Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/e137a75e-e0bf-3df0-91cc-ef2ce429f6b0.roa
File:                     e137a75e-e0bf-3df0-91cc-ef2ce429f6b0.roa (raw, json)
Hash identifier:          ItDOQwHE8wVE1ofQ57hseVXhQG5thYn7+7GHZF6VkRg=
Subject key identifier:   83:D9:DA:5A:B3:E2:C6:74:B0:6A:09:57:A8:0A:2B:EF:FC:DB:88:21
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F432858494CC9490E5FE8F77DCDA48E00
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/e137a75e-e0bf-3df0-91cc-ef2ce429f6b0.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     11269
IP address blocks:        200.1.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:49:0e:5f:e8:f7:7d:cd:a4:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=f7f6812e-a31b-49fc-9211-951d9ebe251e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:22:7b:bf:5e:56:8c:48:1d:e1:9a:28:19:
                    37:31:0d:31:90:de:55:4f:8e:3f:ea:ce:82:00:b6:
                    f2:46:b8:c8:77:66:4d:81:c1:81:5c:c2:43:06:c1:
                    da:ac:40:ba:33:97:53:bc:4d:05:e6:6e:87:93:0e:
                    93:9e:bf:24:d0:52:7c:c3:96:d0:05:68:15:1f:9e:
                    26:c4:a0:3d:2c:be:c8:a1:b7:75:58:86:92:70:6e:
                    ab:8e:cc:45:c3:be:c2:c3:87:a6:f4:9c:0c:99:ca:
                    a5:b9:19:86:93:45:61:3e:af:89:65:27:ba:7b:da:
                    2a:e0:13:7a:ef:b8:c9:53:ad:ee:ea:cd:e0:59:a6:
                    60:f5:e8:b8:63:45:35:8e:8d:94:0f:1d:5e:4f:81:
                    9c:8f:f5:9e:3b:ad:ba:43:cc:e4:d4:d1:53:a9:62:
                    75:54:42:b8:6f:47:55:c5:3c:46:25:80:5a:ee:59:
                    c4:e7:bd:5c:8c:7e:9a:38:43:f7:5d:36:55:cd:9e:
                    97:6b:ac:05:ae:59:5a:27:01:f8:22:e6:e2:dd:b9:
                    9f:af:58:c4:b9:40:99:fa:5b:bd:24:17:4e:f6:ed:
                    a8:90:14:53:ed:2e:f3:89:68:74:4a:3a:19:30:8c:
                    8f:95:7c:cf:28:6a:3d:0d:f7:be:74:60:bd:50:67:
                    b3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D9:DA:5A:B3:E2:C6:74:B0:6A:09:57:A8:0A:2B:EF:FC:DB:88:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/e137a75e-e0bf-3df0-91cc-ef2ce429f6b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:3f:dd:82:77:d3:98:db:08:e6:51:e3:a0:0e:c5:b9:fb:26:
         50:61:b6:86:30:24:14:2c:30:e0:d6:48:20:c9:94:70:cc:3c:
         9d:6d:ab:6a:97:72:6e:c9:f9:43:d1:54:ff:a9:8c:fb:63:0e:
         19:95:42:0b:f9:91:76:b6:7a:a0:78:ab:5c:6f:59:2a:ff:45:
         70:fa:c3:8f:49:a5:1f:c6:49:77:2f:a6:2d:22:78:6c:a3:49:
         4e:ca:28:46:c5:b3:cc:5e:77:fe:91:32:9b:bb:ef:89:6e:63:
         cf:50:c7:ac:75:74:80:5f:c1:71:13:61:d3:62:a5:5e:f8:b0:
         83:fd:e4:48:1e:d4:24:9a:c7:ef:a6:31:5b:0f:6e:05:05:c3:
         ff:19:86:52:b5:d6:4c:4b:56:76:19:18:35:55:be:aa:6f:8e:
         4f:66:7a:55:49:36:4f:1d:4a:44:46:43:09:11:4f:63:11:58:
         e1:0b:49:81:12:73:e8:e6:67:04:55:0f:33:a4:6f:54:58:88:
         f5:14:e5:98:bb:33:6a:44:74:d2:ab:e1:b7:8b:8e:74:54:58:
         62:47:90:06:72:b7:9d:90:3e:14:48:81:a6:30:9a:37:ae:c8:
         a0:f4:a3:f6:d7:04:68:31:47:b3:fc:d2:ec:62:9d:a1:ba:eb:
         f1:06:1f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:44 2025 by rpki-client