:a0:5d:bb:7d:f5:93:b6:02:
                    c9:68:6e:ee:23:ea:24:cb:81:ca:a5:3c:f6:2d:e1:
                    e2:29:5b:08:68:d9:ba:33:81:49:5e:58:7c:1f:ec:
                    13:33:67:39:f8:bf:1d:49:29:ec:0a:0c:1f:bf:ee:
                    df:32:3b:48:1c:e4:35:cf:16:f2:02:82:a4:2d:83:
                    ae:7c:71:3f:83:d8:fa:41:04:92:33:fb:e6:dc:d2:
                    44:e7:6f:35:ae:03:af:18:16:0c:bf:79:16:d2:ce:
                    db:06:49:ad:c1:6b:3c:d5:01:61:2d:2b:60:96:e2:
                    66:ed:30:95:42:d4:a8:f5:a3:12:4e:7d:72:1c:24:
                    f0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:83:C0:4C:E8:89:0C:BE:D9:BE:5B:7B:FC:15:59:5A:17:B4:71:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84112744-e979-3151-afdd-e00f78cf013d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.160.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:07:5e:37:7f:25:28:53:55:92:e9:90:14:ff:1d:0d:4e:fe:
         b1:25:c4:63:34:6a:bd:38:39:e3:0d:ae:fd:78:23:f8:15:97:
         99:df:37:af:ae:c0:5d:ce:28:10:60:b3:cd:48:60:ef:fb:1f:
         06:e3:6a:49:34:54:fa:1d:aa:a9:41:48:e3:59:2a:bd:6f:74:
         c7:ba:28:fa:1a:cd:af:9b:fa:07:89:8f:77:ea:e0:bf:8e:38:
         ce:80:fd:dd:e7:19:b3:41:c4:9a:ff:48:4a:68:33:b4:7c:36:
         d9:14:d9:9a:28:45:16:88:3d:76:70:3c:63:01:3f:61:29:9b:
         16:dc:2a:0a:f7:f6:d0:4c:b1:a4:55:b6:dc:82:93:ee:ec:ec:
         a7:dc:a7:95:f8:89:a6:09:29:da:ce:9f:e1:fb:da:be:db:57:
         30:ee:32:8a:7f:74:9a:1a:4f:d4:61:1f:8c:bd:62:0d:93:38:
         ba:29:a1:68:b0:80:8f:64:6b:72:f0:78:0f:5c:a9:c6:7a:99:
         47:a7:c2:4d:bc:0b:84:f5:f0:54:21:dc:e8:1b:a1:37:72:9d:
         3e:e7:0e:27:c5:7f:78:7e:3d:02:5b:7a:03:c5:0b:fc:08:de:
         4c:76:c7:40:48:51:ab:a1:d4:5a:5e:1d:65:8f:c3:a4:c8:fe:
         8a:88:7b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:15:25 2025 by rpki-client