Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/87fc178a-9a92-3f5b-bf3d-a3b6f21c6f96.roa
File:                     87fc178a-9a92-3f5b-bf3d-a3b6f21c6f96.roa (raw, json)
Hash identifier:          JBjf8XsJ+AScesLVYCH6xlmaw4IemB0ZoOj729ohObM=
Subject key identifier:   52:AA:15:FB:B6:78:4C:36:FA:76:38:C2:18:63:1A:2C:9E:16:2B:E4
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858495C2443F8F78B22AF6B55F500
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/87fc178a-9a92-3f5b-bf3d-a3b6f21c6f96.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     393249
IP address blocks:        142.231.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:43:f8:f7:8b:22:af:6b:55:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=e5255fac-ac1e-4666-9b28-8aed5c365485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e3:07:0d:88:c8:a6:46:fa:de:c4:b7:46:4c:
                    ce:4a:28:33:4d:6c:5a:d0:56:23:d6:b6:e7:a3:f0:
                    cb:9d:bb:b6:c0:b9:9f:ca:6a:2c:ab:50:c8:dc:92:
                    7f:0e:16:69:23:79:15:9e:f2:66:aa:1f:53:e5:a2:
                    a8:34:dc:0f:b6:f3:e9:dd:47:25:1f:c8:15:e2:3b:
                    91:64:46:45:23:ff:34:de:cb:3d:ab:9e:a7:77:ca:
                    c5:fc:ab:b8:95:d1:4f:2f:3e:f1:58:31:e1:e3:f3:
                    e0:7d:83:bd:05:d5:64:9d:39:73:3f:06:19:3b:72:
                    3b:2d:c1:59:a6:4d:c2:88:89:3c:d0:08:35:4d:17:
                    8d:b5:4b:9f:4d:fd:29:54:95:0f:34:33:c6:b1:30:
                    06:65:ee:d7:ed:61:52:5c:95:1e:71:19:b7:dc:29:
                    91:c2:78:ee:7b:5c:bb:c9:cf:40:62:53:2c:9b:93:
                    c8:0f:63:1d:1d:20:99:13:44:c4:c7:05:f5:44:4f:
                    67:32:30:17:fa:c3:bd:13:48:47:12:65:86:ef:ee:
                    24:c0:92:ae:fb:20:87:a1:d9:b4:54:13:77:30:1c:
                    3f:96:5c:25:42:a7:05:c5:b9:72:f5:c1:2d:87:1c:
                    c9:fa:13:8f:77:2d:5b:99:c6:da:00:c1:2f:8f:ad:
                    f1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AA:15:FB:B6:78:4C:36:FA:76:38:C2:18:63:1A:2C:9E:16:2B:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/87fc178a-9a92-3f5b-bf3d-a3b6f21c6f96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e0:a9:a9:56:22:b9:7d:17:45:38:81:00:7b:db:af:c1:21:
         d3:f9:c8:0d:45:a4:d0:44:42:5f:f0:c0:c6:c2:b7:f6:0d:d0:
         19:8a:cc:84:d2:b9:05:bd:62:22:02:30:3b:f0:18:cc:12:56:
         b9:f8:85:f0:29:3c:89:55:15:05:4b:10:50:06:55:3f:12:49:
         c6:4f:f4:cd:15:2d:77:ae:5a:15:db:03:e5:87:f6:53:1d:48:
         71:7c:d4:af:43:9a:4d:f2:bb:4e:fc:e5:e0:80:27:70:47:b9:
         ce:24:0d:99:c0:8d:fd:d1:ca:e0:28:47:38:a8:2e:08:18:9d:
         31:38:75:4e:d0:5f:cb:59:eb:ee:db:86:f8:e0:5c:5d:ca:86:
         21:0f:d1:e6:39:c1:d1:0b:b8:44:4e:42:07:ed:dd:4e:e3:1d:
         d9:dd:dc:b6:bf:05:65:82:e3:20:3d:34:be:8a:d7:97:08:1d:
         0f:60:1b:94:a0:0e:60:65:77:d6:0f:60:b1:05:30:dc:5f:8b:
         04:23:24:81:41:2b:1f:6b:6c:bb:13:21:bc:f3:0d:63:87:a9:
         2d:f0:49:81:a7:d6:03:62:d8:66:38:fe:e2:f9:19:f1:0c:34:
         f4:27:37:dc:9c:04:0c:4f:05:2a:0f:67:23:e8:45:8d:d1:30:
         09:9d:e7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:41 2025 by rpki-client