Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/a87c3fa8-23b2-3379-81df-57cc9673cb16.roa
File:                     a87c3fa8-23b2-3379-81df-57cc9673cb16.roa (raw, json)
Hash identifier:          X0a2OSE4AmV5FeP+k3naRwpaAykxEDp3Xfq01404sZc=
Subject key identifier:   B0:6B:B2:07:F0:34:1F:24:C9:75:AA:09:53:77:B4:A9:B2:7C:96:64
Certificate issuer:       /CN=e04d8190-ec33-4551-9197-d06746d399d0
Certificate serial:       010D0C9F43285849C63A2589E99BB1D890EE4880
Authority key identifier: 02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/a87c3fa8-23b2-3379-81df-57cc9673cb16.roa
Signing time:             Wed 07 May 2025 13:01:01 +0000
ROA not before:           Wed 07 May 2025 13:01:01 +0000
ROA not after:            Tue 05 Aug 2025 13:01:01 +0000
asID:                     36352
IP address blocks:        107.167.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c6:3a:25:89:e9:9b:b1:d8:90:ee:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04d8190-ec33-4551-9197-d06746d399d0
        Validity
            Not Before: May  7 13:01:01 2025 GMT
            Not After : Aug  5 13:01:01 2025 GMT
        Subject: CN=6c483203-18a7-49df-92e1-3866efa23132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:ed:b3:03:e0:ef:79:31:9f:b2:0b:59:e9:
                    40:07:53:c8:29:75:9d:5d:c2:dd:60:d3:90:e0:b7:
                    41:95:32:2f:85:c1:f4:c1:7e:c4:c3:8e:17:39:31:
                    5a:0e:57:fe:e6:47:b2:5e:0b:ba:42:e0:be:30:f8:
                    d3:14:d1:8b:88:1e:61:3c:73:5f:e1:e7:df:7d:75:
                    98:a2:76:f3:ae:bf:03:2b:d0:46:0c:be:a8:8f:ef:
                    35:3b:43:e3:55:02:27:6c:af:b3:1c:3c:35:a0:07:
                    c2:7a:af:51:30:ef:46:50:a4:6f:2d:9d:26:46:0d:
                    e3:81:34:2b:03:d8:a5:6a:e9:c0:3a:38:a9:4b:56:
                    a9:2e:2b:17:43:1f:16:07:2c:21:b1:84:c7:f0:84:
                    36:4d:ed:3c:be:33:e8:d5:f0:5b:83:55:f1:2e:55:
                    65:6f:7c:df:48:95:be:bc:be:c6:82:0d:f1:88:b7:
                    83:5e:ad:21:76:dd:f7:37:e5:c9:7c:46:d8:c3:c7:
                    47:3f:41:76:15:19:70:a0:8d:d1:37:eb:6d:2d:27:
                    b5:c3:dc:dc:6e:38:22:f1:46:96:a3:dd:dc:86:94:
                    36:21:cc:4c:59:b3:5c:dd:31:16:ac:14:82:13:e8:
                    ae:27:f4:a1:40:c6:b0:47:d2:02:02:54:25:3b:04:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6B:B2:07:F0:34:1F:24:C9:75:AA:09:53:77:B4:A9:B2:7C:96:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/a87c3fa8-23b2-3379-81df-57cc9673cb16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl

            X509v3 Authority Key Identifier:
                keyid:02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:0b:73:83:ad:f9:86:8f:7a:45:46:4c:85:1b:f5:9b:e6:03:
         17:68:a6:42:e1:2d:1a:3c:2d:d8:31:58:1e:08:c0:a1:23:87:
         ce:f5:85:95:55:c6:58:e9:d3:2f:6d:6b:c5:b5:b1:94:e6:14:
         33:c9:69:27:ba:18:e0:2b:4a:f3:1b:99:12:85:2f:9c:c9:87:
         67:5f:91:42:41:13:a8:bc:07:0c:06:09:63:ec:44:f4:e5:4b:
         32:5a:1f:5f:87:d4:a2:4e:86:8a:4a:ff:e3:cb:bb:17:9e:36:
         7a:d7:04:a0:af:28:d7:59:ae:c2:7b:7b:31:34:09:97:81:96:
         2c:fd:ec:d6:0f:57:ae:0a:0d:1c:19:39:97:3a:15:0e:d7:0c:
         6a:93:8b:5e:71:5f:8e:91:df:25:24:31:71:02:bf:14:10:07:
         66:ac:da:ce:fe:14:0c:6e:31:d0:ce:cd:12:dd:50:bc:41:11:
         28:20:73:73:09:b4:a4:45:e7:46:9f:85:2f:d2:da:52:68:eb:
         99:a1:6a:10:0e:7d:7a:59:97:ee:7a:c9:3b:2c:fc:77:88:c4:
         7b:e4:78:a3:71:f4:e6:fd:d2:18:58:4b:59:97:71:01:16:82:
         7a:73:6c:6c:a3:57:90:6a:8d:bd:51:3f:eb:11:06:87:bc:6a:
         77:e3:b2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:59:57 2025 by rpki-client