Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/31b6477c-7bf1-3ab7-9c59-0ce33f022f9c.roa
File:                     31b6477c-7bf1-3ab7-9c59-0ce33f022f9c.roa (raw, json)
Hash identifier:          5FOgS1Z9MznkJw1AM49SKJs86tSUSXeXRVwyMD+h2A4=
Subject key identifier:   E9:B7:49:29:A6:E6:0C:73:97:6C:D8:35:40:AA:FB:4F:9C:97:4C:2A
Certificate issuer:       /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Certificate serial:       010D0C9F432858493C09422B244A81EE8A5D6B80
Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/31b6477c-7bf1-3ab7-9c59-0ce33f022f9c.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     15204
IP address blocks:        75.102.160.0/19 maxlen: 19
                          75.102.160.0/24 maxlen: 24
                          75.102.161.0/24 maxlen: 24
                          75.102.162.0/24 maxlen: 24
                          75.102.163.0/24 maxlen: 24
                          75.102.164.0/24 maxlen: 24
                          75.102.165.0/24 maxlen: 24
                          75.102.166.0/24 maxlen: 24
                          75.102.167.0/24 maxlen: 24
                          75.102.168.0/24 maxlen: 24
                          75.102.169.0/24 maxlen: 24
                          75.102.170.0/24 maxlen: 24
                          75.102.171.0/24 maxlen: 24
                          75.102.172.0/24 maxlen: 24
                          75.102.173.0/24 maxlen: 24
                          75.102.174.0/23 maxlen: 23
                          75.102.174.0/24 maxlen: 24
                          75.102.175.0/24 maxlen: 24
                          75.102.176.0/22 maxlen: 22
                          75.102.176.0/24 maxlen: 24
                          75.102.177.0/24 maxlen: 24
                          75.102.178.0/24 maxlen: 24
                          75.102.179.0/24 maxlen: 24
                          75.102.180.0/22 maxlen: 22
                          75.102.180.0/24 maxlen: 24
                          75.102.181.0/24 maxlen: 24
                          75.102.182.0/24 maxlen: 24
                          75.102.183.0/24 maxlen: 24
                          75.102.184.0/23 maxlen: 23
                          75.102.184.0/24 maxlen: 24
                          75.102.185.0/24 maxlen: 24
                          75.102.186.0/23 maxlen: 23
                          75.102.186.0/24 maxlen: 24
                          75.102.187.0/24 maxlen: 24
                          75.102.188.0/22 maxlen: 22
                          75.102.188.0/24 maxlen: 24
                          75.102.189.0/24 maxlen: 24
                          75.102.190.0/24 maxlen: 24
                          75.102.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:42:2b:24:4a:81:ee:8a:5d:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=bd48e1c3-3160-4224-baa8-5480d557c911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:2d:a4:d1:0a:08:54:02:10:58:f3:ec:85:
                    6b:83:46:39:d0:48:26:c2:4d:76:cb:66:65:0a:1a:
                    78:aa:64:7e:23:7d:f8:15:06:5a:f8:17:13:04:86:
                    f6:8d:3b:bb:97:50:ed:8b:50:73:26:fa:b1:a4:d6:
                    14:89:cb:4a:9b:53:23:ec:92:dc:e8:0b:d7:20:e7:
                    db:fd:3f:0b:e5:39:a8:2a:23:4c:84:d5:07:c4:d3:
                    84:ff:63:81:47:4c:0a:c4:c7:34:bb:f0:de:4a:bc:
                    ce:1a:70:56:1a:fb:37:e4:d5:12:15:c0:c7:d1:20:
                    bb:d4:11:48:f9:33:9e:9a:8e:93:5a:0e:4e:a7:83:
                    92:5a:74:b7:44:10:e7:ec:79:c3:c0:e7:6b:4a:b9:
                    d2:bd:3f:4a:3f:68:36:30:cd:3e:8d:a5:e3:78:8c:
                    dc:8d:07:52:01:04:d4:95:de:da:a9:5b:25:4e:a9:
                    83:07:b7:8f:0f:06:33:01:31:03:3e:99:a4:f7:11:
                    5b:83:40:f4:54:fa:a9:23:2c:b7:f1:b5:71:9e:ac:
                    1e:f2:f6:03:12:dc:ae:75:d9:42:18:ba:bb:08:d8:
                    7f:ac:6d:64:13:14:36:4c:9f:c8:78:13:d7:50:b0:
                    32:97:b2:7e:b4:1b:c3:28:d9:f9:73:fc:df:c3:a3:
                    b0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B7:49:29:A6:E6:0C:73:97:6C:D8:35:40:AA:FB:4F:9C:97:4C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/31b6477c-7bf1-3ab7-9c59-0ce33f022f9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl

            X509v3 Authority Key Identifier:
                keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:8f:7c:56:da:64:93:78:18:03:be:27:3c:50:8e:ac:66:6b:
         53:2e:d6:a3:dc:7f:e1:0b:9d:b5:3d:33:87:c0:48:51:fe:03:
         ed:2c:88:6c:a4:97:71:1d:8e:18:7e:ed:ed:ed:e8:ae:81:17:
         bd:b4:c6:dc:dc:26:68:4e:13:eb:e9:11:76:54:76:8a:b1:b2:
         aa:fb:c4:66:43:a1:ba:57:4a:15:b9:9a:a5:9e:0f:ab:a0:63:
         f2:99:5e:19:15:71:d7:5f:92:c7:fb:ab:91:43:aa:cf:32:12:
         a7:f3:35:5b:08:60:23:7c:8b:4e:ca:e8:f6:6c:c8:ec:a1:31:
         33:fb:49:8a:84:ca:76:85:e5:c1:ca:3f:c4:5a:99:0d:12:29:
         2a:1c:70:40:e5:6f:14:01:98:b8:02:e4:5d:e5:f8:33:2e:d0:
         2b:bd:82:94:6f:94:2b:33:c4:74:ac:38:b7:02:07:04:c7:3e:
         cc:93:cb:fe:a5:fe:14:51:e0:85:b9:52:96:2f:33:23:a9:19:
         3e:36:ac:67:92:8d:3a:1e:fe:a5:4d:ae:83:50:e4:1b:30:2f:
         1d:c8:bd:1a:53:42:ab:b2:b5:0f:e9:65:e9:d8:44:5e:33:bc:
         a6:1f:c0:31:b9:03:c1:03:17:1e:49:8a:e5:14:35:22:e2:92:
         74:bc:f9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:13:08 2025 by rpki-client