Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/789eb67d-b769-3b2e-ab62-cd4921278e0f.roa
File:                     789eb67d-b769-3b2e-ab62-cd4921278e0f.roa (raw, json)
Hash identifier:          l7K3KOuUQd7IRUWbq23d/9eXrnJBHwfG+xJXN2Uisao=
Subject key identifier:   D2:6C:E2:DB:51:DF:94:C5:95:16:68:9E:0B:18:F6:80:E3:B6:8B:4B
Certificate issuer:       /CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
Certificate serial:       010D0C9F43285848DD3BAAFDCB5B039104EA7860
Authority key identifier: B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/789eb67d-b769-3b2e-ab62-cd4921278e0f.roa
Signing time:             Thu 13 Feb 2025 02:00:40 +0000
ROA not before:           Thu 13 Feb 2025 02:00:40 +0000
ROA not after:            Wed 14 May 2025 01:00:40 +0000
asID:                     393950
IP address blocks:        107.181.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:3b:aa:fd:cb:5b:03:91:04:ea:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
        Validity
            Not Before: Feb 13 02:00:40 2025 GMT
            Not After : May 14 01:00:40 2025 GMT
        Subject: CN=be8805a6-6789-461d-ae4e-4dcd3b96f31d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:78:c2:22:db:9e:57:51:ed:34:25:4b:82:
                    bd:78:f1:5f:21:d3:60:d8:c6:7a:69:1d:cc:17:e6:
                    86:1b:35:37:b6:d2:61:da:91:d4:4e:3f:ac:88:a7:
                    66:50:44:61:cf:ce:2d:80:15:fe:f3:e5:89:d5:65:
                    94:c8:4d:9f:f2:dc:a5:8a:3b:d8:d8:eb:c6:57:87:
                    18:ed:e0:6e:3b:b8:ae:aa:fd:b4:9a:d4:11:32:2e:
                    d9:c5:cf:33:27:7a:cb:7d:16:8f:04:1f:a1:bc:80:
                    c6:f7:e8:12:b9:81:8d:5a:64:16:1c:a9:da:56:a0:
                    e2:a4:69:14:6a:9b:53:c1:ac:86:75:52:b2:73:b3:
                    7e:d5:af:4c:d2:30:4b:65:f6:44:8e:ff:84:b1:c6:
                    85:37:aa:67:64:84:e5:26:f5:f0:91:59:b9:7a:2b:
                    6d:e9:b9:ed:79:95:f6:c1:1e:c8:f2:f9:73:23:80:
                    ad:db:14:f9:a7:ae:5e:7d:d7:b4:c4:17:bf:77:9c:
                    57:04:fc:15:74:f4:99:18:1b:48:c1:fd:63:3b:a8:
                    c9:2c:c0:28:fe:37:e5:01:c6:2e:57:36:ff:b5:39:
                    1f:9d:f2:a8:40:a8:e0:d6:c0:44:63:d5:52:5c:51:
                    d4:c3:70:9c:3f:ec:0d:b5:b5:78:6a:99:0a:b3:5f:
                    2d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6C:E2:DB:51:DF:94:C5:95:16:68:9E:0B:18:F6:80:E3:B6:8B:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/789eb67d-b769-3b2e-ab62-cd4921278e0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl

            X509v3 Authority Key Identifier:
                keyid:B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.181.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:25:d2:9d:3a:51:ca:c9:91:fa:79:84:eb:6b:a0:0c:76:0f:
         fc:f5:6c:a4:e2:5e:5d:ab:11:86:c5:48:55:dd:6a:80:e1:cf:
         76:ac:d4:fa:8a:ea:e9:98:1f:ed:f0:5b:66:70:7e:a2:77:8b:
         02:14:22:81:f3:10:24:64:67:64:6c:b8:53:aa:ed:d5:a3:94:
         7e:1d:98:e2:95:35:4a:65:cd:64:12:8a:75:91:50:62:6a:80:
         ec:67:66:6f:b5:ec:70:d1:15:d0:b5:47:e1:2f:92:d3:d8:0a:
         80:17:c9:4f:76:81:41:54:87:a2:38:d5:c7:68:89:a1:eb:e4:
         63:6b:be:50:ba:94:c7:36:9d:79:0c:21:a9:f9:fd:99:fa:f6:
         2a:20:54:87:28:a1:28:47:7b:c8:9f:d9:c7:a8:cd:7a:1f:6c:
         4a:f6:f0:e2:49:ce:ad:c3:6c:52:8a:15:36:4d:77:34:84:1d:
         c6:b1:46:3d:2c:a6:be:5e:35:5f:e3:68:ac:32:13:10:6d:48:
         27:fb:40:ef:34:3d:11:1c:37:f8:7f:21:d0:66:8b:3c:5b:66:
         d3:dc:2f:85:20:d4:63:9e:49:40:44:2e:47:7a:26:19:ad:a4:
         82:17:c3:45:3a:fe:b7:eb:3e:5c:ad:1f:3c:d2:d6:85:aa:5b:
         45:70:3b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:25 2025 by rpki-client