Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/cb1cf518-1add-3c7b-8bf6-803c23c623ee.roa
File:                     cb1cf518-1add-3c7b-8bf6-803c23c623ee.roa (raw, json)
Hash identifier:          v2aF+cPO9ZNc7YJTV0Z2vNrGLROYANinV0vY10ZbGoA=
Subject key identifier:   D4:B6:03:35:2F:94:1E:8F:7A:CB:99:3D:22:75:04:CC:CC:8B:D0:03
Certificate issuer:       /CN=acfb2995-9ee5-423c-a521-8d6490303e2d
Certificate serial:       010D0C9F43285848DD3BA55F9F3C7141BB3C0B00
Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/cb1cf518-1add-3c7b-8bf6-803c23c623ee.roa
Signing time:             Thu 13 Feb 2025 02:00:40 +0000
ROA not before:           Thu 13 Feb 2025 02:00:40 +0000
ROA not after:            Wed 14 May 2025 01:00:40 +0000
asID:                     32277
IP address blocks:        204.50.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:3b:a5:5f:9f:3c:71:41:bb:3c:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d
        Validity
            Not Before: Feb 13 02:00:40 2025 GMT
            Not After : May 14 01:00:40 2025 GMT
        Subject: CN=cd69fcc6-6707-42dd-81c9-f3928cb37c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:be:ed:2c:1b:5d:f8:3c:9a:32:e8:67:79:
                    3f:07:31:ee:66:12:c0:41:71:0a:11:84:c9:69:92:
                    88:55:3f:b9:06:35:c3:78:d5:6f:c2:85:fc:47:30:
                    1f:ec:ae:93:6f:a9:71:33:d2:17:e6:19:15:e9:4d:
                    65:8b:10:7c:2a:ae:8b:6f:50:65:b7:cb:46:3e:df:
                    7d:f5:1e:1f:e8:b1:00:84:f6:27:7e:23:98:58:61:
                    1b:51:bd:22:7a:d7:34:1e:78:65:9a:a2:eb:43:40:
                    1e:82:07:80:7d:3e:84:5e:27:c0:da:a1:b0:89:b5:
                    1d:99:d6:31:45:58:cb:16:7a:27:16:2d:29:6b:0b:
                    a2:7e:8f:8a:b3:3c:4d:f6:a5:40:1f:62:55:ab:4b:
                    1a:d2:68:62:99:41:01:cf:24:a7:c5:01:9f:76:bf:
                    54:73:a3:7d:00:cf:ce:53:3c:bc:a7:2c:06:34:28:
                    1f:98:0d:f2:7f:de:6f:12:67:b9:58:b9:03:38:be:
                    eb:f1:a8:a1:cd:6d:fb:d3:41:2f:d9:2b:41:9c:fa:
                    cb:f6:56:52:e4:67:24:7d:eb:1c:8d:61:c2:a3:bb:
                    6d:7c:01:e0:c0:c0:ff:eb:4e:e9:25:c7:0a:94:fe:
                    fb:da:86:f9:7c:b4:73:5a:e3:51:e7:52:ac:a0:ac:
                    12:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B6:03:35:2F:94:1E:8F:7A:CB:99:3D:22:75:04:CC:CC:8B:D0:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/cb1cf518-1add-3c7b-8bf6-803c23c623ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl

            X509v3 Authority Key Identifier:
                keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.50.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:67:e4:72:8a:67:34:ae:73:51:fa:f0:a6:64:7a:d3:fd:f8:
         f2:70:28:94:5b:69:5a:fd:30:68:47:65:ab:af:11:ca:4e:0a:
         f2:17:da:e5:79:ba:fc:0d:a1:38:19:b4:51:07:1f:a8:27:43:
         99:6f:33:9f:e3:dc:73:a3:a9:16:5e:0d:d5:ec:47:27:e6:37:
         73:21:b9:2e:ae:04:0b:cd:94:98:83:c0:af:b0:64:2e:58:14:
         29:a2:cf:3f:9b:29:7a:08:29:d8:d7:7f:22:14:3f:af:71:1b:
         50:a2:c7:eb:58:ba:f0:52:e1:fc:03:fb:09:2f:91:4a:3b:e0:
         20:66:62:04:95:91:e3:c2:54:5f:a0:69:9b:50:a2:41:af:a2:
         e6:25:84:01:55:a2:b0:13:6c:ae:fc:ff:5b:00:3d:16:17:9f:
         20:f2:2d:6f:dc:2b:8e:0c:ab:92:c0:38:99:f1:ee:65:ad:bb:
         4f:73:c3:7e:fb:95:7e:d6:06:ac:8b:4a:b7:66:bd:b3:ce:fb:
         df:10:61:0b:ac:ff:e7:30:f5:e9:93:84:a2:d7:e5:a6:0a:7b:
         08:3c:94:a5:a9:0e:98:c0:8f:1f:e3:db:1c:67:6c:61:45:5f:
         86:56:be:3b:f9:81:e1:66:ef:dd:99:74:c7:79:7e:ea:43:e2:
         29:f0:f6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:31:52 2025 by rpki-client