Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/49ddedec-016b-34d5-986c-e2759d2fbdbd.roa
File:                     49ddedec-016b-34d5-986c-e2759d2fbdbd.roa (raw, json)
Hash identifier:          fwq1LpJmZsoZoGLxBbnU5dX1YLtlka04cnQ1rzXk0zs=
Subject key identifier:   59:A1:82:1F:FD:34:84:A1:ED:61:07:68:E6:72:BD:C3:15:07:A1:59
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F43285848F4F69E7348CB5F4F7C156380
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/49ddedec-016b-34d5-986c-e2759d2fbdbd.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     8560
IP address blocks:        198.71.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:9e:73:48:cb:5f:4f:7c:15:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=e7ac352f-0d8e-4a67-b4cd-793092954ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2b:ae:3f:6e:70:f6:cc:ed:d4:1c:36:6c:05:
                    45:e7:3e:70:6c:42:ff:58:6a:75:ed:be:e1:51:0f:
                    c8:1e:5e:8c:8f:9f:03:80:d8:88:2b:dd:7a:3d:8f:
                    b7:57:29:75:2e:e6:4b:ff:88:04:b4:19:11:25:91:
                    9c:1d:2d:db:c4:32:09:20:3b:a5:ee:b6:c5:53:92:
                    47:69:a8:78:d6:45:f7:92:ff:6d:8d:42:81:88:4f:
                    d6:ce:09:04:be:3d:62:79:37:70:2f:45:e4:06:1f:
                    03:a7:62:f1:a4:71:3c:62:96:4a:11:b8:0e:ee:ef:
                    3b:dd:f9:28:42:d5:f7:f2:1d:0d:d3:99:00:24:4e:
                    c1:a2:6f:0c:8c:7b:26:66:93:1f:0b:7b:d8:d2:1c:
                    cd:e4:06:b2:b7:11:7d:ae:63:26:85:cd:63:2e:cd:
                    6b:61:59:47:12:e6:ea:5f:ea:07:65:57:d1:e9:ea:
                    2a:c8:83:d9:56:6b:98:6f:db:3f:3d:7d:14:a2:e1:
                    00:af:7c:3c:69:1f:c6:96:98:56:59:4a:f3:d3:58:
                    06:d3:6c:b7:e7:7b:a4:9b:5e:0b:c9:fd:b0:fd:48:
                    ae:dd:ce:0c:a6:7d:88:63:5b:19:df:f2:5a:73:0d:
                    74:20:61:32:fc:18:07:94:b1:24:ae:23:02:1a:a8:
                    81:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A1:82:1F:FD:34:84:A1:ED:61:07:68:E6:72:BD:C3:15:07:A1:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/49ddedec-016b-34d5-986c-e2759d2fbdbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.71.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:a8:58:38:fd:59:e9:b7:b0:a8:9b:12:ab:48:cb:d1:17:ee:
         47:96:02:c8:1d:b0:f1:5b:33:3b:1e:aa:1a:09:33:2b:62:6d:
         ce:08:57:d4:c4:99:84:f0:ea:4f:62:08:fa:b4:9a:55:61:81:
         90:cb:cb:9b:21:78:3f:a5:f6:9f:7e:8e:1a:a0:de:b8:88:3b:
         d8:4a:67:29:f9:70:22:e9:01:75:b4:09:18:27:a5:45:12:22:
         77:07:82:23:8d:90:5f:81:14:77:7b:be:df:c7:66:1f:5b:31:
         c8:c6:bf:52:41:34:b8:33:dd:42:3c:d4:85:82:23:0e:d5:7e:
         f0:4b:c2:15:0b:80:7a:5a:1c:81:c7:a2:4b:71:af:c1:9d:78:
         68:33:d3:46:94:42:d0:a2:cf:67:e0:9e:fc:9b:0b:93:3e:35:
         d3:08:55:80:8c:fc:0c:64:0e:18:79:29:d8:30:9d:b1:ff:63:
         f2:0a:86:fc:5d:2e:dc:7a:bd:8f:d3:46:bc:6d:d9:40:ad:e2:
         a5:20:65:40:e5:03:f1:36:69:01:62:26:15:82:5c:bb:81:11:
         7c:e6:0f:60:cf:73:0a:75:7c:d9:a7:2f:fb:94:64:3c:e5:e1:
         1a:66:c5:c5:bf:1a:90:01:22:e5:22:8f:cf:01:8c:95:f4:ec:
         be:ed:49:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:37:08 2025 by rpki-client