Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/3175a53a-b9a0-3c0a-8046-f2ad11a7a4ad.roa
File:                     3175a53a-b9a0-3c0a-8046-f2ad11a7a4ad.roa (raw, json)
Hash identifier:          pHngi8eCWST+VN2gi8WHnGG4Aqbl6cKpC3LFGIYzKHU=
Subject key identifier:   5D:9C:B4:9C:02:0C:1B:A5:79:EA:5A:D1:B8:4B:FF:4F:8D:7C:1E:1C
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F43285849244E857392B26A37004FC400
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/3175a53a-b9a0-3c0a-8046-f2ad11a7a4ad.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     58182
IP address blocks:        199.15.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:85:73:92:b2:6a:37:00:4f:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=84ba9145-217e-4fdf-b217-ba84d59b653c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:aa:ce:26:52:ff:07:8f:b4:4a:c7:38:69:77:
                    0f:e9:3e:b5:14:fb:34:1d:0b:47:bd:61:ee:79:6e:
                    6d:5d:79:30:57:d7:1e:c7:84:90:37:d4:2f:57:f8:
                    0f:50:70:89:70:b0:e2:0a:cb:7d:60:0d:be:77:09:
                    80:11:e6:ea:98:80:db:2f:d1:d7:70:4b:81:21:d5:
                    7d:5c:60:7f:2f:55:02:ec:29:15:b4:22:83:4a:29:
                    3c:03:13:ab:55:fa:de:69:7f:c4:41:97:59:e2:44:
                    e9:6f:97:72:79:2d:26:bb:3d:d8:70:2e:c8:c6:e0:
                    04:4f:dd:89:44:c1:83:3d:fc:2a:6d:96:f8:53:0d:
                    31:4f:a7:92:37:94:9c:ef:82:f9:30:62:2f:f9:b6:
                    d6:ca:59:2f:26:3b:2b:b8:12:46:c8:e4:69:6d:cd:
                    27:4d:b5:1f:f8:2b:4f:60:8c:b6:83:b6:60:72:08:
                    3e:26:f3:16:20:1e:1d:76:96:49:58:93:b7:a2:e1:
                    6e:6c:c0:46:c1:4f:c7:85:e2:a6:77:d9:eb:8d:22:
                    9d:d7:c8:48:70:5d:92:06:bc:69:db:ee:b2:89:f4:
                    11:d6:f6:b2:05:af:e3:72:7a:80:d7:c0:06:d7:b1:
                    18:80:be:a9:f7:87:4d:6b:b1:8c:af:70:33:e8:8d:
                    7e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9C:B4:9C:02:0C:1B:A5:79:EA:5A:D1:B8:4B:FF:4F:8D:7C:1E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/3175a53a-b9a0-3c0a-8046-f2ad11a7a4ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c4:19:ba:38:4a:7b:a4:9c:65:96:46:47:70:92:3b:5a:0d:
         6b:6f:c7:f6:67:b5:25:64:2f:bb:b1:be:67:47:18:81:73:43:
         bf:59:d4:c8:2e:5b:36:1c:b6:f1:a7:52:e3:37:b2:f3:2b:06:
         a3:b2:f0:61:66:eb:66:7a:e1:b4:ad:b2:48:b7:d2:2a:52:16:
         8b:ed:71:f7:1d:37:d8:79:61:e5:13:b3:5f:25:8e:bc:cc:1b:
         e7:4d:79:d8:3e:e9:8f:42:fb:ff:c1:a4:26:02:23:02:f9:8b:
         72:fd:f6:31:12:e4:3c:47:ec:07:a3:76:be:fd:fa:17:8d:b5:
         77:f3:d5:0e:ae:19:29:4d:8a:4a:d1:10:35:6f:56:6d:05:4c:
         f7:39:f8:2f:12:43:3f:07:32:da:46:9a:0e:d6:3d:c9:4d:1b:
         61:af:2d:b2:c6:05:49:6a:73:cf:b6:e4:8a:23:f5:b0:02:24:
         ac:5e:b1:7c:68:5f:d5:1b:f6:9f:bc:97:d3:e8:e9:9e:d0:24:
         93:bd:68:72:80:66:e7:08:f9:d2:e7:82:9d:63:5f:6b:89:da:
         8a:62:f0:fb:80:62:fc:2c:85:e5:df:03:89:1c:6c:3a:95:3d:
         42:37:56:f0:3c:a7:0a:37:2c:6e:54:98:cf:0e:68:cf:db:fd:
         a4:56:a9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:24:42 2025 by rpki-client