Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa
File:                     1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa (raw, json)
Hash identifier:          3TVowD+DEkQY2X/PN6hLXhY+fiuQngWrdL/0e2p+/6k=
Subject key identifier:   34:5B:9B:11:52:D2:73:4D:07:60:DF:43:9F:D5:DE:BC:9E:75:0D:E0
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F43285848C6E62EFD8256FE9F3376AD00
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     16433
IP address blocks:        208.76.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:2e:fd:82:56:fe:9f:33:76:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=18989f53-2dc7-4665-9a54-5b82cc8b4424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:ba:a9:35:74:31:a0:9b:f3:2f:4d:b6:92:
                    1b:0a:90:7f:be:7d:b6:75:88:3d:c2:b7:c3:b2:4e:
                    fe:67:72:37:73:f0:4b:59:ba:e0:7f:f6:58:80:8c:
                    75:76:13:fc:90:61:70:56:90:9f:b6:e2:06:ef:64:
                    66:3c:8b:e0:fd:e8:fe:4a:e5:36:50:e3:6e:70:37:
                    00:3c:f5:9d:b4:69:c5:ff:b5:93:d5:ed:5c:82:fe:
                    6f:a9:45:44:54:c7:0d:8a:71:1a:ce:97:5f:c0:3a:
                    43:38:82:7d:82:97:e6:49:68:79:42:cd:d8:7c:22:
                    cf:f1:ff:55:8a:af:35:6f:2d:d3:6e:12:a4:98:d0:
                    a3:17:b5:d4:1b:aa:09:e3:95:6e:8e:18:14:1a:4d:
                    71:fc:00:f6:84:99:6f:2b:53:ff:fe:7b:d8:ff:98:
                    69:54:56:b8:63:a8:64:8a:00:6a:a1:f8:a4:d7:3a:
                    c9:ea:c3:d4:4e:4d:ef:3a:0e:c3:3f:e2:87:2f:6c:
                    69:7f:f4:67:11:48:ad:fb:fd:56:be:0e:54:73:aa:
                    76:3b:8c:5b:b3:5c:80:f5:01:dd:03:a0:73:64:c3:
                    c8:68:4c:b1:59:bf:8e:4c:d7:75:ea:0d:49:eb:e9:
                    d3:af:cb:35:2b:1f:d3:fb:85:2d:9c:f2:a6:2f:8f:
                    82:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5B:9B:11:52:D2:73:4D:07:60:DF:43:9F:D5:DE:BC:9E:75:0D:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c3:d4:e6:ab:58:f3:e8:20:56:9a:d8:2f:ea:cd:f5:2e:29:
         7e:31:3b:b0:70:b5:2c:62:f0:f8:5a:03:1c:08:1f:a8:f5:d8:
         e9:ab:f0:29:73:07:06:72:af:3f:9f:d2:bf:50:55:da:d4:a7:
         e5:47:c5:6f:5a:a5:2d:94:b6:b8:d3:67:db:2e:62:fc:0d:c4:
         ba:45:71:b9:ff:c0:cc:f2:72:c5:9b:3a:18:63:02:e7:8e:8f:
         94:90:9d:94:5a:a0:ab:69:b9:c8:44:cf:bd:2f:2e:0c:bb:3b:
         54:2a:2b:42:9b:2d:fa:1c:d6:c5:a5:62:33:28:9c:1d:26:9a:
         68:27:50:b9:ab:1e:30:13:f0:48:c6:8f:c2:fc:ea:46:1e:64:
         a2:7c:60:a8:18:f9:78:95:0d:46:11:f0:3d:f4:70:9f:bc:65:
         8b:ab:1a:67:51:d8:3e:da:8b:ec:a3:cb:8c:f9:ff:f0:3d:db:
         7c:7e:f2:d2:b9:d3:6f:78:c1:27:57:af:be:50:93:68:14:ea:
         bd:08:61:b3:bd:aa:f9:38:2b:3a:96:4d:91:68:90:56:33:ee:
         2e:b6:fe:77:4d:a4:ba:3d:be:8a:d2:1d:df:d9:8f:ba:00:bb:
         43:bb:9f:56:d6:7e:b7:fd:d0:9a:74:91:cf:16:87:3b:fd:8d:
         50:cb:5c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:57 2025 by rpki-client