Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/0db3b563-3287-3841-a396-41461b2172ba.roa
File:                     0db3b563-3287-3841-a396-41461b2172ba.roa (raw, json)
Hash identifier:          dJJoh6u67cTwalIl/QW4Io1iAZIenRM53UXWmahlxh4=
Subject key identifier:   CC:FD:82:19:7A:B8:C2:9D:4B:5A:06:26:31:01:6C:EF:AC:B4:E4:74
Certificate issuer:       /CN=7fb67441-9735-44cc-ae5f-20a79cca0b47
Certificate serial:       010D0C9F43285849D2CA27CE2B115A7089837D20
Authority key identifier: AF:47:55:BD:2B:E8:4E:88:5F:48:1A:E3:E9:E9:32:6D:C9:AC:4E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/0db3b563-3287-3841-a396-41461b2172ba.roa
Signing time:             Mon 12 May 2025 01:00:47 +0000
ROA not before:           Mon 12 May 2025 01:00:47 +0000
ROA not after:            Sun 10 Aug 2025 01:00:47 +0000
asID:                     29894
IP address blocks:        216.122.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/7fb67441-9735-44cc-ae5f-20a79cca0b47.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/7fb67441-9735-44cc-ae5f-20a79cca0b47.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d2:ca:27:ce:2b:11:5a:70:89:83:7d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fb67441-9735-44cc-ae5f-20a79cca0b47
        Validity
            Not Before: May 12 01:00:47 2025 GMT
            Not After : Aug 10 01:00:47 2025 GMT
        Subject: CN=5679821c-ef6e-4055-9236-5b70dbdbda25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:36:37:d1:bf:c1:54:2f:ed:12:9e:eb:70:
                    37:3c:38:2d:74:55:21:02:68:81:1a:55:bc:21:a6:
                    3c:35:dd:70:c8:48:b3:74:f3:75:eb:27:ff:71:70:
                    79:04:7a:c4:7c:da:8b:08:f9:55:21:c7:38:1b:0e:
                    6c:a3:db:e9:58:ec:8a:e7:d6:45:5a:94:85:92:2e:
                    d0:d5:70:04:fe:1b:bc:c7:3e:74:92:c4:cc:75:64:
                    64:06:bf:f8:15:0f:36:ea:54:d1:a3:58:a9:1c:30:
                    3a:4b:6e:ed:a6:c8:1c:54:83:e3:0d:ad:0a:f4:1a:
                    8f:19:c6:31:47:51:db:20:0d:e1:e8:40:bb:96:7b:
                    69:eb:62:c9:8a:63:2e:31:ae:b8:1e:57:47:0b:d0:
                    d8:e7:7b:8c:82:e8:6f:62:4e:97:8d:c2:2a:5d:59:
                    07:60:5c:d3:12:57:f4:23:e9:de:2d:f9:c7:b0:6a:
                    51:36:10:32:d4:90:9b:b0:6b:ea:39:cd:46:3c:56:
                    3f:47:01:e5:df:1a:69:b3:3e:e4:75:5d:77:f7:1c:
                    8e:14:f5:47:a7:2f:cb:dd:a3:ec:b8:ed:ca:87:82:
                    32:0d:b9:99:f0:5f:ce:6a:ea:63:5a:6d:5d:34:2e:
                    fe:73:da:b5:c9:61:5d:1f:f1:cf:c8:ae:b4:12:21:
                    fe:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FD:82:19:7A:B8:C2:9D:4B:5A:06:26:31:01:6C:EF:AC:B4:E4:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/0db3b563-3287-3841-a396-41461b2172ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/7fb67441-9735-44cc-ae5f-20a79cca0b47.crl

            X509v3 Authority Key Identifier:
                keyid:AF:47:55:BD:2B:E8:4E:88:5F:48:1A:E3:E9:E9:32:6D:C9:AC:4E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:c6:86:21:40:0f:1c:a8:b0:de:97:9d:43:82:70:49:6e:2d:
         fe:18:61:5c:a2:ac:c5:68:0d:6f:f9:6a:56:44:e0:8a:b7:97:
         d1:85:76:7c:09:4e:1d:3b:81:a4:d8:45:97:52:3a:0e:3e:cb:
         a4:a3:23:7b:f6:dd:1d:78:c6:a9:64:50:cb:c3:4f:16:26:8c:
         f5:7b:31:f4:dd:35:3e:a4:41:87:8d:24:36:27:05:a6:80:8b:
         71:ca:2c:cd:59:73:5f:95:10:e1:3d:0f:74:7d:ef:85:75:43:
         29:e4:81:1b:d6:9b:12:fc:3e:bf:5d:dc:07:90:47:70:99:de:
         1e:e4:8a:82:95:80:bf:dc:a8:cc:5b:11:f2:5a:a7:c6:01:7b:
         13:ce:21:85:34:a9:bf:76:6d:23:3d:52:19:ec:80:d2:a6:6a:
         75:7d:23:f9:b3:45:d7:03:6f:cf:38:71:c8:a9:d6:dd:73:69:
         ee:61:b9:76:ab:20:18:bf:25:0f:3a:96:8a:cb:a8:cb:9e:7a:
         a9:e1:c9:e3:b4:1b:03:4b:87:43:b9:b2:88:0c:0c:0e:61:34:
         85:87:77:8b:56:4f:34:e1:63:b2:de:0f:97:89:66:03:e5:be:
         d8:7f:76:3f:ed:61:fe:cf:3f:b5:05:39:f5:3c:45:2a:ae:1b:
         4e:5e:00:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:10:49 2025 by rpki-client