Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/f1814fbb-6e62-36dc-9d54-d2183d591855.roa
File:                     f1814fbb-6e62-36dc-9d54-d2183d591855.roa (raw, json)
Hash identifier:          fwcM0rcSBCnY3luQjfN7u3QLFpjlVy1r0ch1NrcUho8=
Subject key identifier:   51:A4:D8:3C:F8:01:99:7D:C1:4B:F5:21:56:A9:65:EA:C1:BB:C1:91
Certificate issuer:       /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Certificate serial:       010D0C9F432858490881708E8BAB8E1A5140D9C0
Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/f1814fbb-6e62-36dc-9d54-d2183d591855.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     11659
IP address blocks:        169.147.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:70:8e:8b:ab:8e:1a:51:40:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=8a0a0f0a-101f-4585-adb6-17124f76020b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:04:8a:64:8b:28:9c:68:8b:bb:51:fe:fb:98:
                    9a:68:1c:bb:bb:ce:24:0c:f7:f8:62:4a:ba:57:b2:
                    4a:e9:08:16:47:26:56:ff:c4:01:31:e2:b3:1e:ac:
                    a4:3d:6d:6d:08:bb:46:27:e6:82:d3:73:28:ce:8a:
                    6f:37:78:c9:18:8b:3a:bd:94:e9:29:bf:69:74:a1:
                    65:a5:5a:6e:02:20:b9:da:fc:7a:9f:6c:51:b5:80:
                    c0:5b:69:1d:cd:d6:a4:5c:48:69:6e:4d:0c:62:1f:
                    32:33:30:16:88:fa:f6:d7:d7:96:c4:3f:0b:71:82:
                    a4:49:64:88:e4:76:50:94:a4:2a:24:21:14:6c:1e:
                    bc:5f:9a:54:d5:a0:54:2b:c0:5e:70:65:71:8e:d7:
                    32:77:d2:a8:f1:25:5a:e3:df:c5:03:af:08:87:33:
                    8c:a1:f4:a4:ee:44:35:d1:70:6e:97:a6:a8:05:07:
                    06:e8:7d:3d:fa:d7:cf:87:70:ed:91:f7:79:81:60:
                    ee:5d:22:2c:d4:42:35:ab:43:ba:ba:31:fc:b6:e0:
                    25:fa:d0:0e:7e:50:1b:a2:6a:e9:f0:98:9d:f9:eb:
                    62:b9:c6:d4:ff:3c:60:85:9a:53:1d:75:b2:fa:58:
                    84:27:2e:50:2e:7a:a7:3e:0c:e7:d4:8b:30:c0:67:
                    5d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A4:D8:3C:F8:01:99:7D:C1:4B:F5:21:56:A9:65:EA:C1:BB:C1:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/f1814fbb-6e62-36dc-9d54-d2183d591855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl

            X509v3 Authority Key Identifier:
                keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.147.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ec:45:5d:e8:5c:b2:20:d8:25:ba:32:93:d6:12:79:b6:c4:
         36:92:32:cc:87:da:7e:e8:e3:43:9c:6b:ed:23:c6:b1:6e:f7:
         fb:79:02:e8:78:25:99:4b:a2:fd:02:62:ef:9a:a9:b8:90:d2:
         4f:fe:f3:37:aa:b0:25:7f:19:a9:c6:5d:ae:c6:7e:9e:1a:64:
         a6:d0:0b:85:f5:f9:ed:a3:b4:e4:79:f1:45:39:54:1e:86:06:
         39:a0:1e:44:35:fd:27:ad:02:a9:2d:68:56:fb:01:10:66:0f:
         f1:25:f8:7e:d0:ab:be:cd:d9:94:a3:72:d2:62:1e:27:8c:1a:
         b8:44:2c:8e:bb:18:ad:cf:d8:02:48:c0:b7:f0:06:81:7e:f4:
         38:16:e6:f1:7a:38:b7:bc:bc:3b:dd:83:20:3f:ec:be:11:87:
         03:48:3b:8d:a9:7e:99:b4:d2:0c:34:72:48:8d:5b:05:32:81:
         65:27:17:9a:e0:12:76:a8:fb:af:c7:70:3e:4a:41:25:db:bd:
         8f:c7:95:51:87:35:08:1c:de:65:27:a1:43:64:0a:74:dc:55:
         05:82:78:9f:fe:4b:40:bc:a5:03:1e:97:c3:a6:d0:ff:e8:e3:
         19:69:9d:86:78:47:92:ec:e0:1a:57:4e:e1:03:8f:de:d7:1a:
         f2:1e:35:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:04:29 2025 by rpki-client