Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/469fca85-68b0-3030-a7b4-574050ac07a3.roa
File:                     469fca85-68b0-3030-a7b4-574050ac07a3.roa (raw, json)
Hash identifier:          quX8G95xSNBbIu28tYTgIv3ip9uJyiaJu8kkPwkm4NY=
Subject key identifier:   E6:62:F5:E7:9C:88:22:87:22:59:FD:99:A8:5D:B4:62:32:0D:FF:93
Certificate issuer:       /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Certificate serial:       010D0C9F43285848A79BF0639EB903B194A7B320
Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/469fca85-68b0-3030-a7b4-574050ac07a3.roa
Signing time:             Fri 24 Jan 2025 21:01:05 +0000
ROA not before:           Fri 24 Jan 2025 21:01:05 +0000
ROA not after:            Thu 24 Apr 2025 20:01:05 +0000
asID:                     16509
IP address blocks:        160.79.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a7:9b:f0:63:9e:b9:03:b1:94:a7:b3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
        Validity
            Not Before: Jan 24 21:01:05 2025 GMT
            Not After : Apr 24 20:01:05 2025 GMT
        Subject: CN=cd01f435-3021-4b33-bd61-9951eb459ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:d0:0c:49:d6:b2:5e:d2:8d:6a:0c:05:e2:
                    92:d9:2c:bb:c1:34:a9:40:96:0d:39:2a:65:f7:d4:
                    37:4f:7c:c9:cc:c2:a7:9f:31:2f:b8:b1:de:c1:58:
                    97:2a:e5:6c:b1:cd:eb:0d:43:e4:be:9c:15:df:85:
                    05:6e:8d:50:aa:f7:30:68:d5:5f:64:e2:7a:c4:a0:
                    29:82:07:73:08:db:1b:b2:21:55:26:29:2e:ae:bc:
                    f5:c6:c7:36:07:0b:a3:83:f2:0c:d0:55:62:4c:43:
                    69:40:65:76:25:f6:83:eb:c5:e6:51:31:0c:a6:01:
                    34:e9:54:0b:c4:ff:89:47:19:d7:bb:e2:95:15:d0:
                    5f:08:ee:3b:47:86:6a:84:92:a7:46:30:28:d6:69:
                    06:5f:75:95:3b:5c:0c:10:a8:80:ff:e5:a3:ff:b2:
                    26:b4:48:9f:4c:3d:28:8b:11:6d:61:d7:26:4a:2c:
                    d5:c3:57:8f:38:84:e4:36:39:21:d0:5c:0d:03:e1:
                    38:1a:0c:54:b3:0e:f8:62:da:80:fb:6c:61:6a:15:
                    b9:74:42:3d:d9:a0:4c:14:c4:49:e4:05:bc:58:ed:
                    2c:f3:5d:0c:dc:8b:b2:61:7f:e5:59:40:60:0c:d3:
                    cb:dd:01:94:0f:0d:59:c2:4a:22:2f:8e:31:11:5a:
                    94:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:62:F5:E7:9C:88:22:87:22:59:FD:99:A8:5D:B4:62:32:0D:FF:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/469fca85-68b0-3030-a7b4-574050ac07a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl

            X509v3 Authority Key Identifier:
                keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.79.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:17:7c:56:e6:12:12:0f:8c:94:1f:b9:df:2c:78:4b:78:23:
         6f:c9:3f:a5:cd:89:84:6e:6b:8c:ae:fc:9a:af:1c:f9:4b:28:
         9c:8d:e8:ae:a1:9f:e7:69:3b:83:8c:23:e9:31:28:32:b1:73:
         3f:53:71:c1:88:21:1f:f9:0b:8d:66:c8:f9:c7:22:e0:0c:c5:
         85:11:ee:a1:5a:b4:d8:2b:0f:0a:a4:36:3e:f8:81:f7:8a:55:
         9f:b1:02:67:62:0f:4b:ec:16:75:9f:2e:50:25:c4:e4:1d:27:
         c3:af:03:f8:5f:7f:de:4b:7f:00:b0:ad:fd:cd:d6:4f:77:26:
         79:b1:ca:a6:80:19:a0:90:69:8f:14:12:0a:ee:95:cb:18:a1:
         11:bd:5f:d7:36:32:a7:f0:23:4a:2f:4a:18:b0:5b:e4:15:e2:
         61:b7:2d:34:f3:98:18:c5:fd:5f:de:55:3b:19:84:10:ae:ad:
         f0:c7:92:e1:4a:5f:3f:ee:e0:47:3e:97:8a:ed:9c:cf:00:14:
         a2:f8:77:96:e9:f7:68:0f:c4:c6:7d:96:be:06:90:1b:de:ce:
         ac:17:f2:83:88:56:b1:4a:2e:25:57:9e:b3:74:43:ce:eb:64:
         48:9f:b2:60:01:b7:92:83:33:b7:46:5d:55:5e:39:14:5d:58:
         4c:31:b1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:44 2025 by rpki-client