Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131/7170fe55-be4b-3134-bb67-0735883846ef.roa
File:                     7170fe55-be4b-3134-bb67-0735883846ef.roa (raw, json)
Hash identifier:          NdxVmDEz5jowlbIoeGOXVJoYZuby+OkW0NAIxhBluG4=
Subject key identifier:   9D:73:C3:4C:78:38:0A:68:F9:4C:A8:27:CC:DE:C8:B2:00:9B:3A:F1
Certificate issuer:       /CN=160e8d7e-7f7a-49e5-8735-610371a70131
Certificate serial:       010D0C9F4328584A103540A71F6EA3751ACED800
Authority key identifier: D0:2E:D0:4E:32:1D:E0:03:12:BE:1D:83:45:C7:D6:6B:85:54:5E:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131/7170fe55-be4b-3134-bb67-0735883846ef.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     32517
IP address blocks:        198.73.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131/160e8d7e-7f7a-49e5-8735-610371a70131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131/160e8d7e-7f7a-49e5-8735-610371a70131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:40:a7:1f:6e:a3:75:1a:ce:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160e8d7e-7f7a-49e5-8735-610371a70131
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=53976981-26d5-4f27-9d9b-7c57224bffa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5a:c7:78:0b:72:8b:e5:79:74:25:9e:84:ac:
                    65:ca:65:e3:67:e2:67:b5:a7:74:26:0b:83:7b:22:
                    0a:e4:9d:24:9c:8e:f1:4e:3d:c2:21:6a:49:12:22:
                    51:54:25:5b:0c:af:92:0a:20:94:60:75:6f:73:6d:
                    aa:4d:e1:8e:b6:10:3f:d6:31:26:28:6a:9b:21:76:
                    b6:28:e8:fd:c6:6c:40:59:e6:c0:4a:30:55:21:26:
                    03:d8:b3:d9:c2:c8:d7:35:30:2d:f9:4c:5b:ac:ab:
                    01:91:44:9b:b0:cb:36:f5:13:f9:a2:2f:d6:4a:ac:
                    99:e7:0b:a8:e6:17:cd:b3:0b:b3:bf:10:3b:90:8b:
                    44:7f:04:4f:5d:40:e5:f4:a2:ca:83:78:4f:8f:e9:
                    21:a2:12:26:a6:33:0c:59:9b:f5:3e:0d:51:98:e1:
                    eb:47:5c:42:56:4c:9c:3a:f7:bc:b5:d4:4e:da:b4:
                    27:dd:c9:9f:34:0c:ae:ac:8d:2f:78:27:17:6a:c4:
                    ea:ac:46:0b:38:f9:39:37:16:9b:c0:40:fd:fd:01:
                    62:78:18:c7:78:7b:65:a8:0d:a0:4d:76:92:bd:66:
                    56:da:f3:2f:4b:a4:2f:92:ab:53:73:cd:71:07:91:
                    82:b1:c0:f3:f8:9e:e4:6d:b7:e8:3b:1f:1c:1a:50:
                    c2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:73:C3:4C:78:38:0A:68:F9:4C:A8:27:CC:DE:C8:B2:00:9B:3A:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131/7170fe55-be4b-3134-bb67-0735883846ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131/160e8d7e-7f7a-49e5-8735-610371a70131.crl

            X509v3 Authority Key Identifier:
                keyid:D0:2E:D0:4E:32:1D:E0:03:12:BE:1D:83:45:C7:D6:6B:85:54:5E:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:96:91:d7:5b:cd:83:4c:e0:bb:4e:4d:c9:73:8f:25:bd:99:
         24:cd:35:f7:8f:66:ee:17:80:05:70:06:7f:62:75:c9:2b:94:
         df:c9:c9:66:3c:b9:88:38:61:78:c2:db:f2:33:ab:71:fe:12:
         3f:ec:84:0f:f0:17:45:36:ab:0b:7a:79:b0:70:25:a5:a7:16:
         1f:0c:da:57:e5:28:dc:fd:42:bc:9a:a8:1b:50:a1:f4:34:d2:
         07:7d:5c:b7:84:7d:c2:7a:b5:3b:fb:4e:a9:14:b0:08:c7:1d:
         3a:3b:8b:44:a9:d9:d6:b8:9d:f0:7e:27:34:ff:50:17:a1:02:
         45:de:d6:88:4f:bd:ec:8e:32:54:04:2f:a1:c6:37:57:1f:ec:
         8b:5d:b5:14:2a:14:bb:15:81:e0:94:25:09:d2:28:a2:f0:54:
         a2:97:00:74:32:4c:04:af:67:e8:8f:d2:10:56:97:58:e6:11:
         80:c8:b8:12:1b:d2:ea:47:22:7f:08:95:7c:f8:60:f6:ac:e9:
         ec:e1:2d:b5:64:ae:87:81:6c:01:93:92:18:01:df:93:65:48:
         f6:14:fd:d6:8c:df:51:5d:e0:10:15:88:12:03:e3:0c:8c:23:
         31:bc:d0:6d:75:50:e5:f2:34:88:33:ca:e9:42:24:28:df:f9:
         e4:6e:f3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:34:07 2025 by rpki-client