Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/19c7d435-0191-3d18-9f33-8c7a4026904c.roa
File:                     19c7d435-0191-3d18-9f33-8c7a4026904c.roa (raw, json)
Hash identifier:          PcHAZL87O2WrOTvFeDgHx5Ci+yzPks+2R2478C/mKz8=
Subject key identifier:   00:8B:3A:03:7D:62:E4:1D:4F:C5:9A:5D:37:CD:7D:83:FF:71:85:55
Certificate issuer:       /CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002
Certificate serial:       010D0C9F43285849B6DF4C6F9B2D78CAA65AFEC0
Authority key identifier: D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/19c7d435-0191-3d18-9f33-8c7a4026904c.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        161.199.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:4c:6f:9b:2d:78:ca:a6:5a:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=f810fbdd-5f29-4805-b243-eb91b75a74fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:45:07:0d:15:98:1d:e7:0a:bb:84:ef:b8:15:
                    ef:56:57:45:c6:36:f6:af:7b:44:b3:c0:ef:8f:43:
                    ad:86:c1:42:61:a1:41:77:f1:97:cf:52:6a:99:c0:
                    05:7a:5a:7d:a6:2a:bf:a5:dd:8b:a4:a5:67:db:51:
                    b4:39:e0:da:e1:19:09:b1:9e:2f:6e:f4:f7:59:24:
                    ed:a4:29:ce:a8:e5:2e:2c:8a:33:26:6d:7b:04:99:
                    aa:4d:51:04:5b:42:6c:c5:89:60:d0:83:85:38:c6:
                    7e:54:9d:9b:9f:fe:61:99:cf:1d:22:31:39:f6:ed:
                    c1:49:66:68:a5:fc:71:75:ac:a5:98:c1:ed:d5:77:
                    09:48:ff:e9:fd:f7:80:d0:8a:10:60:73:a5:f4:2c:
                    0f:4b:9a:b5:16:f8:7f:24:83:fd:62:da:fc:8f:db:
                    63:82:c6:8d:8a:74:aa:59:f3:a2:d9:d6:b0:10:81:
                    3c:88:8e:ea:74:1e:88:e7:1a:b5:e7:cd:20:a3:73:
                    c3:5b:d5:3d:ef:82:ad:07:c2:01:c8:20:1d:78:cd:
                    1b:5a:ff:8a:6a:fb:0e:0e:b5:d8:07:ef:4c:cc:f0:
                    c0:93:62:c1:5f:17:f7:61:b1:d7:41:c6:d8:bc:97:
                    8b:21:00:72:64:e2:3a:3d:58:46:c4:67:31:c2:05:
                    10:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8B:3A:03:7D:62:E4:1D:4F:C5:9A:5D:37:CD:7D:83:FF:71:85:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/19c7d435-0191-3d18-9f33-8c7a4026904c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl

            X509v3 Authority Key Identifier:
                keyid:D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:04:5a:9a:4b:f6:6d:7c:73:7e:5e:03:f6:cc:75:44:2b:48:
         ed:91:53:c3:7d:e8:da:6e:49:ef:c9:30:c3:fa:c9:bd:b4:9b:
         2c:46:26:06:3b:50:91:03:b6:1f:31:6a:4f:09:a8:e6:2e:08:
         90:c7:1f:58:29:3d:89:2b:c4:72:49:af:21:0c:6c:17:6a:a8:
         21:de:95:2c:c8:fa:39:85:54:c5:37:f8:1a:96:0c:59:8a:42:
         6b:a9:75:11:34:23:c1:d7:89:17:9a:af:32:08:12:ae:1d:66:
         9a:aa:94:e0:71:9b:3a:a8:0e:55:37:a3:66:8a:11:e7:c0:c8:
         4f:68:5b:67:7f:81:28:18:05:32:ef:43:70:68:a6:07:3e:f7:
         21:39:cc:48:eb:31:20:99:03:39:44:0a:7d:93:52:a7:46:4c:
         c8:a7:e9:55:b6:28:42:65:ce:33:5f:95:6f:73:a2:05:12:ce:
         39:6d:62:2c:96:58:3e:4e:4f:a3:f3:8a:21:5d:99:9f:c5:bc:
         8e:30:9a:2a:12:fc:db:79:d0:45:64:d5:89:e0:9f:91:82:5b:
         28:51:e2:c6:cd:e2:42:e0:af:c8:29:51:0f:81:fa:f4:d9:82:
         09:8c:40:53:16:a1:d8:7d:4e:68:4f:8d:b8:94:c5:e0:52:26:
         b3:ce:ac:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:57:54 2025 by rpki-client