Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/971c127d-3b4c-3c7a-841b-6314c4d14d35.roa
File:                     971c127d-3b4c-3c7a-841b-6314c4d14d35.roa (raw, json)
Hash identifier:          FyQb7SqFt3NqBvOFgrgdsh5uL3HRHERptY2oqh+Vc8E=
Subject key identifier:   B3:27:EA:FC:02:54:77:A5:69:D3:FF:49:52:D6:50:6F:CF:FC:C0:49
Certificate issuer:       /CN=b3b07b0c-a30d-4cac-9123-4d459839ea53
Certificate serial:       010D0C9F43285849BDDA29E118618D02A04A6580
Authority key identifier: 59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/971c127d-3b4c-3c7a-841b-6314c4d14d35.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        165.1.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:29:e1:18:61:8d:02:a0:4a:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b07b0c-a30d-4cac-9123-4d459839ea53
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=c8f1cc88-14bd-4678-a901-8eb4fd92cf04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e8:dd:b9:dc:bf:31:02:b6:5c:95:bd:cd:21:
                    af:b2:37:ce:08:89:db:65:a7:6d:bd:a3:89:2d:b0:
                    78:da:03:83:65:43:95:3a:26:ca:70:51:7e:be:6e:
                    a6:1f:81:a8:0d:f0:bf:54:81:81:a6:3a:76:d7:9c:
                    39:b0:74:48:fa:d3:46:56:61:ee:72:2d:cd:8c:a0:
                    7e:a6:16:59:a5:21:46:70:3d:85:90:75:43:3b:e7:
                    5c:02:db:8e:df:12:6f:4d:d7:78:f5:cd:df:c1:e9:
                    e7:f0:e0:69:f1:1d:dd:03:c4:75:0a:2f:75:52:a8:
                    8b:dd:1f:67:06:ed:24:dd:2b:9b:48:b0:ba:05:4a:
                    2a:23:e3:36:26:b0:14:98:8c:91:b1:82:d7:85:e2:
                    c0:2c:91:fe:5e:d3:f6:26:20:cd:04:19:ce:9b:b5:
                    92:32:0c:55:75:3c:43:83:57:03:7c:6d:41:d9:ed:
                    18:61:e1:88:9b:d3:66:66:bf:3c:21:5c:82:d4:fe:
                    27:50:73:a7:34:95:71:55:e3:a2:b4:35:74:66:41:
                    67:46:82:bf:8d:9f:62:33:fb:1b:40:ae:b5:77:7a:
                    91:db:30:55:46:f7:7a:3a:b7:f1:16:49:22:a1:f8:
                    2e:ae:40:54:c2:f7:68:8b:9d:94:cd:44:29:af:1a:
                    84:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:27:EA:FC:02:54:77:A5:69:D3:FF:49:52:D6:50:6F:CF:FC:C0:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/971c127d-3b4c-3c7a-841b-6314c4d14d35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl

            X509v3 Authority Key Identifier:
                keyid:59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.1.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:6c:37:8e:ed:84:f0:33:f9:1e:cd:70:70:2d:39:8d:91:45:
         7e:49:06:40:2a:b2:4f:a5:76:cf:b4:ea:5d:20:36:56:03:1e:
         e8:58:98:be:67:9d:30:6b:5d:68:ff:eb:a9:b6:ea:f7:64:52:
         fb:a2:c9:39:84:c7:b0:a3:fc:b8:dd:60:ec:66:56:c8:bc:76:
         36:68:54:d8:69:cc:80:72:36:ee:63:cf:69:58:2f:ae:b5:f2:
         94:0a:52:6d:b8:6d:9f:da:71:6b:b7:01:8a:0c:f9:5d:1e:b0:
         69:29:19:43:c9:da:08:0e:ef:58:1c:9b:50:57:b9:f4:12:ce:
         4a:6e:fd:05:cb:9a:e5:6a:c0:c5:fa:7d:d7:37:41:9d:35:a6:
         b3:ca:90:3d:39:c8:41:99:90:bc:1a:44:10:59:4b:2f:87:f1:
         89:f4:2f:16:4a:63:80:62:32:60:26:fd:f9:fb:6f:55:4f:09:
         6f:66:10:58:49:bc:8a:32:e3:29:35:33:dc:51:8e:ae:3f:ee:
         cb:67:e4:bc:58:f2:95:41:11:00:3d:47:d2:ea:99:bb:0a:8f:
         8b:b4:18:74:97:dd:13:d2:2a:cc:99:6a:80:3d:e7:b6:dd:9e:
         45:03:c9:3d:4d:09:1b:41:35:70:da:88:21:96:99:70:97:1e:
         ed:07:b5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:35:36 2025 by rpki-client