Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/79feea74-1d7a-36a9-8d6d-3fb485b20383.roa
File:                     79feea74-1d7a-36a9-8d6d-3fb485b20383.roa (raw, json)
Hash identifier:          eb5/D8qnc2iUuvV/uEZLtGSYpQgPfvw8B0zszijjwvc=
Subject key identifier:   D7:D9:A3:4B:10:26:E4:19:3B:25:54:08:84:7A:65:2C:91:84:AB:83
Certificate issuer:       /CN=44b921f7-65dd-4b33-b399-9d372fb4a9e5
Certificate serial:       010D0C9F4328584A17300B78D24C0E1A81B7FA00
Authority key identifier: D7:CF:CB:83:53:E0:39:AE:EC:3E:6F:8F:1D:78:2C:52:51:F1:4B:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/79feea74-1d7a-36a9-8d6d-3fb485b20383.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     30045
IP address blocks:        205.211.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:0b:78:d2:4c:0e:1a:81:b7:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b921f7-65dd-4b33-b399-9d372fb4a9e5
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=9e34f71c-b21e-488c-b060-67f727e20722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:11:1c:16:4f:1c:59:8e:7f:dc:3c:69:88:
                    6a:ef:f3:e4:6d:3d:22:b8:6b:e6:2d:f8:5c:11:32:
                    0d:46:22:24:7e:91:f5:ea:4d:24:40:e2:37:12:4a:
                    d5:15:44:9c:06:2f:6a:67:70:2d:0d:f3:ea:5c:01:
                    88:1f:22:e9:e9:ff:6f:eb:dc:68:09:1a:13:b3:8d:
                    ca:2f:bc:b8:0e:d8:41:f0:34:05:43:a1:8c:87:37:
                    87:9d:89:62:0d:08:aa:e2:1b:49:5e:6d:6f:2f:d3:
                    8a:af:02:52:de:db:74:d3:11:42:c8:ba:19:d7:a4:
                    92:d5:ff:2a:8b:1c:eb:8b:ad:ed:01:43:c7:9a:1e:
                    34:ba:6e:67:47:58:b4:06:31:74:25:2a:60:72:37:
                    c3:92:c7:f7:5b:8a:ec:5c:6d:dd:f7:91:1c:60:6b:
                    e1:31:8a:5f:fd:4b:2a:23:c6:99:a1:08:6b:66:8b:
                    0d:00:89:30:84:6a:b7:92:5f:08:19:16:2d:d1:29:
                    cb:1a:97:42:d7:4f:5f:55:83:73:ed:af:69:7e:c2:
                    6c:f7:4c:62:f2:2b:eb:8a:ac:5d:86:5a:09:ab:f8:
                    18:d0:ed:72:74:7a:13:c8:7f:05:3a:e6:84:46:c8:
                    de:a6:23:0b:58:ea:26:bb:17:9b:67:a9:55:2d:35:
                    3e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D9:A3:4B:10:26:E4:19:3B:25:54:08:84:7A:65:2C:91:84:AB:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/79feea74-1d7a-36a9-8d6d-3fb485b20383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.crl

            X509v3 Authority Key Identifier:
                keyid:D7:CF:CB:83:53:E0:39:AE:EC:3E:6F:8F:1D:78:2C:52:51:F1:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:39:08:1b:d3:2e:db:7b:60:92:0a:26:60:e5:57:3e:28:23:
         41:8e:08:31:33:8b:53:6c:c4:08:c3:cd:01:6a:e1:64:50:d5:
         58:aa:36:4f:1c:d3:4e:09:24:17:76:e6:e2:fa:9c:5a:80:97:
         5e:2b:1e:7f:a7:c7:95:fa:ff:97:a1:82:a3:37:d8:0c:29:10:
         18:4a:cf:e3:db:aa:ea:1d:4e:67:b4:3f:19:77:b5:a4:a4:96:
         ac:f2:ba:52:f5:21:99:16:0b:cb:36:0c:97:fc:e3:e2:7a:19:
         a2:e3:e6:2e:be:2a:20:de:98:83:17:49:87:f9:6b:c9:61:af:
         34:ac:ba:56:b4:8a:82:38:f9:2f:37:21:79:52:86:68:91:14:
         7a:ff:26:34:a5:6b:35:5b:f4:95:4b:01:8f:4e:52:ff:7d:30:
         d6:2d:c9:01:c3:93:91:76:48:e8:9f:e6:52:20:88:26:a2:4d:
         c1:04:5f:84:95:e4:9b:92:fb:b8:e5:6a:2d:b4:f2:4b:0f:20:
         e0:40:b6:91:8e:69:30:55:af:68:2d:b9:c4:21:d7:ce:4e:da:
         08:82:dd:2e:fe:85:16:b2:ad:ef:74:58:2c:da:59:63:89:57:
         6a:fc:20:6a:d1:aa:d8:d4:d6:98:05:c8:d8:f8:80:5a:f6:fe:
         3e:72:a7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:48:08 2025 by rpki-client