Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/4a514b4a-2e45-3def-b73d-08af34648514.roa
File:                     4a514b4a-2e45-3def-b73d-08af34648514.roa (raw, json)
Hash identifier:          tPVxDQVoUg26TTWiyuakRoPlQSbcDhfKcsNazo4t93s=
Subject key identifier:   BB:48:3B:77:EE:1B:99:73:73:CA:77:C3:19:47:58:D5:D5:48:4B:BF
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F43285849797441F33647A80B28E83E00
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/4a514b4a-2e45-3def-b73d-08af34648514.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     11620
IP address blocks:        207.173.128.0/20 maxlen: 20
                          209.210.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:41:f3:36:47:a8:0b:28:e8:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=289d5498-1d62-4899-b05f-ae9a8fd4dee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:82:7f:f7:f8:61:87:3b:1a:0e:d3:0b:f9:da:
                    e2:dd:39:42:4e:10:46:aa:07:aa:30:f1:24:fe:0a:
                    55:75:30:07:83:75:00:24:07:e0:85:68:1d:50:9a:
                    cd:3b:37:86:1d:3c:b6:00:ca:70:b4:d6:52:b7:65:
                    b5:d9:32:c8:5c:94:63:a1:c1:e9:23:40:b6:4d:f6:
                    89:c6:c9:ae:89:2a:d8:be:34:5a:85:73:92:0f:f7:
                    90:1b:c6:b6:62:5a:2b:23:4d:d7:5e:70:21:65:5c:
                    86:08:ff:66:03:7d:a3:3c:20:a3:45:00:a2:9e:95:
                    a8:a0:86:b3:f2:2c:8a:7d:98:bd:32:09:a2:64:2a:
                    fa:de:1a:dd:68:74:4d:ca:fc:43:ed:bf:fa:29:23:
                    71:15:49:01:bb:3d:54:93:0a:94:bc:57:97:95:44:
                    bd:53:f4:5f:94:ef:a8:c3:53:f8:64:35:62:ee:17:
                    d7:c1:b2:6b:63:8b:8e:9b:21:f7:c3:b6:d7:f1:cd:
                    df:cd:47:e8:72:a8:08:89:67:dd:b8:f2:04:ef:db:
                    10:7a:c7:ee:85:7a:90:64:e6:fa:aa:0f:64:47:c6:
                    f7:1d:9f:6d:d7:f4:5d:0e:1d:09:7a:61:60:f6:04:
                    bd:d7:71:04:e2:a9:92:97:a6:f4:84:ce:02:f8:b1:
                    fb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:48:3B:77:EE:1B:99:73:73:CA:77:C3:19:47:58:D5:D5:48:4B:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/4a514b4a-2e45-3def-b73d-08af34648514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.173.128.0/20
                  209.210.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f3:5d:9d:9e:89:e9:ac:bb:4b:9b:6f:ad:55:22:91:c2:28:
         dc:9c:c2:91:72:1f:b7:27:7c:12:e1:dd:49:8b:32:ad:fd:bb:
         f4:2a:93:22:c8:c3:9a:93:21:e0:09:17:71:e3:02:48:bf:42:
         0b:fb:2e:1f:1e:16:0c:0a:07:41:8a:77:dd:b5:44:35:d8:03:
         30:ae:60:b1:94:80:18:1b:10:52:3a:2f:7d:80:2b:c4:bd:34:
         90:97:cc:a0:b9:28:f0:7f:d1:98:5f:5a:f2:72:08:f8:8d:2a:
         09:f4:b3:43:a4:96:77:4d:a4:9e:91:8b:f5:18:00:3f:72:71:
         2d:f7:da:36:63:70:97:db:aa:61:a1:3d:e0:45:db:75:eb:ce:
         94:a4:26:3b:ad:c3:e6:66:94:71:23:c3:73:ab:ff:83:3d:28:
         0a:fd:63:14:89:9c:64:c4:a4:56:63:93:ed:31:62:e7:5b:77:
         36:23:eb:29:db:2d:e9:1a:78:8d:7f:3e:1c:0b:e7:08:a8:88:
         e3:22:7e:71:52:91:a3:f2:11:b7:5c:40:87:b7:fb:b1:18:e4:
         9f:c6:9b:b2:e4:4a:e0:71:f5:36:14:5b:43:1b:9c:5f:b7:ce:
         51:1a:30:a5:5a:07:46:1b:bd:b2:ae:b6:7e:88:0d:e1:7d:17:
         e8:09:4d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:20:20 2025 by rpki-client