Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/d50e1309-25ab-314a-abea-0d4f177b5564.roa
File:                     d50e1309-25ab-314a-abea-0d4f177b5564.roa (raw, json)
Hash identifier:          /lp65rAc2iNkEEQqkPGp+g8GlbsqWq6bLPrT3HxnU/E=
Subject key identifier:   EC:04:40:74:7E:96:C2:F8:57:EF:7C:DB:CE:43:F4:50:83:16:00:15
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F43285848DA70FEFE7427AFF960FD36E0
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/d50e1309-25ab-314a-abea-0d4f177b5564.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     5645
IP address blocks:        173.230.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Mar 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:fe:fe:74:27:af:f9:60:fd:36:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=5aca27e2-36b5-4d9d-b4f2-a48a5904c0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:96:d6:48:2b:84:5c:9c:48:a3:12:f5:53:6f:
                    7c:6f:f4:9a:bf:ac:c0:73:ba:8a:09:84:be:92:87:
                    96:06:32:de:71:59:74:e4:9b:7b:d9:5d:0d:e9:1a:
                    45:f3:08:d0:c2:96:50:09:ff:fd:aa:62:1f:fa:da:
                    31:c8:3b:8e:bb:9a:b7:bf:e6:78:a5:be:aa:88:a3:
                    76:87:98:03:cc:5f:c4:b5:67:ba:e1:b1:29:2c:ea:
                    56:a1:6d:92:a8:6b:4f:91:1e:9b:cd:0a:2c:73:83:
                    1f:3b:67:51:3e:a6:ca:8a:b3:28:3d:87:97:1d:da:
                    f2:55:2b:4f:e8:0f:a9:e6:73:dd:89:66:f9:74:0b:
                    af:7a:c4:fa:2e:09:1a:b1:e8:99:9d:06:b9:27:cc:
                    93:a0:22:29:74:f3:5a:9c:95:bd:90:d8:6c:d4:f7:
                    68:b2:86:b5:6c:81:6b:b0:c4:37:ec:3d:01:6e:6f:
                    c8:4b:61:73:44:f9:83:4d:6f:47:00:9a:4a:c9:b2:
                    9b:81:8e:74:5d:66:87:00:6f:41:da:4c:64:14:bc:
                    c0:d9:9a:bb:ba:ae:cc:68:53:d6:b4:f8:b5:04:69:
                    1c:2c:c3:db:c9:b6:df:51:1e:7e:c2:da:4f:82:bd:
                    48:41:d3:b9:8f:32:bb:fc:15:80:c2:76:b4:ca:0b:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:04:40:74:7E:96:C2:F8:57:EF:7C:DB:CE:43:F4:50:83:16:00:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/d50e1309-25ab-314a-abea-0d4f177b5564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.230.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:97:7f:ba:48:09:8a:ee:e0:79:51:8b:c2:04:92:8e:dd:c9:
         31:0a:63:60:c0:23:8c:75:f6:4f:90:70:20:d2:fe:a7:fa:20:
         2a:c0:bc:ff:66:37:16:c0:da:20:14:2b:f3:22:9e:cb:b0:40:
         f0:60:6a:47:ad:6d:9a:6d:ab:4b:ff:5e:6e:62:29:92:9e:d7:
         3d:20:ec:ba:fc:33:28:61:d8:af:de:8f:1d:8b:d2:99:02:a3:
         a8:08:22:2b:4f:f5:87:f9:42:e4:93:43:bc:d2:ad:24:2c:25:
         89:8d:4c:c4:c6:67:b2:70:4b:81:2d:7a:0e:fa:58:a2:39:42:
         0c:16:bd:49:3a:eb:f5:21:76:ed:9c:dd:2e:30:b1:08:ae:e8:
         ea:8b:2f:9e:90:e6:1b:37:dd:91:f8:e1:ad:1d:5c:ad:8b:5d:
         60:13:ba:05:8c:e2:03:44:2e:8d:3b:30:88:a1:01:43:8f:d1:
         ce:63:bb:51:ed:5b:90:89:e5:5c:a3:5c:a5:50:e5:3f:68:14:
         6d:b0:1e:5e:da:34:49:5e:d6:0a:af:be:34:a0:52:69:cf:72:
         64:50:58:09:15:9d:ea:3d:b0:94:9c:90:c3:4d:19:94:0e:3a:
         d3:56:68:af:6d:76:57:9d:db:6e:d7:a1:03:82:de:38:85:96:
         59:37:f0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 24 19:50:12 2025 by rpki-client