Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa
File:                     cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa (raw, json)
Hash identifier:          BkcFqrIGMaWJq0r3CCie3V9XvsNpHyPccfgF3hMe/Fw=
Subject key identifier:   17:9F:BA:AE:6C:DF:87:69:E3:E1:C3:05:A3:F7:40:13:A7:03:F0:95
Certificate issuer:       /CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
Certificate serial:       010D0C9F4328584902EC2E7398133CD8FE450200
Authority key identifier: A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     39937
IP address blocks:        23.160.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:2e:73:98:13:3c:d8:fe:45:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=374f74b2-fc81-44c7-a938-a64641749f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:36:7a:a0:47:2b:7e:ed:41:1b:ac:12:7d:fe:
                    0a:d4:3d:4e:37:e1:d3:13:20:2a:ce:ca:6c:df:25:
                    a6:e2:28:3b:f6:f4:14:58:f6:66:d3:b5:91:88:9b:
                    58:5c:c4:41:1c:d3:43:68:6c:9e:ff:1c:61:e3:1d:
                    2b:de:d7:ac:c8:e8:cd:4a:61:8c:e0:f2:50:c5:92:
                    9a:de:ef:e9:fb:da:ff:77:88:cb:02:30:2f:df:f4:
                    2c:3e:18:8c:8c:81:7d:47:24:93:77:65:cf:b7:12:
                    35:1b:c1:b3:3e:68:5c:ed:07:ef:fd:17:a8:73:61:
                    fb:6f:8e:01:fe:b2:21:d1:0a:06:de:ba:ae:c8:b5:
                    9c:39:d2:7a:d3:09:c4:67:58:63:af:1a:49:78:eb:
                    57:c4:bf:c4:b2:12:73:6f:b1:26:0d:f1:5c:fb:80:
                    d8:04:7c:15:1d:63:5e:56:97:18:40:23:b1:4b:e6:
                    f8:15:44:92:65:07:d5:ef:91:ce:ef:85:7d:41:cd:
                    ac:dd:4f:be:8c:5f:bc:85:94:29:32:9c:1d:45:a5:
                    62:e3:ce:39:2e:af:22:d6:42:8c:0e:27:eb:a7:18:
                    c9:53:bb:d8:51:ef:c8:7b:9b:4b:1e:c9:1c:37:db:
                    0e:b5:14:bc:1a:dc:92:84:11:5c:1c:73:29:34:40:
                    69:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9F:BA:AE:6C:DF:87:69:E3:E1:C3:05:A3:F7:40:13:A7:03:F0:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl

            X509v3 Authority Key Identifier:
                keyid:A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a9:97:14:5f:e4:58:d2:08:9a:8d:fd:19:25:63:df:af:1d:
         3f:c7:ba:90:52:4f:26:54:44:01:8f:1b:83:36:a1:76:81:81:
         c9:52:ff:6e:c3:17:9c:70:9b:5c:9b:6a:e4:f0:4e:41:d8:0c:
         32:b3:49:4a:c4:4c:09:56:38:3d:14:aa:7b:d8:bc:e7:a2:c8:
         ca:57:92:b2:a8:a6:b7:ec:ee:21:6a:c5:f1:d4:3b:24:ed:a7:
         ca:7f:8b:fd:bb:c0:bf:99:db:40:3a:b8:42:34:16:32:4c:75:
         b7:60:09:3d:8d:d2:48:fa:a4:a4:53:f9:90:cc:0a:21:23:f5:
         9b:45:32:c4:16:b1:82:c9:d1:78:d8:93:02:51:e6:37:88:c1:
         74:b6:fc:c4:cd:8c:36:01:46:2f:52:56:30:e4:cf:e1:8e:0b:
         9c:ee:a0:ee:70:53:4a:d8:8c:ec:10:7b:37:a0:01:fd:0b:a2:
         5c:dd:01:14:d4:12:76:35:ed:94:be:90:31:88:6b:68:d7:d0:
         ad:c6:d3:76:bf:2c:cf:a3:c7:d2:00:b5:5f:b8:45:12:c7:7f:
         f4:a4:9d:3c:70:19:da:c0:65:62:93:09:a7:e3:ca:bc:5a:38:
         5a:6e:9d:38:bb:65:52:28:ba:31:73:6f:69:77:fb:31:ec:6f:
         f6:66:09:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:35:08 2025 by rpki-client