Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/640896d2-3779-3ec9-a9f8-7165c4473520.roa
File:                     640896d2-3779-3ec9-a9f8-7165c4473520.roa (raw, json)
Hash identifier:          3cax2dFZI4Ji+Gi7pS4vsVoNP7VwQJIr7EmtmB1F/z8=
Subject key identifier:   66:9C:F4:11:2C:35:7B:FB:E6:07:0A:E6:DB:01:C5:F0:74:D8:6C:F6
Certificate issuer:       /CN=746d7fba-60c4-45bf-9ed4-90c6580e71f2
Certificate serial:       010D0C9F43285849029EFEAF4E82C8F01DDDD880
Authority key identifier: 69:43:44:A0:6D:1F:38:65:C4:E2:45:5E:1B:1D:2A:5A:BA:82:1D:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/640896d2-3779-3ec9-a9f8-7165c4473520.roa
Signing time:             Wed 26 Feb 2025 11:25:48 +0000
ROA not before:           Wed 26 Feb 2025 11:25:48 +0000
ROA not after:            Tue 27 May 2025 10:25:48 +0000
asID:                     393770
IP address blocks:        161.129.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:9e:fe:af:4e:82:c8:f0:1d:dd:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746d7fba-60c4-45bf-9ed4-90c6580e71f2
        Validity
            Not Before: Feb 26 11:25:48 2025 GMT
            Not After : May 27 10:25:48 2025 GMT
        Subject: CN=579dfe8d-1ab3-4968-b076-a690bb293328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bc:61:e1:89:a5:89:80:6f:39:fb:10:4c:07:
                    b1:56:5c:de:56:ec:d0:e1:a3:13:29:f2:a9:0b:9d:
                    d2:9b:6f:e9:6a:ab:e7:8a:7e:a5:aa:bb:f8:2a:02:
                    b3:d0:a4:3f:7a:7d:6c:a0:fe:52:09:e3:39:1a:d5:
                    b2:3c:f0:9e:a3:11:63:93:fc:b8:f6:d7:d4:5d:29:
                    49:24:b0:57:05:5c:3e:d6:3a:78:eb:9b:dc:e2:e3:
                    68:43:fc:52:ed:a5:94:58:ff:b1:21:4e:0a:f3:e1:
                    9b:42:6f:14:5d:66:76:c4:8c:f7:e2:d8:09:47:82:
                    b3:cc:4f:16:97:c3:ad:c7:cf:9d:39:d0:b9:61:17:
                    51:e4:b0:8a:22:c0:4c:22:c4:a7:e0:a3:4f:78:0a:
                    47:6d:9f:13:62:cf:e9:4c:fe:34:79:05:2b:53:c7:
                    8d:5c:6a:e2:c4:08:fc:87:81:9c:85:6b:fc:a0:c3:
                    10:a5:d7:eb:1a:74:95:e4:09:e5:6a:3f:0c:1a:de:
                    ef:41:3c:e5:ac:db:43:15:5f:e1:96:4a:e3:02:23:
                    38:d8:21:ff:3d:15:9d:84:b1:d2:fd:47:78:0f:96:
                    ac:9c:bd:ce:26:59:ed:fc:7e:27:7e:05:5b:88:28:
                    cf:41:08:04:43:2c:4f:1f:6c:11:cc:a8:48:3b:9e:
                    3c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9C:F4:11:2C:35:7B:FB:E6:07:0A:E6:DB:01:C5:F0:74:D8:6C:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/640896d2-3779-3ec9-a9f8-7165c4473520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.crl

            X509v3 Authority Key Identifier:
                keyid:69:43:44:A0:6D:1F:38:65:C4:E2:45:5E:1B:1D:2A:5A:BA:82:1D:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:28:e6:a6:bb:b5:64:2d:79:f7:92:f9:7d:2a:22:cd:a1:4c:
         15:4e:10:45:76:cf:f7:78:40:1f:17:a8:4e:d8:b7:e2:38:b1:
         f0:19:98:2f:6e:b2:80:d0:89:20:a8:7a:d9:4d:b9:25:c4:b8:
         74:19:c6:b6:d5:be:bf:8c:8f:1e:ca:ab:8e:a7:e5:c7:58:28:
         7a:bb:76:9f:06:f6:60:82:cd:03:13:c5:b1:8a:9f:d2:c2:c2:
         0c:ee:bc:1f:20:6e:8a:5c:9b:13:0c:ae:9c:99:eb:fc:3f:c9:
         25:09:d7:6b:d7:c4:7f:9f:35:c0:30:87:3e:76:44:0b:6c:6a:
         28:f0:2e:75:c9:be:e0:50:10:84:7e:55:d1:35:aa:7e:ff:7f:
         3d:09:ba:f6:18:69:69:95:ad:38:97:49:20:ea:72:c9:3e:28:
         41:b2:12:70:a2:9c:3c:d0:96:6f:f7:42:cc:bf:32:66:3f:d6:
         5c:a5:af:2a:2f:e9:bc:35:2a:79:55:59:5e:a8:56:4f:4e:57:
         07:c5:8f:42:cd:ab:2e:bd:eb:70:db:7a:b9:03:44:65:ba:47:
         15:66:46:19:60:8b:a1:b3:10:e3:bf:1c:70:e2:7b:1f:d2:10:
         63:be:11:0e:93:2d:7a:6a:7d:30:85:d4:b2:7b:0e:df:02:0d:
         06:29:09:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:35:58 2025 by rpki-client