Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c8a2dd92-5ffc-35e2-8fc0-9d20ccca46a4.roa
File:                     c8a2dd92-5ffc-35e2-8fc0-9d20ccca46a4.roa (raw, json)
Hash identifier:          PzCv5Hzaku7YyghOZeeeM+dsPvMomxsCjg32EWaz+bw=
Subject key identifier:   FA:F8:FF:78:A2:67:BF:17:CD:16:98:18:54:68:35:95:06:70:2A:C1
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F43285849393E7BC1A817FCF43F507080
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c8a2dd92-5ffc-35e2-8fc0-9d20ccca46a4.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     30722
IP address blocks:        47.53.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:7b:c1:a8:17:fc:f4:3f:50:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=797b69a1-6546-4ad1-acaf-3b977f6cccfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:35:95:3f:b5:b8:67:8e:93:1b:05:61:e4:
                    85:92:ae:f6:d6:11:c1:bf:c2:48:74:da:32:bb:0e:
                    bd:c4:11:02:2b:02:9c:38:c8:bc:29:65:49:c0:9d:
                    bf:9b:7e:91:b1:3e:6f:93:a8:6e:d8:4f:ff:b1:93:
                    1d:53:67:83:4a:46:9d:88:f0:a7:dd:91:87:61:e5:
                    e5:79:c7:a5:59:79:14:74:60:8a:e5:fe:b7:bc:8b:
                    1c:3a:21:06:61:9a:eb:d5:a2:54:a0:26:e1:fc:62:
                    dd:fb:02:18:28:81:a5:44:32:1a:b8:64:49:85:d6:
                    0b:2d:bd:8e:cb:91:cc:55:de:6b:64:d2:1d:b9:8b:
                    3e:df:56:71:c7:31:f6:e5:02:9e:37:db:bf:fc:d2:
                    a7:da:43:21:96:6a:19:1a:4f:fe:23:d0:44:45:2b:
                    45:91:83:fe:03:59:c0:d0:d8:48:8e:d7:4d:46:47:
                    a5:3d:48:69:ff:8b:83:3c:bd:eb:4b:d8:b4:1d:93:
                    ba:62:a8:b3:1a:43:61:18:33:10:f3:0f:64:87:d7:
                    8f:d6:9f:a4:cf:ad:56:02:b3:c7:37:6a:88:e7:e1:
                    74:52:03:e8:48:c0:5a:69:fa:d2:37:ab:dc:3f:a7:
                    d9:79:8d:06:0c:50:16:c8:07:b2:b8:03:95:dc:10:
                    42:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F8:FF:78:A2:67:BF:17:CD:16:98:18:54:68:35:95:06:70:2A:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c8a2dd92-5ffc-35e2-8fc0-9d20ccca46a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.53.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:c0:27:10:a6:9f:f8:c3:24:d4:13:d8:2e:94:39:a7:39:e2:
         c5:f8:94:89:eb:5a:80:75:fd:5c:1a:6f:3e:d5:c6:a3:ae:06:
         aa:4e:08:1c:53:13:02:d5:94:8e:57:b8:7f:17:a8:f8:58:9b:
         1d:f8:0b:b5:00:a1:51:b0:66:e8:c0:2e:16:d3:1f:57:92:e7:
         42:ab:c7:7d:46:ac:8d:74:86:45:9a:3e:4f:85:9b:8e:99:fe:
         c5:53:99:04:b1:83:a8:19:35:37:d9:7b:e8:08:78:76:5c:c6:
         f5:00:fb:39:df:fc:04:45:59:52:3d:db:6b:d0:8d:7d:85:57:
         c8:36:8c:a2:f3:c0:86:f4:9b:a8:33:b7:2d:f6:dd:30:1c:54:
         f8:64:83:3e:50:1e:87:01:61:59:ee:af:88:c1:a2:60:a6:ac:
         70:bd:15:db:b8:65:a2:9a:d0:b8:77:e5:4d:d8:9c:48:b6:95:
         ce:8d:91:a9:89:ef:71:a2:2a:27:9f:dd:64:4e:6e:2e:49:b1:
         f0:ea:a8:7b:7c:70:b4:dd:d6:f7:bb:25:d5:61:27:5d:18:5b:
         46:fb:92:50:57:9c:69:43:fe:26:b3:0b:a7:b2:4d:6d:b3:5e:
         87:e8:71:d5:3d:19:da:30:f9:52:bb:f0:75:5b:a2:36:6f:2d:
         b9:5c:66:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:02:32 2025 by rpki-client