Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/5ec6f37d-2f2a-301a-bbcb-82b65ea635c5.roa
File:                     5ec6f37d-2f2a-301a-bbcb-82b65ea635c5.roa (raw, json)
Hash identifier:          aT7nmXVa0RsJZLuG7HpfI0YycALF6691DeHp3WCzW24=
Subject key identifier:   29:8E:3D:FD:D3:E1:FB:D6:AD:26:17:0C:04:35:E1:90:34:C0:31:63
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F4328584913AC391B2699126F48C17A3C
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/5ec6f37d-2f2a-301a-bbcb-82b65ea635c5.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     22925
IP address blocks:        208.118.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:39:1b:26:99:12:6f:48:c1:7a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=cf9d3f9f-261a-4227-9e65-2085c3393d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f7:a1:ec:7f:b5:6e:01:1a:7b:ce:12:bd:ac:
                    73:2e:26:b3:ae:54:89:32:8a:d5:4e:8c:ca:e9:e0:
                    33:97:af:6e:fc:4b:71:5c:06:11:ae:fb:2a:ff:49:
                    d5:80:bb:b7:5f:01:33:d9:d0:17:10:75:b8:e1:71:
                    e9:5f:ac:93:74:08:6b:ee:16:65:89:e1:5f:02:6c:
                    5f:31:e7:31:a2:86:80:cc:eb:45:44:5c:41:89:6b:
                    4e:df:1a:7b:24:fc:28:ea:2e:f0:b2:4c:1a:db:d0:
                    5a:9a:11:48:e7:03:ea:41:0f:ac:ee:ad:8b:19:40:
                    0b:71:39:c5:19:72:5d:cb:e2:22:e2:2c:f6:26:61:
                    8a:c5:5d:08:34:91:fd:3f:15:d4:46:f8:a3:bf:08:
                    fd:0f:85:12:4b:b1:6f:83:52:a5:e1:a4:80:57:34:
                    5a:f2:d2:44:c7:6a:fa:2a:30:c3:f0:1a:cb:23:f2:
                    bd:f6:97:b6:8b:da:b2:e6:e5:ae:cc:d1:02:00:de:
                    df:22:2b:11:de:7b:11:9b:73:6f:84:50:9c:85:7d:
                    c1:97:90:31:a3:35:45:20:e7:3d:83:e3:72:a0:78:
                    cd:22:5c:0b:ab:b5:1a:d3:cf:a5:5d:84:11:e2:b2:
                    2f:25:bc:fa:2f:67:56:45:c9:70:5e:bc:ae:c0:d6:
                    64:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8E:3D:FD:D3:E1:FB:D6:AD:26:17:0C:04:35:E1:90:34:C0:31:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/5ec6f37d-2f2a-301a-bbcb-82b65ea635c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.118.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:7f:a8:62:b8:25:c9:bb:22:07:5e:2a:b2:8e:8a:a6:da:b2:
         0f:7d:92:e9:1a:6e:e5:9f:cf:9a:f9:bf:2f:d4:dc:c3:b5:f4:
         3d:93:80:2d:b3:86:fe:ee:f5:b9:7b:07:0c:58:23:84:05:ab:
         a7:60:1a:92:5f:57:c7:d2:bc:fe:e5:eb:ec:3b:1d:5c:88:70:
         38:9a:9f:df:6b:87:bd:74:43:c7:86:39:6f:2c:94:49:ea:8b:
         0d:3d:3f:29:28:9c:e4:92:63:07:43:f7:06:31:38:1c:4e:22:
         ea:4c:b1:06:3a:b9:06:dd:5b:47:7c:b2:db:a1:b8:27:cb:47:
         d3:7f:d1:c1:82:68:cc:01:9e:97:b3:b3:2c:7e:68:8d:46:cf:
         9c:65:eb:ac:fc:a8:95:37:c8:2f:ce:e3:c9:40:46:dc:9e:37:
         b4:e2:89:69:d9:ba:9b:59:24:46:3c:ab:bd:79:11:3a:c2:2d:
         22:8d:43:d4:f1:20:5f:c5:da:51:29:5c:c9:2b:3d:21:d5:7f:
         bf:26:66:28:10:97:c4:60:2a:bd:7a:76:ca:9c:e9:05:f7:6b:
         72:2e:1d:aa:6f:45:fd:64:5f:4b:db:ba:2d:bd:89:b2:ac:6e:
         a7:e4:b5:5c:d1:c3:f6:39:0a:37:f9:2a:30:a1:de:5a:80:fd:
         6a:15:6c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:46:06 2025 by rpki-client