Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/30f7efc6-477c-3ef4-94aa-f0e7f2af67c0.roa
File:                     30f7efc6-477c-3ef4-94aa-f0e7f2af67c0.roa (raw, json)
Hash identifier:          mYdoZYO9TrbT26H/2mrw4dmVwPjmuv1YGhtRVjTo+aI=
Subject key identifier:   A2:5F:DD:49:E8:69:06:BD:26:0F:06:FC:38:10:6B:62:1C:27:3C:25
Certificate issuer:       /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial:       010D0C9F43285848FDD8CD0604A99948032A3AC0
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/30f7efc6-477c-3ef4-94aa-f0e7f2af67c0.roa
Signing time:             Mon 24 Feb 2025 18:23:14 +0000
ROA not before:           Mon 24 Feb 2025 18:23:14 +0000
ROA not after:            Sun 25 May 2025 17:23:14 +0000
asID:                     19905
IP address blocks:        208.80.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:d8:cd:06:04:a9:99:48:03:2a:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
        Validity
            Not Before: Feb 24 18:23:14 2025 GMT
            Not After : May 25 17:23:14 2025 GMT
        Subject: CN=c00c4c7e-5723-42b7-a914-66c711c909fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:5d:dc:51:4f:6e:2c:12:21:7c:a4:a5:3b:
                    fd:38:b6:02:70:73:fb:28:cc:2d:91:4b:e9:20:6d:
                    fc:da:b7:c6:f0:4b:28:c1:79:70:6e:cd:c1:9a:37:
                    d5:f8:ab:2a:f0:08:e4:ce:54:99:26:80:18:dd:c0:
                    e3:74:4c:02:3f:48:e6:b1:87:b6:db:c5:66:d2:8d:
                    2d:05:82:ac:4b:a9:6d:d6:2a:0c:2a:35:78:27:97:
                    01:07:0f:c7:eb:34:8b:10:ef:65:98:3b:5a:62:3b:
                    2b:1a:d4:d4:0a:1d:78:73:40:c2:a2:62:b0:2c:ec:
                    33:b6:5e:4e:0d:3e:fd:83:81:d6:b1:6d:91:a3:02:
                    88:73:91:7c:61:a4:1c:8f:b3:61:ea:a2:f3:50:73:
                    49:94:7a:04:10:be:da:7e:f5:1a:14:11:44:c4:9f:
                    b4:70:ac:66:3a:6a:0f:d3:d2:40:6d:d0:63:e5:97:
                    e3:6d:9c:42:70:88:ab:bc:28:3b:9f:e0:5a:a1:6e:
                    90:e3:b5:21:94:66:3e:e3:53:4d:46:0a:79:d7:31:
                    82:3a:18:67:5d:51:ed:fe:38:53:7f:49:36:15:bf:
                    92:d9:27:ef:44:7e:bc:12:35:24:5c:fb:76:3c:bf:
                    ff:b8:6b:ab:a6:dc:74:89:50:d7:af:d0:51:1f:ee:
                    e7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5F:DD:49:E8:69:06:BD:26:0F:06:FC:38:10:6B:62:1C:27:3C:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/30f7efc6-477c-3ef4-94aa-f0e7f2af67c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl

            X509v3 Authority Key Identifier:
                keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:31:d9:21:3d:6e:d0:b5:44:d2:10:63:f2:72:ee:16:db:2e:
         d4:ac:6a:8e:d2:c1:93:75:52:ed:9b:5a:2c:77:1a:0f:98:dd:
         69:09:b5:28:fd:7f:4f:48:8c:63:22:d9:76:42:14:65:2a:95:
         14:37:63:53:ad:e0:3b:38:7c:49:51:ae:1c:ce:5f:c6:d5:c8:
         7c:4c:79:91:08:9d:35:73:46:84:98:58:1f:f9:3f:93:58:15:
         16:5d:40:ee:b5:32:32:76:80:19:9f:4b:1d:bb:77:e7:c8:8c:
         1c:f3:11:cf:ac:8c:95:1a:5f:d2:a3:f4:a9:90:90:bf:79:ba:
         7f:ef:51:41:be:d0:a5:f6:01:a7:d5:19:1a:be:b3:65:32:a4:
         4f:3d:5a:c6:49:9c:3e:e5:51:b3:28:a9:87:f9:0e:28:98:3d:
         43:d6:9b:2e:b9:dd:8c:0d:41:6e:33:b9:a8:0f:f6:51:9d:e9:
         be:b8:e7:d1:e2:09:d9:26:00:8c:66:10:eb:8f:22:6b:6f:c1:
         f3:47:33:b8:60:29:79:00:79:16:20:e2:af:f2:62:82:fc:8c:
         bf:2a:56:48:7f:05:b5:2b:4d:f4:1a:7c:5d:2f:8f:28:22:b6:
         e6:5c:ff:bb:5a:0b:78:ba:52:0f:35:4b:7b:c8:a5:19:28:84:
         3f:e9:3d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:28 2025 by rpki-client