Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b555a8fe-9a4c-3e82-a229-0b3d26a61544.roa
File:                     b555a8fe-9a4c-3e82-a229-0b3d26a61544.roa (raw, json)
Hash identifier:          yyQC1WvnzCHYIgG8mem0rxNv0X2+7zQSFDDKeututQQ=
Subject key identifier:   55:56:9F:AB:D8:7F:D3:5C:9A:BE:9D:F5:30:62:7C:31:E2:CA:A4:75
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848BBBB7A18A3DBB76100762AC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b555a8fe-9a4c-3e82-a229-0b3d26a61544.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     852
IP address blocks:        75.154.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:7a:18:a3:db:b7:61:00:76:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=e3928c1a-2e83-4a06-90fd-5ee1fdf0e6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6e:c7:10:4b:17:41:60:23:ef:d0:69:4c:9e:
                    74:d9:97:85:3b:d7:84:c5:9d:85:2c:41:f1:1e:22:
                    48:ff:cf:7e:44:2d:4c:99:d6:61:a7:79:ea:a5:70:
                    04:a9:86:45:c7:23:fe:79:9f:44:e6:f0:e5:82:f4:
                    9b:de:57:85:e6:85:e7:04:73:84:3d:92:aa:30:a6:
                    3e:7e:2e:88:2b:07:7f:b3:dd:38:93:f3:84:e9:50:
                    40:d8:bf:78:4d:82:90:06:73:56:7e:ed:ff:3d:21:
                    12:c3:8c:f9:47:39:8b:63:e7:c5:ed:4c:4e:98:27:
                    ad:4f:93:f8:5d:6b:14:b7:c0:09:8d:8b:12:dc:2d:
                    5c:dd:40:d7:34:8f:dc:ed:9e:58:36:5c:b4:7e:b3:
                    87:6a:3d:19:94:46:33:f7:d4:a5:96:b9:d1:46:29:
                    34:04:40:86:28:21:37:92:df:a6:5e:a0:fc:45:c1:
                    0c:6f:4a:41:67:3e:c1:28:7d:94:a1:c0:c1:1b:29:
                    b0:8f:ec:d6:01:e3:67:e6:40:32:df:86:25:3a:ab:
                    88:8c:c6:b9:a9:3e:d7:95:2d:ed:bd:3a:7c:57:fe:
                    c7:81:73:35:95:4b:c4:9d:56:ab:e7:a3:d6:7f:77:
                    02:18:8d:ee:ae:4f:9e:6d:8a:c3:22:07:19:b4:7d:
                    f4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:56:9F:AB:D8:7F:D3:5C:9A:BE:9D:F5:30:62:7C:31:E2:CA:A4:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b555a8fe-9a4c-3e82-a229-0b3d26a61544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.154.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:d6:b0:32:88:dd:e1:0b:09:e2:17:c6:60:69:e1:38:cb:46:
         49:fe:b1:1c:07:0b:7d:ad:8d:62:28:20:a6:e7:93:08:ba:db:
         fb:0e:c6:d5:df:a3:9a:d0:96:1b:38:7f:be:05:fa:12:a8:7a:
         2a:9d:7a:fd:fa:8c:dc:c3:51:de:ce:55:e7:b5:90:c6:a0:52:
         2a:53:53:31:ef:a1:14:7c:c6:2f:e4:e7:cd:05:5f:33:ba:27:
         ab:42:13:d6:8f:1e:b0:c0:24:c6:38:63:6e:92:85:b2:be:d8:
         f4:c5:be:8b:de:34:52:0e:69:07:74:f2:c7:04:7e:7e:a1:b3:
         0f:9f:f0:26:e4:d7:4b:2e:77:63:5b:c5:f0:b2:df:10:4e:87:
         1d:6d:77:df:a4:7b:92:39:77:9c:d6:64:0e:b6:24:2d:1f:cc:
         ed:84:46:53:84:6f:87:b2:71:99:39:b9:8e:7f:a8:c2:ee:7c:
         55:73:bc:87:4d:07:69:12:15:3a:4f:76:f6:e3:f4:00:9e:04:
         f8:40:e5:b4:ad:b0:0c:db:02:46:af:75:7c:22:12:7a:e9:82:
         81:88:fa:9b:c7:d0:98:65:95:6b:14:d7:73:29:29:25:07:af:
         f9:80:43:d4:5e:73:7a:2c:10:c4:7b:70:85:56:7f:f7:4d:44:
         bf:f6:28:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:31 2025 by rpki-client