Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/7813dccd-5825-39ec-b55e-6e52b46b3fc7.roa
File:                     7813dccd-5825-39ec-b55e-6e52b46b3fc7.roa (raw, json)
Hash identifier:          9PP7dA1pGBqBptmt5qg0mu2bZ6RZWKiqBJcnA3GynZM=
Subject key identifier:   8B:22:9D:8F:80:78:71:10:4D:CC:5A:40:57:26:47:0E:27:7B:A5:94
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F4328584900214F6371A2D6E0A80BE900
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/7813dccd-5825-39ec-b55e-6e52b46b3fc7.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     11127
IP address blocks:        207.241.160.0/19 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:4f:63:71:a2:d6:e0:a8:0b:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=cf0b2fba-ae73-4430-9082-0704413a07c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c2:50:f3:a5:e4:32:9d:75:db:f1:4b:f5:e9:
                    d6:4d:fc:62:36:8d:4a:5b:26:35:4f:5b:86:09:40:
                    2f:f8:6f:cc:29:d1:91:cd:9b:c4:37:7a:e6:9d:b4:
                    5f:5c:4d:9e:0d:10:9b:f5:36:7c:e6:16:70:cb:d7:
                    64:05:6f:c8:12:f1:95:13:f8:3f:14:e2:79:45:8f:
                    c9:fa:cb:a1:9c:52:3b:b6:3b:d3:c2:05:c4:ea:61:
                    88:4d:1e:4f:b4:9e:8c:8e:6c:62:07:10:c7:b3:b3:
                    b3:67:81:48:0f:54:e3:b3:59:ec:33:78:00:36:42:
                    79:04:b8:09:91:a6:b3:df:a8:23:7c:d0:98:4a:f5:
                    b9:b7:ce:61:af:a5:f2:ff:bf:15:de:f2:7b:ca:2a:
                    42:35:3a:88:a7:4d:49:91:d8:30:15:ca:cd:45:62:
                    6f:a9:7b:1e:71:33:1a:df:2a:d7:d1:96:aa:11:fc:
                    9b:bc:e3:e1:1d:8c:6d:0d:e0:81:19:65:f7:65:40:
                    58:4e:66:fc:16:e7:64:7e:01:00:1b:b5:77:75:5f:
                    62:b1:03:cf:97:5e:49:c6:33:fa:b8:6e:02:6b:64:
                    30:f3:ba:04:6d:e3:c8:62:27:f4:aa:e4:fc:d4:35:
                    1c:0a:64:28:d1:92:f5:12:95:ac:1c:95:ce:e5:95:
                    fd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:22:9D:8F:80:78:71:10:4D:CC:5A:40:57:26:47:0E:27:7B:A5:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/7813dccd-5825-39ec-b55e-6e52b46b3fc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:d6:a8:fc:8c:5f:3a:5d:80:1b:cb:80:05:55:8b:63:0e:98:
         ea:38:fb:47:c5:10:7b:42:26:49:eb:c6:bc:03:c2:02:33:eb:
         d1:60:36:f9:88:76:63:aa:47:5e:35:dc:df:da:f2:ea:bd:f3:
         7f:90:eb:97:3e:92:35:08:47:28:2f:f6:4d:f3:1a:c5:78:73:
         44:f3:aa:c3:ce:bd:77:f9:1a:15:8e:f8:97:7f:fb:7d:10:cb:
         14:d0:e1:88:f4:6e:10:ec:e6:da:8b:32:cc:04:be:f2:e0:f6:
         2c:23:dd:2e:41:3d:05:78:2b:ea:ca:4a:20:a4:b8:8b:d2:d8:
         99:fa:0e:18:8b:0f:bb:15:fe:34:4f:a2:77:dc:e7:78:4a:39:
         62:d5:f5:9d:8d:38:d7:cc:43:cd:f8:72:2c:59:64:c4:7b:1c:
         04:38:ca:fc:82:57:ae:71:90:21:54:25:c1:84:c0:ac:a5:c8:
         1c:1a:3c:81:91:74:b2:c1:eb:38:f9:45:f1:d5:b1:e1:99:d6:
         cd:1c:62:61:04:d2:4e:fc:f3:5b:16:a3:12:fc:99:74:af:08:
         de:4e:48:29:01:86:c0:fd:15:54:40:7e:ac:0a:10:0e:65:38:
         f0:ad:cf:fa:a0:b5:68:d5:83:ab:42:7e:00:36:d7:08:65:2d:
         b6:36:0f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:10:40 2025 by rpki-client