Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6/b163f5cb-3463-37e5-a115-19f140bcec69.roa
File:                     b163f5cb-3463-37e5-a115-19f140bcec69.roa (raw, json)
Hash identifier:          +xdwjcdHsgmxs4mXhr/PpMv9jR2tAqfNn637WFk+gVM=
Subject key identifier:   FA:FB:65:C4:B1:09:5D:BE:6E:07:A5:36:FE:F0:4C:DF:DD:D0:8D:D3
Certificate issuer:       /CN=52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6
Certificate serial:       010D0C9F4328584A74B5DDAEBF23555C74668630
Authority key identifier: C6:50:32:23:BD:70:43:DD:F2:32:F3:32:03:E7:20:2D:44:95:C3:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6/b163f5cb-3463-37e5-a115-19f140bcec69.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     63353
IP address blocks:        104.243.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:dd:ae:bf:23:55:5c:74:66:86:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=50c2e187-57b3-4c47-aebb-0346e830dbf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a7:77:6e:ba:0b:91:5e:90:6a:0a:1d:c6:b1:
                    66:73:79:6a:47:36:5b:ab:c9:13:fe:d6:3f:21:3c:
                    7f:3a:2c:b5:34:e1:84:14:5e:75:02:6c:3c:8e:5c:
                    42:e0:10:03:2a:9c:2c:be:81:5d:66:c8:52:7d:57:
                    52:e3:9d:0c:d4:a7:bb:83:fc:72:fb:87:f5:3d:09:
                    23:7e:bf:05:46:b0:e2:4a:8f:d1:94:8e:8c:a0:86:
                    9e:1f:5c:68:b8:3f:8f:66:19:52:28:14:ae:7c:58:
                    ea:de:b9:fc:26:b9:65:fa:70:ce:5d:98:c5:21:73:
                    05:c1:19:ca:f9:04:e8:11:43:74:8e:a4:d6:c8:52:
                    83:e8:b5:be:8e:0a:21:17:e0:62:f4:bb:29:bf:31:
                    0e:ce:f7:db:64:1c:25:2a:56:0a:9c:0c:38:b9:16:
                    a0:1e:02:51:7f:b6:44:ce:34:c1:e5:fa:2b:1a:ca:
                    3b:2d:3f:65:20:96:eb:6c:4f:6b:0b:93:00:a9:36:
                    05:da:73:b9:8f:cf:c4:82:27:71:ce:14:ec:b3:ec:
                    0a:70:8d:bb:1e:ef:a0:65:68:34:05:2d:8d:e1:db:
                    9a:b3:f3:b4:8c:ee:0c:aa:1b:ea:c4:15:67:f8:99:
                    c2:c6:a5:cf:13:71:56:51:e8:2c:59:36:97:f6:10:
                    92:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FB:65:C4:B1:09:5D:BE:6E:07:A5:36:FE:F0:4C:DF:DD:D0:8D:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6/b163f5cb-3463-37e5-a115-19f140bcec69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6.crl

            X509v3 Authority Key Identifier:
                keyid:C6:50:32:23:BD:70:43:DD:F2:32:F3:32:03:E7:20:2D:44:95:C3:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:26:d1:80:98:f2:26:17:36:f1:6e:1b:da:0f:af:eb:d3:9f:
         8a:17:0d:ce:ce:7b:2d:eb:09:25:8e:85:69:1f:5f:7c:5f:3d:
         a8:89:8f:5b:2f:99:0e:0e:5a:1f:e2:24:a4:eb:16:a9:06:54:
         7c:ae:77:32:df:47:11:38:0f:7b:3c:45:48:e6:01:03:b6:78:
         21:5a:d6:7d:4a:51:12:83:bf:ce:66:e0:7a:3d:9f:6b:ed:a3:
         58:cc:c4:2a:5c:de:72:03:5d:d3:6b:76:a2:55:ca:9e:20:0e:
         7d:26:91:ff:d1:e4:f9:5c:86:f0:24:39:48:22:4f:2d:7e:7b:
         9d:fc:7f:ed:6e:89:77:30:35:35:88:23:1a:98:31:c7:96:76:
         11:c2:93:82:1b:c9:64:85:d3:ef:ce:41:df:78:32:12:29:8f:
         b6:77:69:8a:87:d5:4b:e0:f5:62:1a:e8:47:a4:25:8b:04:2c:
         61:45:d0:26:e9:be:7a:88:83:c0:c8:c8:a2:39:26:8d:45:a5:
         a0:94:e7:84:3d:f8:6a:11:c1:a8:19:e1:5f:9c:1b:54:b6:c3:
         16:05:34:10:a3:53:74:51:60:c5:03:ba:71:92:c9:f4:54:5c:
         6e:16:f2:65:4a:f3:f2:3e:4f:e9:9b:29:60:88:32:1f:eb:fe:
         e6:2d:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 14:53:38 2025 by rpki-client