Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6/b163f5cb-3463-37e5-a115-19f140bcec69.roa
File:                     b163f5cb-3463-37e5-a115-19f140bcec69.roa (raw, json)
Hash identifier:          AjEIO0Ye8JLsu3jOvs4lD9k0HsekgihqteR8uv4sjhI=
Subject key identifier:   9E:F3:4F:8F:B6:E5:63:9E:7A:34:D8:D9:40:60:81:D5:2C:99:1D:29
Certificate issuer:       /CN=52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6
Certificate serial:       010D0C9F43285849955F224C4AA419972F010600
Authority key identifier: C6:50:32:23:BD:70:43:DD:F2:32:F3:32:03:E7:20:2D:44:95:C3:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6/b163f5cb-3463-37e5-a115-19f140bcec69.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     63353
IP address blocks:        104.243.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:22:4c:4a:a4:19:97:2f:01:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=60788dca-76b9-4f64-8838-9b8aa7a14af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:0f:79:a0:c7:dc:6d:45:54:9a:05:52:c9:
                    75:74:c7:f1:f4:b1:fe:a7:e5:b1:17:eb:df:75:83:
                    fe:da:86:19:24:09:5a:af:00:e3:1f:fb:cf:0a:07:
                    d5:46:05:62:10:1c:d9:b5:b5:9e:a9:e3:87:38:1d:
                    20:bd:e4:4c:cb:65:39:d6:b5:af:4d:91:59:17:64:
                    b0:7c:8b:3c:e8:e5:5d:a4:d4:23:93:2c:35:b1:7d:
                    cf:03:66:d0:ba:f7:4f:ee:43:b4:97:6f:52:28:f3:
                    9e:d0:38:8a:c1:b5:01:fb:39:c4:59:4e:b9:bd:46:
                    48:c6:89:e0:14:d6:95:04:ef:d6:d1:59:48:11:7a:
                    fc:ed:25:40:f8:77:2e:b2:31:e1:fd:6a:39:2e:14:
                    c9:4e:a5:0f:20:59:48:71:63:91:f5:f2:b5:05:ff:
                    71:a9:52:04:a7:9a:27:31:34:0f:e1:e8:3c:ee:bf:
                    c4:06:28:11:af:15:21:b2:4d:f3:7b:e7:6d:1e:84:
                    57:c8:9f:40:59:cc:b4:ff:b2:10:97:4c:20:52:27:
                    82:e1:33:1f:e5:c5:68:76:67:d2:38:89:e9:bb:95:
                    16:53:e7:3a:a7:62:cb:d2:ef:d9:42:66:09:d2:80:
                    54:1f:f9:e0:9e:59:8e:49:39:89:31:72:0f:20:19:
                    e5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F3:4F:8F:B6:E5:63:9E:7A:34:D8:D9:40:60:81:D5:2C:99:1D:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6/b163f5cb-3463-37e5-a115-19f140bcec69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6.crl

            X509v3 Authority Key Identifier:
                keyid:C6:50:32:23:BD:70:43:DD:F2:32:F3:32:03:E7:20:2D:44:95:C3:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:d2:ee:9b:d1:dc:bb:f9:7d:08:f6:d7:b9:17:d7:9c:84:e8:
         21:f7:6a:77:a7:94:ba:4c:49:6e:a0:02:9e:08:09:d6:ef:37:
         cd:d2:6c:8b:fb:99:94:56:04:b7:2d:5a:54:32:59:a3:46:a1:
         c3:7b:3c:bc:c9:67:c4:aa:2b:9c:5c:c1:46:71:da:d6:64:dc:
         f4:4b:fb:67:fc:c1:84:7b:57:44:11:b1:ce:82:d9:81:5f:e0:
         cd:29:d5:e0:16:5a:52:fa:6f:e4:94:1c:c5:bd:2c:ec:95:c7:
         3e:de:0c:de:1a:cc:b2:d9:86:d6:87:48:a4:a0:02:db:9f:e8:
         e6:fb:40:a0:e8:09:ec:9d:f6:7c:46:0b:68:4c:90:19:c3:f6:
         bf:c2:59:57:53:40:b7:d2:3b:80:3b:f0:de:a2:48:5c:59:9b:
         92:c2:37:32:8f:e2:48:94:e9:55:3e:32:a3:2d:ee:10:b1:b7:
         55:b9:2b:f0:f3:22:0d:20:9b:66:34:bf:43:b2:34:12:1f:44:
         41:bf:3b:20:00:ff:6d:51:ee:97:44:1b:b6:07:54:32:1c:6b:
         24:ac:a2:11:7f:d8:36:ca:1c:a1:0e:86:32:9b:c1:e7:b9:52:
         71:8b:ca:46:fe:ee:ff:d6:e7:be:18:45:31:12:52:b1:d4:fc:
         f9:65:24:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:15:48 2025 by rpki-client