Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/8ebf2fea-2a55-36d0-9103-e20032a52fd8.roa
File:                     8ebf2fea-2a55-36d0-9103-e20032a52fd8.roa (raw, json)
Hash identifier:          e0EFVzGtMzPWWLvgIG5w3JXyDbDB6qkzPBeDX3gtHhE=
Subject key identifier:   D8:22:27:D6:2B:D5:F4:DE:1B:3E:DE:71:9E:F4:DF:CF:19:C6:6A:5F
Certificate issuer:       /CN=e82e3f50-c42b-4af6-9e20-1e91adc1402f
Certificate serial:       010D0C9F4328584882808A489F535AAB9E47E480
Authority key identifier: 09:75:7D:13:70:06:AD:89:7C:73:85:AB:E5:08:33:9D:A8:1F:FF:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/8ebf2fea-2a55-36d0-9103-e20032a52fd8.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     14155
IP address blocks:        192.208.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/e82e3f50-c42b-4af6-9e20-1e91adc1402f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/e82e3f50-c42b-4af6-9e20-1e91adc1402f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:8a:48:9f:53:5a:ab:9e:47:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82e3f50-c42b-4af6-9e20-1e91adc1402f
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=4e0134ba-ea80-4384-a81a-29a0877d83ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5e:de:36:02:f6:fb:0d:85:7b:04:88:60:d9:
                    10:a8:b6:67:b0:36:92:38:c8:40:a0:1b:1f:c9:0d:
                    26:41:da:27:6e:12:e3:10:44:31:11:25:b5:d4:b0:
                    82:09:7b:0e:f4:08:63:b2:f4:c2:ba:0b:15:81:93:
                    ba:77:5b:03:26:79:e0:25:58:60:4f:87:ce:3c:34:
                    b3:3a:e7:15:70:e1:e1:14:0b:87:d5:b4:b1:77:e4:
                    bd:53:b9:68:f7:8b:3d:28:cb:09:38:04:c7:04:69:
                    6c:a6:b2:08:83:5a:0e:22:51:55:c5:28:5e:d9:97:
                    bd:6c:29:44:cd:4c:9c:fb:01:ac:bc:5d:ab:4a:0d:
                    47:51:d9:cb:9c:c3:ff:5f:c4:6f:8e:5f:4d:b1:88:
                    d9:ce:c6:01:01:ca:1a:24:d2:52:ac:e4:96:f3:56:
                    df:77:8a:fc:9b:5e:bf:6e:cf:c8:09:81:df:48:11:
                    e2:2d:e0:32:ea:3b:9b:6e:f8:10:17:f3:52:39:b1:
                    42:42:56:1f:2e:48:c3:50:9d:e5:3e:10:50:d0:bd:
                    03:df:e1:e9:37:98:53:1c:e3:da:9d:d4:9a:32:3c:
                    5c:a0:5a:48:29:34:5d:75:8c:08:a5:1e:1e:0b:bb:
                    0e:69:3f:40:ac:8a:7f:11:8b:6c:bd:b0:53:d2:35:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:22:27:D6:2B:D5:F4:DE:1B:3E:DE:71:9E:F4:DF:CF:19:C6:6A:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/8ebf2fea-2a55-36d0-9103-e20032a52fd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/e82e3f50-c42b-4af6-9e20-1e91adc1402f.crl

            X509v3 Authority Key Identifier:
                keyid:09:75:7D:13:70:06:AD:89:7C:73:85:AB:E5:08:33:9D:A8:1F:FF:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ac:47:92:7b:47:f1:cd:e2:c3:72:69:8e:95:22:15:58:c9:
         e1:0a:09:1c:1e:6a:16:6e:4c:34:5d:4a:8f:d1:7c:80:65:73:
         2f:3f:b5:69:0d:f2:65:d0:a0:d2:b3:8f:d3:97:89:a3:9f:fe:
         33:58:01:df:1c:3e:4a:c6:0c:6a:a9:7e:85:64:9f:61:63:8d:
         79:99:c6:5e:84:72:8d:56:4b:d2:62:24:bd:b0:f4:c7:ba:17:
         2c:91:27:90:bc:b0:d1:bb:0d:be:8f:71:23:3d:30:3e:ae:c2:
         d9:1f:84:9d:e1:87:e7:3a:50:94:71:2b:b6:94:e3:44:11:da:
         6b:d3:a5:7e:1c:3f:fb:2f:56:d0:c7:69:82:ec:51:1d:6b:9e:
         2a:89:fc:5a:93:a3:da:d9:47:e3:9d:27:7b:8f:10:03:42:59:
         56:bc:0a:8a:3c:ed:85:38:17:6d:0c:79:bd:3e:dc:4c:f1:9b:
         f9:17:cc:84:4d:fe:b2:0b:58:01:71:74:f4:7f:b8:b3:9e:19:
         1b:2f:6c:9f:30:ee:cc:ea:e8:60:25:46:c5:cf:f1:fb:25:39:
         ae:81:a7:39:5b:1e:22:c1:3a:4a:4e:38:9e:f6:b3:36:a1:f6:
         e5:63:cc:41:a8:6b:3a:bb:5e:57:61:bd:81:8f:b3:e6:17:b1:
         92:8a:e2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:39:24 2025 by rpki-client