Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7b522ada-ca1a-3237-ae10-efe8dd6757ad.roa
File:                     7b522ada-ca1a-3237-ae10-efe8dd6757ad.roa (raw, json)
Hash identifier:          0B1Ekq1vQktBlxXGfk54pnZcJqKAkywzSPYNz2rEnoA=
Subject key identifier:   DB:31:2A:6A:6E:8A:A7:27:20:AE:15:BA:0A:02:54:2C:0E:C6:C9:F5
Certificate issuer:       /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
Certificate serial:       010D0C9F432858489A3B433D6F877FB028D78100
Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7b522ada-ca1a-3237-ae10-efe8dd6757ad.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     7018
IP address blocks:        167.253.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:43:3d:6f:87:7f:b0:28:d7:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=edecbb62-e7a5-4177-90bd-660cdef2b165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f7:eb:9f:4d:66:12:1c:f2:cf:f5:d8:a8:6c:
                    cc:97:4c:c1:b7:4f:58:72:03:74:d7:ea:b8:40:11:
                    59:1c:cd:d6:a1:7c:5d:18:97:82:2c:27:e8:7b:1c:
                    7b:09:cb:cc:f8:c5:7e:ac:9d:40:61:84:39:c8:e7:
                    b7:75:b0:7a:a6:82:8f:51:27:f9:4f:a9:0c:e4:b3:
                    de:7d:fa:d6:ca:6a:09:71:8a:e9:dd:27:b7:d0:2a:
                    cb:cf:32:98:9e:de:60:6f:cf:ab:4c:28:3b:30:7b:
                    6d:52:c7:7c:81:09:38:82:3c:f8:27:45:03:e1:aa:
                    a8:33:36:a8:74:dd:6c:89:69:a5:d6:69:af:37:77:
                    6b:90:dc:e4:0e:9f:85:34:84:fd:5e:8e:af:de:f0:
                    31:a5:c6:40:b9:88:b7:56:e4:12:03:4a:43:6e:0b:
                    6c:2c:2a:db:7c:c4:7b:89:dc:e8:68:8a:72:d0:e5:
                    e9:db:65:b0:41:7c:8a:4a:90:79:cb:4a:7b:5a:c2:
                    4b:01:ab:7a:f4:68:f3:82:a3:39:fb:3a:b9:1f:ae:
                    69:9d:99:ae:33:fd:dd:4e:f8:b9:c1:1f:10:5c:79:
                    2b:56:fc:e5:ea:21:5f:02:92:36:99:e6:27:6b:07:
                    3f:cd:0f:bc:db:f1:64:85:1c:a7:47:ff:96:30:5d:
                    ea:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:31:2A:6A:6E:8A:A7:27:20:AE:15:BA:0A:02:54:2C:0E:C6:C9:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7b522ada-ca1a-3237-ae10-efe8dd6757ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c0:b3:a9:32:40:54:81:8a:64:85:61:af:19:55:7e:6a:ea:
         67:21:61:38:35:0c:02:0f:8f:55:eb:d2:80:ca:d9:62:ae:ff:
         79:94:3f:03:07:8d:b9:ac:bd:4b:50:30:21:9c:c2:8e:1b:6b:
         68:52:08:6e:e4:88:f6:ee:42:2a:16:5f:8c:36:b7:a9:9e:4d:
         68:b8:93:ea:31:96:96:c5:03:f7:1e:97:dc:75:d6:79:c6:9f:
         4d:87:25:05:ed:ce:74:31:4e:03:f1:df:1e:8d:bf:fc:a4:10:
         f6:4f:ee:a6:5a:22:4c:38:65:e7:92:b7:64:a3:a9:72:16:20:
         bf:6a:0d:68:3a:83:e3:0d:65:46:18:21:8a:3c:d4:7f:e9:41:
         5f:cf:1a:8b:46:07:0d:34:34:9f:30:3f:bb:0f:9a:b2:40:e2:
         96:af:46:06:f2:92:0a:e1:2a:bb:66:83:87:d0:2e:2a:7d:8e:
         2c:ad:2e:a5:71:6f:69:d3:de:46:34:6f:60:10:4c:bc:82:9b:
         59:01:6d:d8:e6:cb:8f:ed:dd:97:34:77:37:af:c3:8e:3c:77:
         f3:4a:cb:60:df:dc:e3:9b:f6:73:a9:7b:53:96:88:c7:a3:49:
         1f:d3:5f:41:67:ea:b1:2a:6a:37:fd:15:4c:59:cd:c6:4c:3f:
         f3:07:18:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:44:35 2025 by rpki-client