Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/11411582-890e-3d6e-822a-27aed92fc995.roa
File:                     11411582-890e-3d6e-822a-27aed92fc995.roa (raw, json)
Hash identifier:          RNb91WsLz4WwOEol6FaOO1EOW2jfX/unigxu5keIzzE=
Subject key identifier:   06:77:AA:E3:32:D5:9F:F0:18:AE:4C:95:91:CF:4D:FD:D2:35:CC:DD
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F43285849ABB4ABDA0796AE68A301C900
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/11411582-890e-3d6e-822a-27aed92fc995.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     7764
IP address blocks:        148.129.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:ab:da:07:96:ae:68:a3:01:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=b225eef0-0792-4ace-afd2-f7466b24f379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:1b:0b:ea:b5:97:21:09:12:4d:04:c0:c8:
                    ba:7e:d5:66:39:24:90:95:e1:a7:67:f1:e1:30:46:
                    ad:30:f6:82:27:26:2e:7f:46:01:b9:19:c2:d1:59:
                    51:39:24:98:3a:86:d7:2e:aa:3b:d7:80:d1:7c:0b:
                    23:a2:2b:b1:96:8e:bf:cf:61:d4:39:1c:a7:f6:35:
                    16:c1:a9:4a:62:66:2c:ea:bb:9f:4a:56:90:5f:94:
                    0a:b2:cb:b2:f5:18:5e:f6:6d:ad:db:da:f9:5f:af:
                    ad:34:14:c2:c8:f6:f1:c2:68:de:e9:3e:37:7f:cf:
                    57:6d:03:c8:9b:b3:0b:e6:2a:e0:5a:86:0f:69:81:
                    7b:66:ad:fe:b5:f3:82:29:a9:b9:56:6a:67:dc:60:
                    2d:35:10:9d:07:38:4a:a4:6e:77:57:d2:b9:e6:3d:
                    26:8c:c0:d7:72:c0:bb:42:15:e2:05:78:8a:2f:b0:
                    89:cb:11:5a:8f:d7:47:3b:4f:a0:eb:7a:52:9e:fc:
                    c6:2f:fc:69:97:f1:86:4d:b7:77:76:5d:ac:73:9d:
                    8f:52:3d:73:dd:c2:4d:ff:2c:9f:85:80:14:86:c8:
                    cc:de:f5:69:f6:42:fb:b1:42:7c:c5:36:62:23:34:
                    bc:ed:9f:9c:2d:d0:16:f1:13:54:28:ac:3d:a3:be:
                    88:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:77:AA:E3:32:D5:9F:F0:18:AE:4C:95:91:CF:4D:FD:D2:35:CC:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/11411582-890e-3d6e-822a-27aed92fc995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.129.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b2:0d:4b:da:60:bc:85:94:fb:19:c3:31:fe:74:68:55:f5:
         30:b4:63:a7:c1:ae:88:0b:e1:d4:32:73:7d:e0:22:9d:66:92:
         29:ce:c6:ab:d7:3a:73:b5:b7:4e:77:d9:a3:8e:c0:6a:0f:fd:
         67:5a:5c:97:1a:db:8e:43:b4:fa:08:d6:1d:aa:8e:77:31:02:
         ca:35:aa:83:4f:2a:03:f1:9a:cd:5d:9a:6a:b7:0f:c5:42:d3:
         d9:49:2f:1f:2a:92:78:67:78:12:73:c4:3a:04:70:b7:5f:dd:
         7a:e1:7c:f5:a1:fc:74:48:11:35:56:e3:16:1f:94:f8:c6:82:
         17:ee:8d:6c:52:46:77:38:eb:2e:2d:ce:f3:91:68:83:d9:4b:
         86:08:1c:49:84:c7:d7:ad:b0:5d:33:ec:36:bd:d8:2e:93:5b:
         0d:59:0f:7b:f8:94:93:0d:67:ed:f9:93:1d:62:65:bd:eb:14:
         cb:c3:61:22:f0:72:55:2d:25:c6:e3:06:d8:00:74:63:9a:a3:
         7a:50:6e:20:53:2a:82:90:f4:1e:81:4c:75:a4:f4:ac:37:76:
         40:8b:2b:57:0a:0e:86:2c:0c:71:b2:b3:52:ad:aa:80:22:58:
         db:67:d2:7d:a2:79:f5:34:2a:45:ee:18:c3:c6:b2:81:1b:4f:
         8d:a0:69:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:55:09 2025 by rpki-client