Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/254d60fe-2db0-35fe-bfb8-86787f6d0263.roa
File:                     254d60fe-2db0-35fe-bfb8-86787f6d0263.roa (raw, json)
Hash identifier:          RHg7v3XPiqaGW3t1viefFGFeo2I8lYcQE59G2sKfqbc=
Subject key identifier:   6C:D4:83:50:5F:7C:C7:C6:96:D0:0E:1C:5F:4A:1E:F6:EB:A0:AA:2A
Certificate issuer:       /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial:       010D0C9F432858497DF4DC5FB49DD7856D483E40
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/254d60fe-2db0-35fe-bfb8-86787f6d0263.roa
Signing time:             Fri 11 Apr 2025 15:43:14 +0000
ROA not before:           Fri 11 Apr 2025 15:43:14 +0000
ROA not after:            Thu 10 Jul 2025 15:43:14 +0000
asID:                     6079
IP address blocks:        72.1.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:f4:dc:5f:b4:9d:d7:85:6d:48:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
        Validity
            Not Before: Apr 11 15:43:14 2025 GMT
            Not After : Jul 10 15:43:14 2025 GMT
        Subject: CN=901dd63f-00db-4baf-8d97-86791edce2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:d6:54:68:de:40:79:c5:87:ae:9f:80:02:
                    59:bc:8f:61:1c:53:bd:6d:5f:5c:91:35:78:81:b2:
                    e8:31:3b:cb:7a:a2:a8:5e:09:22:ed:59:20:51:57:
                    13:11:1a:a4:50:23:10:7b:f2:26:15:27:9e:c3:ab:
                    da:c4:62:ac:7d:8f:d7:ac:aa:3a:0a:5c:c0:60:d0:
                    72:63:6e:77:7b:b8:af:0f:ee:bf:42:fc:5e:be:47:
                    41:ca:b2:26:66:a6:b5:82:72:bb:e7:86:4a:56:03:
                    63:2e:95:9b:e5:88:3f:19:e2:1e:18:1b:e4:5a:e3:
                    7a:5c:28:1c:b9:f8:be:0f:21:e5:76:d0:c2:cb:99:
                    34:22:e5:cb:5f:66:aa:85:2b:36:87:20:c9:8e:47:
                    03:da:2d:ed:e5:97:e8:71:fc:4c:ef:4a:97:1c:ae:
                    a8:54:33:e4:00:f8:4c:0b:c7:f4:8e:90:14:a6:78:
                    9f:42:be:b1:c5:17:ed:cc:d4:ce:89:2c:ea:64:d6:
                    12:05:16:a9:f2:6b:71:4d:f9:49:e0:ff:8d:61:7a:
                    07:e4:b3:fe:b2:e6:3d:fc:df:cb:ee:3d:37:35:84:
                    8c:bd:6d:09:5a:3b:f8:11:12:49:2d:e9:14:ab:f8:
                    bc:a7:2d:7f:e6:a2:5a:e4:ec:49:bf:77:ed:62:2c:
                    dd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D4:83:50:5F:7C:C7:C6:96:D0:0E:1C:5F:4A:1E:F6:EB:A0:AA:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/254d60fe-2db0-35fe-bfb8-86787f6d0263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl

            X509v3 Authority Key Identifier:
                keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:67:99:5b:30:fe:6f:7d:9c:2d:b9:bf:eb:38:f8:1f:74:09:
         38:53:ab:c6:14:5d:6f:d0:c9:01:67:21:1c:ea:4c:8b:d2:f2:
         b6:21:7e:37:fa:ee:0f:a5:27:0f:e3:82:8a:09:4b:51:6c:a7:
         f4:e4:57:dc:6b:12:6b:09:35:ae:1b:e6:db:26:1e:8f:7c:3e:
         92:68:1b:f0:dd:08:a6:be:e2:33:94:7d:44:7b:e2:10:c3:ac:
         ed:b6:08:7c:70:62:a1:f6:fb:ae:89:e6:bd:c8:c0:c3:2b:07:
         24:6b:87:eb:1f:d0:a1:c7:14:2b:39:8a:47:b2:03:43:56:80:
         15:86:60:75:61:0f:cc:dc:a7:a4:85:5d:9d:aa:27:5d:bf:10:
         c4:40:c4:64:da:8e:5d:96:e7:47:4c:af:a3:7c:f8:61:00:7f:
         0e:2a:ca:de:ef:d6:e5:df:6e:a2:96:3f:e6:7c:1a:1a:a7:80:
         ff:5c:f7:c0:3b:4c:8c:4f:13:dc:a9:35:a9:1a:9d:f9:ef:a8:
         9c:bc:b1:9c:0f:43:06:41:17:91:a5:f4:ee:74:27:9d:d7:d1:
         1b:6d:ea:43:1e:d5:4e:16:80:6d:c3:37:c3:de:5d:51:2d:7d:
         23:bf:69:1e:03:bd:9d:54:b3:53:40:fd:0e:a8:24:0f:4b:c3:
         78:e8:ac:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:44:31 2025 by rpki-client