Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/248ba07f-c147-3cdd-a4f7-d3ba5eb8adc5.roa
File:                     248ba07f-c147-3cdd-a4f7-d3ba5eb8adc5.roa (raw, json)
Hash identifier:          SIIewO7HSRf1CSEvQjT1cnzQj7btr4FkeWcMsy+0dNI=
Subject key identifier:   29:20:20:E0:90:BA:D0:69:9F:14:33:48:B2:4B:9D:BB:F7:B0:CE:7B
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F43285848CB164F3F6961216CCD7AE780
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/248ba07f-c147-3cdd-a4f7-d3ba5eb8adc5.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     16433
IP address blocks:        147.160.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:4f:3f:69:61:21:6c:cd:7a:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=d6163271-2a2d-4ca8-b106-73176cbb5271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7f:52:4d:82:69:d5:f5:c2:99:bd:ec:28:90:
                    30:95:06:55:d6:5b:a6:c8:26:0b:f6:40:b4:af:18:
                    11:5e:02:08:7c:e4:ed:22:18:0e:77:1e:c3:38:98:
                    2e:e4:70:69:fa:79:5f:06:1d:bd:42:56:4a:d6:dc:
                    43:f2:df:1a:b3:8b:fc:8c:9f:93:b3:8f:43:3a:f3:
                    de:0c:0e:94:11:7d:aa:0d:e0:b4:56:c4:af:7a:b4:
                    b7:9d:f2:99:47:cc:ba:f9:40:6b:c1:04:cd:43:a5:
                    d9:e1:79:da:c1:87:25:d9:71:e8:bc:a5:56:c8:d9:
                    f5:f3:a1:02:75:17:f1:39:dd:24:8c:c5:4c:f6:97:
                    ad:5c:96:66:7e:b4:33:ff:35:98:f4:e9:13:c4:ef:
                    c7:d5:b1:d3:cf:6d:a9:e1:f6:63:ab:54:f8:cd:70:
                    9c:e4:67:c2:b8:06:db:23:21:d1:f6:7c:ae:88:d3:
                    1d:2e:f4:4f:9d:7f:5f:10:b3:f5:27:89:90:cc:ba:
                    bb:5c:84:5d:f1:af:7e:79:e3:fc:3d:0e:5a:83:93:
                    e7:73:57:e6:5b:18:61:01:ae:a9:ce:53:27:25:ed:
                    8f:77:18:a3:43:9d:d3:b8:1f:68:22:26:b6:0f:6e:
                    85:bd:a4:be:1c:47:79:da:7e:37:11:e2:36:d7:87:
                    1e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:20:20:E0:90:BA:D0:69:9F:14:33:48:B2:4B:9D:BB:F7:B0:CE:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/248ba07f-c147-3cdd-a4f7-d3ba5eb8adc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:50:a7:97:d0:e2:9a:f0:3b:fb:e7:70:be:bb:29:a3:b5:21:
         a4:34:de:d3:c3:3b:e4:0c:c7:b4:1e:aa:8d:45:4f:e0:7d:0b:
         92:ad:04:8d:90:7e:c5:2b:9a:b1:df:26:b4:7f:c2:bd:bc:fc:
         d9:c2:46:1b:a0:1d:ab:14:4f:49:7e:16:38:80:52:35:a6:3d:
         12:2e:31:66:69:62:02:fd:9d:90:02:a9:d0:10:05:db:76:1f:
         b7:a8:57:ca:a6:1b:f0:72:d2:30:b7:ed:20:8e:c2:3a:65:43:
         6e:26:ee:a3:e9:5c:d0:41:81:e0:bd:2e:62:97:5e:2d:5e:6f:
         2e:d8:a3:de:68:31:5c:37:d3:fe:e9:d2:96:f1:ce:08:a0:0c:
         a7:b5:30:e0:bf:86:c2:af:92:68:89:86:39:31:5e:28:14:7c:
         45:6b:42:db:7f:88:db:9f:34:e0:92:b6:82:18:ab:c3:ae:7a:
         7d:f4:86:5f:d4:3e:53:50:c0:14:d5:e7:77:71:7d:92:3a:b2:
         cb:4a:5a:d4:79:67:8b:ba:0b:07:7d:c9:12:72:4c:df:84:af:
         8d:6e:cc:78:3c:45:25:ac:8e:90:1b:d7:46:8d:40:c8:c7:36:
         2b:87:49:b3:7e:38:da:6d:9a:b0:83:89:43:3e:22:f8:8f:4a:
         e2:04:18:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:00:45 2025 by rpki-client