Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/8e8f3423-e20c-39eb-a72b-4d0c69d1a74a.roa
File:                     8e8f3423-e20c-39eb-a72b-4d0c69d1a74a.roa (raw, json)
Hash identifier:          kMC3vkhMFoJn3C9MzTB2goEqa+2nttgCx2qA7LMFUaY=
Subject key identifier:   1E:82:CF:4B:C3:3A:E8:A5:F3:07:0A:F4:0D:22:74:29:F8:D5:7A:DE
Certificate issuer:       /CN=e04d8190-ec33-4551-9197-d06746d399d0
Certificate serial:       010D0C9F43285849C63A25EB7BB3C0B20E931C80
Authority key identifier: 02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/8e8f3423-e20c-39eb-a72b-4d0c69d1a74a.roa
Signing time:             Wed 07 May 2025 13:01:01 +0000
ROA not before:           Wed 07 May 2025 13:01:01 +0000
ROA not after:            Tue 05 Aug 2025 13:01:01 +0000
asID:                     36352
IP address blocks:        146.148.160.0/24 maxlen: 24
                          146.148.161.0/24 maxlen: 24
                          146.148.162.0/24 maxlen: 24
                          146.148.163.0/24 maxlen: 24
                          146.148.164.0/24 maxlen: 24
                          146.148.165.0/24 maxlen: 24
                          146.148.166.0/24 maxlen: 24
                          146.148.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c6:3a:25:eb:7b:b3:c0:b2:0e:93:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04d8190-ec33-4551-9197-d06746d399d0
        Validity
            Not Before: May  7 13:01:01 2025 GMT
            Not After : Aug  5 13:01:01 2025 GMT
        Subject: CN=1c3a42a0-d4ac-4ab6-8aef-4617b5cb8a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e0:2e:fc:04:0b:d9:75:d6:f2:5a:36:cd:fe:
                    6d:c3:ad:a0:83:56:27:62:a2:67:56:d6:2f:32:c6:
                    2e:55:63:4c:61:ab:df:0a:38:65:09:11:80:65:1f:
                    e2:ba:ba:2d:04:0e:e4:3a:1c:12:f5:9e:68:32:e2:
                    a1:34:f7:1a:d3:de:de:68:9b:77:e5:0e:33:8e:71:
                    bb:84:4a:eb:16:ea:e8:a9:09:92:17:be:cf:bf:b3:
                    03:29:e5:b6:2d:61:47:c5:0e:f0:5e:cb:e1:ae:af:
                    68:a8:27:d1:06:34:99:18:ed:f3:94:05:e3:bf:d3:
                    09:b4:79:bb:85:40:90:32:68:be:61:3d:54:4f:0d:
                    fb:17:70:c1:33:78:bb:45:c2:4f:07:12:27:9f:59:
                    86:3d:30:6b:fd:e2:af:85:21:eb:d1:ee:13:1b:4d:
                    ad:fe:a2:99:df:47:61:78:03:ab:1c:82:21:00:d0:
                    71:9b:62:d9:77:a8:7f:4a:f1:64:1e:75:89:b4:df:
                    1e:b2:a0:35:00:ec:87:21:b3:e1:fc:b3:5c:c6:ed:
                    89:e3:5a:0c:39:65:79:24:7c:2d:ff:3f:f7:78:4f:
                    fc:90:f5:c6:6a:81:70:36:75:03:4b:c5:59:74:29:
                    24:29:58:f7:03:18:b6:a4:d7:6e:dd:c5:a1:dd:85:
                    2b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:82:CF:4B:C3:3A:E8:A5:F3:07:0A:F4:0D:22:74:29:F8:D5:7A:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/8e8f3423-e20c-39eb-a72b-4d0c69d1a74a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl

            X509v3 Authority Key Identifier:
                keyid:02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.148.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e3:8a:9f:5e:80:f5:be:a3:77:6d:0d:60:c5:85:5c:23:c0:
         ea:6b:c8:3b:64:81:a3:69:33:39:f3:75:76:82:62:9e:b7:af:
         a8:76:5e:d4:a8:26:f2:52:f4:15:8a:15:30:05:26:c6:e9:a7:
         bc:74:04:a5:9d:5d:8b:0a:88:37:98:25:43:5d:dc:cb:fa:e6:
         e8:25:d4:3b:a6:c7:08:b7:a0:6b:9e:94:6f:b0:9a:9d:ac:a4:
         a7:8b:1a:85:d4:73:6e:6c:12:8d:ec:03:79:b7:61:99:33:90:
         72:e2:86:ab:3a:5e:58:fb:87:0f:a1:10:19:96:90:10:ea:fa:
         f4:ef:57:a6:43:40:f1:16:f7:9c:8c:95:ca:c1:f5:b6:17:e6:
         4d:0c:ca:9c:35:9e:87:ab:64:f2:f3:5d:b0:bb:9b:d4:e4:64:
         24:a7:b0:26:b6:58:07:d9:1d:5f:3b:3e:49:4c:a3:f0:12:6d:
         32:1d:4c:4c:1b:a1:7c:eb:04:c7:7b:45:c1:bb:af:eb:f3:6b:
         cf:e6:65:9a:f3:a2:97:38:79:ca:2b:b5:e7:2b:86:fb:ff:b4:
         95:4d:74:05:89:3e:2d:38:6a:13:7a:75:04:e6:94:95:30:00:
         1c:67:aa:04:9b:33:34:49:6f:4a:4d:a6:5f:7a:f1:2a:d2:56:
         b1:53:c0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:03:28 2025 by rpki-client