Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/abe5c1e9-8e9f-3df1-8a3e-edd541c1f114.roa
File:                     abe5c1e9-8e9f-3df1-8a3e-edd541c1f114.roa (raw, json)
Hash identifier:          oFiGhwsPuALUtzYx7c7/QskG39P3A+1L+UbI9X37VP4=
Subject key identifier:   C9:4E:02:40:92:FC:C1:16:5B:96:A0:B8:4F:B3:F7:3F:04:6F:E4:E7
Certificate issuer:       /CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
Certificate serial:       010D0C9F4328584A1730082A9A0A07ED7FD17000
Authority key identifier: 3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/abe5c1e9-8e9f-3df1-8a3e-edd541c1f114.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        199.96.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:08:2a:9a:0a:07:ed:7f:d1:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=967277be-fcbd-46fb-a882-67955dd53564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:37:44:18:6f:a7:6a:4a:8a:3c:80:ce:b0:35:
                    71:b5:9b:f7:12:48:43:b5:d9:dc:50:22:b0:d9:f1:
                    c9:ab:18:6d:f4:00:ed:e7:d9:83:67:4f:80:41:49:
                    65:cb:ba:3d:b9:52:30:ca:02:4b:3f:61:9f:49:98:
                    f3:08:7e:e7:21:64:f7:e3:90:df:5a:46:16:3d:4a:
                    82:a6:9b:f4:78:db:b3:f4:7c:97:b1:d8:04:b9:d4:
                    46:b5:d7:7c:09:49:f3:2d:ba:86:95:f3:d3:81:db:
                    d1:ca:30:cd:31:de:30:6e:0b:e0:c9:c5:c4:6a:93:
                    bc:ec:cf:08:0d:f5:b2:47:75:05:01:c0:84:2c:69:
                    f8:6b:33:a6:75:68:35:84:66:f7:dc:af:e8:99:70:
                    c8:58:cf:92:26:e1:ca:0a:98:f2:1d:bf:e6:80:db:
                    7d:fa:6c:6e:a9:ac:b4:ab:45:29:b5:3b:75:d4:58:
                    75:70:7a:cc:50:a9:17:59:2c:29:95:3e:76:9b:7c:
                    62:20:98:d4:bf:33:76:af:70:71:76:dd:08:ab:93:
                    41:e6:21:1b:04:3b:b3:36:53:f4:e7:52:eb:e3:87:
                    bb:7c:89:14:64:15:5e:d2:c6:10:a0:51:15:d0:21:
                    02:9a:6e:d3:d6:ee:d9:08:7f:55:af:63:84:e0:57:
                    52:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4E:02:40:92:FC:C1:16:5B:96:A0:B8:4F:B3:F7:3F:04:6F:E4:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/abe5c1e9-8e9f-3df1-8a3e-edd541c1f114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:3a:aa:7f:67:78:e6:83:1d:8d:fb:55:05:ba:b8:05:fd:22:
         20:27:a0:c1:b4:d7:2d:8d:0e:1d:49:0a:e4:41:6d:09:97:91:
         ca:22:68:86:f7:cb:e3:f5:2e:cc:ad:c4:40:c0:80:04:e3:65:
         75:fc:2c:d9:8e:2b:0e:43:b1:77:73:e8:09:1a:6c:ba:cc:2f:
         9a:ea:ce:26:83:37:b0:6b:7d:a9:67:48:4e:e9:de:bd:92:a3:
         16:17:b4:cb:83:13:1e:e6:a9:b8:40:10:c9:98:78:8f:8a:92:
         7d:11:d8:45:d1:c4:87:6f:1f:d9:8c:f0:10:ed:1a:64:93:2b:
         b8:9a:18:5f:22:77:34:ca:88:d0:6f:e7:74:d5:0e:ac:93:d1:
         b7:53:0c:b0:3f:a8:96:32:63:03:55:0b:68:2d:27:b3:e6:a2:
         3e:5f:d1:54:31:49:0f:a4:5d:35:8f:83:33:9b:43:8f:ae:16:
         af:bc:b6:17:fe:a2:fb:0f:ad:4a:5a:2f:e6:05:19:08:df:42:
         69:2a:48:44:d4:ac:3c:df:d3:1f:b5:b5:93:8c:c6:12:e4:bd:
         61:29:5b:44:da:a9:fd:8f:67:0b:80:17:0f:e4:fc:ce:e5:28:
         ea:e2:c9:05:1a:0f:36:6f:40:97:0f:42:26:0f:8f:74:90:9f:
         05:29:d0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:59:51 2025 by rpki-client