Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/caae2dc4-be77-35c9-9cc1-45c63bb92eeb.roa
File:                     caae2dc4-be77-35c9-9cc1-45c63bb92eeb.roa (raw, json)
Hash identifier:          oKQtKr+gvs9ntdi3VZavTFC+q4bbfYSuQL8iE4UjIAw=
Subject key identifier:   1E:D3:06:93:3C:57:F3:46:81:88:BB:DD:DD:0D:FE:1D:A3:57:DB:B3
Certificate issuer:       /CN=ac683038-c192-4fba-ae61-c511683cdb6a
Certificate serial:       010D0C9F432858499AF47F0FC6124256E5643280
Authority key identifier: D1:F4:1D:DB:27:4E:3B:A0:A5:7B:4B:11:17:C9:16:5D:85:21:1E:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/caae2dc4-be77-35c9-9cc1-45c63bb92eeb.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     13549
IP address blocks:        64.7.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/ac683038-c192-4fba-ae61-c511683cdb6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/ac683038-c192-4fba-ae61-c511683cdb6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:7f:0f:c6:12:42:56:e5:64:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac683038-c192-4fba-ae61-c511683cdb6a
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=1a2f50da-8839-48a9-a470-a63e55a3de67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:56:4e:89:55:4c:76:34:d5:79:63:f3:99:
                    c0:d6:8c:5e:0a:6d:f0:5a:5b:8f:c0:e9:b8:0d:ac:
                    79:92:cf:20:c9:84:f0:ef:75:7a:3e:f6:a3:8d:e1:
                    7a:3d:76:3f:f9:48:90:50:59:9f:43:fa:29:01:75:
                    0f:f7:6f:96:1e:63:d9:d1:1b:76:c0:8c:69:5c:d9:
                    1e:38:fd:da:46:49:33:ec:17:92:db:07:ee:69:3f:
                    bb:c3:17:da:fc:14:e8:a1:80:73:e4:30:90:01:fb:
                    e6:d6:bf:fd:88:fc:7a:d9:6d:7e:cb:e1:8f:6a:7f:
                    aa:d9:4f:a7:2f:23:ce:79:e3:8c:0e:af:9b:e6:40:
                    ba:5f:9b:37:f6:9e:c1:ad:c3:b5:d3:16:cb:41:7d:
                    a0:ac:d8:35:cf:47:98:5d:a8:3d:6d:11:50:47:97:
                    cf:c4:0f:33:2b:06:7a:24:33:5b:d5:e3:a2:a6:1a:
                    af:31:03:f4:2b:a8:3b:e8:9d:02:7b:3c:fc:ee:de:
                    5b:6c:bf:6e:f1:1b:79:2f:a6:da:e7:b2:7e:48:78:
                    3d:d4:07:94:06:4c:cb:43:77:e4:2f:db:40:cc:00:
                    07:17:81:63:06:10:3a:3f:4f:6e:65:66:e3:34:a6:
                    3a:33:98:09:b4:58:e9:c1:f8:73:e5:ff:86:ff:b4:
                    84:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D3:06:93:3C:57:F3:46:81:88:BB:DD:DD:0D:FE:1D:A3:57:DB:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/caae2dc4-be77-35c9-9cc1-45c63bb92eeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/ac683038-c192-4fba-ae61-c511683cdb6a.crl

            X509v3 Authority Key Identifier:
                keyid:D1:F4:1D:DB:27:4E:3B:A0:A5:7B:4B:11:17:C9:16:5D:85:21:1E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d6:65:9e:5c:e3:80:c8:5a:0f:bd:80:89:ed:43:78:10:68:
         e7:da:c4:43:a3:59:75:ef:d0:96:67:92:1e:4f:55:2c:d6:05:
         58:71:5c:f2:51:a9:69:c2:61:37:29:07:b0:6b:30:ed:bb:74:
         71:7d:c5:66:0e:33:81:ac:fd:b3:2d:de:e5:ec:dd:95:95:8c:
         de:4b:ed:7f:02:22:63:51:3d:d8:bd:39:21:dc:ae:21:1e:5e:
         ae:2d:81:ae:12:36:4d:ea:33:4c:90:a3:53:72:7b:ef:41:de:
         42:d4:5f:58:8d:c2:32:ab:65:44:87:7b:0c:fc:6e:90:f6:65:
         db:10:d2:f5:ef:5e:99:2f:4f:ef:06:2d:0b:f3:6f:69:74:42:
         96:6f:12:1a:79:a1:07:66:69:9d:36:dc:e2:66:41:f5:b0:c7:
         15:40:0e:a8:14:34:bf:b4:51:71:45:02:67:2a:6a:59:14:44:
         35:69:5f:f7:6f:21:a2:cc:ca:66:1b:ea:0d:e6:c2:78:e2:07:
         d7:85:4d:cf:93:6e:5b:a6:65:01:4d:b2:7b:33:c5:f8:65:f2:
         ed:b1:11:5f:ca:fa:06:15:2a:1f:0d:23:34:54:94:e3:b4:38:
         54:cc:69:c3:66:90:2e:9c:c5:79:d2:f0:e5:df:e3:b6:67:e8:
         78:ae:6d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:23:37 2025 by rpki-client