Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/fa6c4dbf-a86e-3149-81a8-144b64cb9cd9.roa
File:                     fa6c4dbf-a86e-3149-81a8-144b64cb9cd9.roa (raw, json)
Hash identifier:          2CHReYlFy4wepx2xowt3xIxPmCm55yAOl8+pPxQPvNA=
Subject key identifier:   52:B5:25:62:76:1F:79:1A:61:92:DC:DB:96:BF:5F:95:E1:2B:07:43
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F43285849F9DFD0C90B329E9D0A187900
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/fa6c4dbf-a86e-3149-81a8-144b64cb9cd9.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     40317
IP address blocks:        137.119.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d0:c9:0b:32:9e:9d:0a:18:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=6d07583a-a519-4396-aa8d-3a80fe6ef33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:79:e4:ed:51:48:92:fb:0b:bd:e8:f7:c1:d7:
                    7b:2d:b0:5a:54:d4:c5:67:77:31:45:e1:55:16:e7:
                    e3:a7:f0:94:79:d9:44:66:f3:58:eb:98:ad:56:32:
                    c4:06:bf:dd:49:31:54:c4:3a:9c:8c:14:38:ba:9a:
                    9d:9c:d7:e1:2b:35:90:30:6b:2a:6b:8b:45:3a:5f:
                    f9:63:a0:3a:8b:63:c3:80:f9:6f:c2:3b:ec:53:1a:
                    1e:65:b9:68:4c:10:ac:e1:27:f8:1f:7c:60:48:af:
                    85:86:63:8f:d2:fd:09:83:42:4e:23:b7:a9:b7:e2:
                    c5:fa:ab:8c:9d:c2:b0:e5:3a:63:22:7e:43:77:b0:
                    20:63:3b:c4:84:45:24:38:38:f4:bf:16:16:07:0c:
                    b4:58:11:8b:83:7b:32:6f:4a:1d:17:c5:c4:65:64:
                    71:b8:90:53:f5:34:a3:8d:e4:dc:b3:ea:3f:fa:67:
                    08:f5:89:b1:30:f4:19:33:e3:e4:73:9f:ca:84:51:
                    26:09:56:40:5d:1b:20:55:c4:c9:72:e5:15:75:19:
                    05:4c:11:dc:3c:ea:a6:be:de:08:98:3c:a3:a5:06:
                    3b:04:db:59:51:9c:a6:f7:dd:b3:e3:2e:44:0d:99:
                    7c:0c:d4:b4:f8:0d:51:ff:75:c6:da:a7:9b:cd:1c:
                    79:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B5:25:62:76:1F:79:1A:61:92:DC:DB:96:BF:5F:95:E1:2B:07:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/fa6c4dbf-a86e-3149-81a8-144b64cb9cd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.119.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d4:61:d3:00:fd:d3:e1:82:5e:a1:b1:4d:8a:d5:93:f0:b3:
         28:6f:1f:06:74:47:55:a0:bd:cb:70:44:b2:e1:0d:08:c3:bf:
         f6:34:bb:57:e4:d6:35:e0:2f:4c:84:b0:6c:7e:c6:bb:2d:36:
         98:db:c2:96:e8:a5:ef:18:fb:9e:1d:25:ab:75:04:95:d8:db:
         80:ca:cd:9e:17:42:9b:a9:5d:88:2a:dc:35:a3:40:10:f9:85:
         70:80:76:e8:04:fc:7f:61:e3:e8:af:cc:7b:f5:20:ef:89:d1:
         b4:1f:68:7c:be:1b:68:c9:9b:6b:ca:2c:34:4b:c4:c9:96:61:
         33:95:d5:8a:4a:2c:92:04:ca:13:64:c1:db:1e:4c:13:8f:08:
         9e:cc:cb:ac:44:ec:ed:5b:40:d1:62:06:2d:88:c6:5b:60:c4:
         54:27:ce:c4:ed:57:07:68:fc:37:ff:3e:86:cd:e7:e8:e5:8b:
         28:b5:6a:86:13:00:d0:33:6a:86:93:6b:30:1e:1f:9e:88:6e:
         b7:c4:81:c8:75:4f:64:d7:44:d5:7a:12:9e:9d:15:9b:e7:0b:
         6f:f7:2f:1d:58:86:c3:d2:da:09:68:1f:20:d9:71:81:f4:02:
         7a:ef:3e:e0:57:cb:3b:03:94:a6:c5:b1:75:7b:0b:3d:d3:ff:
         dd:d0:1c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:17:21 2025 by rpki-client