Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/c7ad1741-148a-37a7-bc3b-bb1f5db943b4.roa
File:                     c7ad1741-148a-37a7-bc3b-bb1f5db943b4.roa (raw, json)
Hash identifier:          i8irqhhtFfoeGtqkTIhrjY5B/wcRPwg3Cnup8DZIK3U=
Subject key identifier:   E4:66:8E:77:1A:7A:28:6F:DC:D0:AC:53:9D:2F:83:00:F0:D9:5D:BF
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F432858492504314A58A58A622E391B00
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/c7ad1741-148a-37a7-bc3b-bb1f5db943b4.roa
Signing time:             Mon 10 Mar 2025 19:07:11 +0000
ROA not before:           Mon 10 Mar 2025 19:07:11 +0000
ROA not after:            Sun 08 Jun 2025 19:07:11 +0000
asID:                     62874
IP address blocks:        167.160.40.0/22 maxlen: 23
                          167.160.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:04:31:4a:58:a5:8a:62:2e:39:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Mar 10 19:07:11 2025 GMT
            Not After : Jun  8 19:07:11 2025 GMT
        Subject: CN=cb39e19b-7181-48e9-a61c-93f298f3f464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:28:db:d6:d1:18:74:4e:f4:95:6d:2f:39:
                    4f:3f:e5:54:a2:1c:60:ee:0f:1b:61:3f:ff:df:d4:
                    7b:3c:9b:a1:03:c1:f8:f5:99:57:52:51:98:4f:41:
                    78:de:9f:bc:37:43:dc:7e:db:dd:6f:f7:68:81:bb:
                    05:8f:bf:56:a7:67:13:4d:03:69:a5:1b:cc:32:49:
                    66:d9:d8:6d:b6:2e:db:1d:7d:73:6a:e4:4b:42:32:
                    b3:93:56:28:af:b8:cf:c2:db:64:aa:ce:93:c4:82:
                    64:62:c3:3b:18:30:51:16:da:ac:fa:fd:5e:3c:ac:
                    14:52:bd:bb:70:c7:f1:eb:af:86:8b:e9:3c:65:cb:
                    bc:fa:d7:48:ca:4c:44:b3:cc:5f:0a:97:29:6a:dd:
                    7c:4e:63:e6:08:db:4a:6d:59:25:ce:15:c6:b4:08:
                    ab:ab:d4:d3:a1:13:25:4d:a0:8a:41:20:b7:3e:fa:
                    1b:be:dd:40:33:65:bc:9d:4b:e6:7e:d4:7f:cf:3b:
                    1e:06:0c:04:9a:11:e6:36:e3:0e:f1:84:ca:37:3a:
                    41:cb:71:b1:2d:e2:d7:fe:0c:0b:5d:e8:91:25:2d:
                    92:ff:5d:ee:07:2e:b2:35:f9:5a:01:2b:56:ab:2e:
                    d0:80:0e:6d:a6:e4:d2:3a:6c:dc:46:7d:63:61:48:
                    56:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:66:8E:77:1A:7A:28:6F:DC:D0:AC:53:9D:2F:83:00:F0:D9:5D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/c7ad1741-148a-37a7-bc3b-bb1f5db943b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.160.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a9:d4:dd:2f:03:05:16:5d:c4:e5:08:14:9f:ab:81:5f:9e:
         7d:00:98:1a:6b:38:4f:29:76:b5:69:ba:67:5e:f5:0f:13:3d:
         b3:48:53:78:90:2a:18:5d:7c:1e:d7:78:3b:9d:1a:cb:d5:99:
         87:c2:d5:96:b2:84:66:3d:c6:69:5d:b1:39:1d:b5:69:28:d5:
         68:de:02:70:a3:32:dd:41:9d:77:52:22:f8:19:3f:56:88:67:
         7c:d7:be:9f:2e:f2:0b:43:2a:c7:f0:33:51:a7:10:42:d1:4a:
         c9:ba:a7:43:86:3f:28:53:34:80:71:79:c7:e4:c5:94:62:c3:
         99:61:cf:a2:66:5e:77:f8:2f:10:6e:25:17:c9:b4:fa:3b:2f:
         3a:8f:f3:6c:9b:e6:f6:19:79:8b:2a:87:d9:40:7e:bf:48:eb:
         d4:6f:15:ed:f0:56:4c:5e:91:46:cf:1c:96:11:f0:bf:b3:77:
         16:06:45:e5:84:7b:69:7a:d7:4f:df:0b:96:b0:c9:f1:d9:92:
         4b:d5:a8:45:15:2c:64:47:19:8f:b3:e5:ca:6e:51:bb:5d:33:
         b3:8f:8a:34:8c:e9:2f:3d:16:bf:15:e7:23:b0:ad:bf:ef:94:
         2a:e4:73:b0:90:43:05:3f:dc:54:c6:46:b6:5f:7e:8c:e5:33:
         ea:d6:0b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:15:32 2025 by rpki-client