Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/4758cd24-a95f-3bd5-b342-8e08369bfb40.roa
File:                     4758cd24-a95f-3bd5-b342-8e08369bfb40.roa (raw, json)
Hash identifier:          v0umn7PxAk8tt3yhVodpa0OfU8bMdPBF1Ed/R6iVApA=
Subject key identifier:   CB:CF:76:5E:CF:CD:A9:90:84:82:34:82:7B:2D:F0:C1:1E:AE:A2:26
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F43285849D42FAF929C80D28D9F350900
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/4758cd24-a95f-3bd5-b342-8e08369bfb40.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     8560
IP address blocks:        209.46.120.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:af:92:9c:80:d2:8d:9f:35:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=dfa2d85c-82eb-4c90-95e3-261b136ec56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:54:09:5b:3b:77:01:4a:51:ae:01:f2:ae:
                    14:fd:54:ea:b0:d2:e3:ab:45:83:c4:41:c0:16:47:
                    f6:84:9e:79:51:ed:95:0c:29:53:ad:eb:9a:3e:f6:
                    8e:49:ab:11:05:66:33:14:8a:6c:89:21:e0:3b:77:
                    89:39:17:59:24:2f:e0:ca:77:51:94:ce:a6:40:17:
                    78:4a:cc:af:6c:05:fe:73:5b:f1:23:1e:09:7e:87:
                    cb:40:a1:63:64:d6:e5:57:7f:88:a4:dc:be:6d:de:
                    c4:ba:ad:d3:b4:26:1a:65:da:84:29:1d:5f:45:c3:
                    07:c7:0c:91:fd:d1:83:fe:47:85:2d:49:52:ef:1a:
                    6b:7e:9b:36:82:70:67:48:72:af:3e:11:41:40:db:
                    56:94:d7:da:d5:a7:e0:76:28:78:1e:ce:67:1f:13:
                    19:3a:0a:f2:be:fc:ed:e6:1b:e8:31:07:55:47:e7:
                    72:84:c8:08:fa:04:bb:cb:36:eb:80:0c:b9:80:73:
                    5e:4f:96:4d:46:dd:5d:d3:80:ef:bb:dd:cc:53:de:
                    32:bf:56:24:85:ba:af:81:5b:e2:9a:aa:8b:4a:24:
                    79:e4:6b:90:03:33:9e:16:ce:df:c5:60:54:54:59:
                    ab:14:d9:bf:90:f8:f9:f4:b5:75:64:a5:64:f5:a4:
                    e1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CF:76:5E:CF:CD:A9:90:84:82:34:82:7B:2D:F0:C1:1E:AE:A2:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/4758cd24-a95f-3bd5-b342-8e08369bfb40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.46.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:60:fa:5d:d3:4c:8e:4f:a6:29:5c:f9:16:ea:ef:15:03:cf:
         89:21:be:57:b5:2d:2e:57:34:9b:4e:0e:e8:2a:5b:22:51:99:
         f1:0f:fd:b7:35:96:ed:b3:42:b0:d7:a3:d8:61:76:ee:4d:64:
         cb:9c:72:1e:28:89:3b:47:a5:00:14:e3:2a:8a:8e:75:fa:72:
         9d:35:31:fe:b8:83:43:a0:c7:85:cc:08:83:4e:20:85:38:ff:
         6f:94:47:e7:d5:fc:89:18:a5:29:bd:e4:62:92:b6:f4:54:a1:
         e5:d4:59:71:0f:87:90:20:89:17:68:0d:49:8d:2c:8b:d5:25:
         0c:df:15:6a:32:34:dd:22:33:c1:33:32:52:53:56:54:18:a5:
         4e:01:06:d2:8a:96:3a:0e:0a:49:14:af:03:9d:80:14:bf:38:
         6e:1f:ee:fc:64:06:25:a8:27:03:de:c3:c6:8d:1d:78:a9:b0:
         c1:ed:2f:27:63:a4:47:87:56:53:c2:46:8c:52:72:66:37:e7:
         94:1b:b9:22:df:e1:73:a9:db:90:e5:38:80:dd:b7:06:0b:94:
         37:14:52:2d:4e:66:70:89:d7:4d:b2:d5:cc:58:d5:6b:66:78:
         40:26:be:b3:88:a8:e4:a0:ae:e8:c3:34:6c:3b:45:78:62:a6:
         e9:1b:8a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:44:11 2025 by rpki-client