Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa
File:                     9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa (raw, json)
Hash identifier:          ODzidxRtdL8/6KeRX+mDj8Zwi0E9g4dElMwpGJs37T8=
Subject key identifier:   F8:D8:F8:3E:4D:B7:89:24:3B:DD:56:89:76:9B:FA:A9:F0:97:00:E6
Certificate issuer:       /CN=336db060-273c-4da7-88b6-6f47c8830474
Certificate serial:       010D0C9F43285848BFEB9FA05C60BFDAC3421740
Authority key identifier: 75:8C:5C:A3:D0:83:73:A0:2B:3B:9C:DF:74:59:F1:87:A2:69:14:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     398663
IP address blocks:        157.160.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:9f:a0:5c:60:bf:da:c3:42:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=336db060-273c-4da7-88b6-6f47c8830474
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=ca98bc5e-772a-4b7c-81e3-681e3d1fb6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:75:58:e3:9e:5e:c3:d1:91:2b:0d:9f:17:01:
                    4c:6b:80:70:1d:de:f0:6b:a1:c3:06:1a:42:88:07:
                    87:1c:b5:e6:d2:1b:7a:c5:3f:a0:a3:d3:bd:c0:c7:
                    3b:c6:c0:b3:ea:3f:fe:a8:92:d7:49:c0:c5:03:69:
                    46:9e:4d:33:3c:5f:ff:5e:b3:fa:0e:ac:8b:25:7e:
                    21:6e:bc:1c:c2:12:1a:47:2c:c5:5c:81:50:45:cb:
                    0b:1b:2d:b2:2a:83:5b:25:d8:1c:ab:02:e6:04:7b:
                    34:9b:20:61:75:08:ef:9d:e0:2f:ef:e7:09:b7:85:
                    3e:ff:57:aa:71:b6:60:3a:da:d4:c8:19:22:a6:88:
                    9e:32:dc:87:13:7d:82:40:ce:56:d8:19:04:9f:4a:
                    f9:b0:1a:da:e8:af:38:94:da:1f:e2:29:55:ef:e1:
                    81:9d:72:f6:ed:7b:d1:1d:be:91:72:94:e9:69:77:
                    76:c0:ca:59:f3:cf:59:77:07:a7:e5:10:a6:9d:df:
                    d6:44:8c:bb:a9:c2:7e:9f:d7:3f:17:e0:51:be:b7:
                    27:e0:4c:1f:23:09:7c:3f:68:10:5e:1b:f8:3d:4b:
                    63:19:c0:5b:4c:74:f8:b5:15:82:9d:a4:20:45:e3:
                    98:be:b3:1f:63:03:20:db:1d:8c:a1:a1:02:63:8d:
                    02:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D8:F8:3E:4D:B7:89:24:3B:DD:56:89:76:9B:FA:A9:F0:97:00:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.crl

            X509v3 Authority Key Identifier:
                keyid:75:8C:5C:A3:D0:83:73:A0:2B:3B:9C:DF:74:59:F1:87:A2:69:14:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:80:2b:99:3d:3d:ef:5c:64:85:e1:eb:80:d3:77:7c:e0:b2:
         40:48:54:90:e1:d4:ec:b4:0e:0e:69:38:cf:24:e4:97:9d:2a:
         72:a6:41:e5:a0:23:e6:f6:f0:57:88:cf:b8:0a:01:19:20:fa:
         d6:64:4f:29:02:b0:3a:53:fa:78:d2:14:6f:e9:6d:b3:11:f9:
         15:29:66:12:da:bd:97:74:c8:48:d2:c0:d5:b7:da:e9:7d:e7:
         92:86:65:76:1a:6f:d0:2c:4c:18:42:fd:68:14:71:0e:da:ed:
         ca:db:e2:0b:e0:79:4a:78:c2:db:57:a5:8a:e3:72:1e:ac:76:
         d3:38:f5:4a:17:bf:54:47:7e:bc:a4:80:3a:99:c9:09:12:c4:
         09:3f:b0:af:af:dc:c9:8f:d1:b5:39:7c:46:80:99:e9:37:8e:
         16:03:89:eb:a7:72:90:62:bc:63:4d:2c:0e:6c:b6:79:7d:a9:
         ad:25:f6:32:b2:e5:0b:b6:0d:5e:8b:ab:2b:43:c0:73:d5:c1:
         09:62:77:8b:0f:cc:ca:f0:6d:0a:27:4e:8a:31:f4:d1:6f:17:
         a3:2a:48:c6:85:23:d3:c6:fa:aa:af:11:35:58:53:6f:ec:df:
         cf:57:4f:6b:15:5f:fb:13:8a:f1:c4:39:2d:a7:50:50:e8:47:
         a2:97:e3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:26:16 2025 by rpki-client