Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/bb479e79-d118-3ff0-b4ac-117cfb090054.roa
File:                     bb479e79-d118-3ff0-b4ac-117cfb090054.roa (raw, json)
Hash identifier:          Uj5/vfYx2F4BlaWxtt/8YmgvC9zB9cd+GKXF+zVnqo8=
Subject key identifier:   C4:62:E2:45:EA:10:E7:32:07:62:67:80:17:4A:09:B1:93:BD:C7:EF
Certificate issuer:       /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Certificate serial:       010D0C9F4328584A0C05593F859B5D03B87EB600
Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/bb479e79-d118-3ff0-b4ac-117cfb090054.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     394161
IP address blocks:        199.120.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:59:3f:85:9b:5d:03:b8:7e:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=795fb5ee-7d14-40e9-bcce-2c1e1a2db4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ae:e1:a4:d7:19:32:40:94:12:c3:e3:69:10:
                    f7:22:29:59:22:bc:14:37:a5:c9:a5:47:ef:ed:0d:
                    02:e7:96:42:a0:1e:96:b3:4b:b1:04:f8:9f:85:bd:
                    5f:a2:f9:27:b2:4e:48:6e:3f:ca:d6:af:97:d1:0f:
                    2c:9e:17:8a:25:eb:5d:84:46:49:db:63:60:d8:82:
                    49:b1:8b:5a:e6:8a:99:71:bb:26:e7:24:d7:d4:52:
                    c6:b2:7e:0d:f4:bc:66:0e:48:96:04:03:08:2b:02:
                    74:a4:96:3d:6e:b9:e3:75:6f:86:31:8a:ea:f5:3a:
                    16:d6:97:af:25:ab:d8:5a:40:4c:57:a2:67:12:0f:
                    9b:75:0f:70:12:77:74:83:06:ca:ef:98:6c:9c:19:
                    61:ff:d2:10:48:05:19:fd:8d:1e:1a:d7:bd:43:af:
                    6a:46:84:1e:d6:14:99:8b:8e:db:94:a7:dc:f4:89:
                    6d:c6:4e:ac:e9:ca:1e:03:18:89:f2:1d:c0:41:d5:
                    bb:42:23:7b:b6:86:81:86:55:2f:39:8f:37:19:82:
                    3f:f9:63:41:c0:d4:44:27:4f:8f:0f:52:0d:05:d1:
                    ea:66:16:d8:12:be:56:ac:08:da:01:3a:fb:b8:5c:
                    ad:eb:4d:9d:f5:1b:03:b0:ae:8c:a4:05:a3:e4:4d:
                    27:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:62:E2:45:EA:10:E7:32:07:62:67:80:17:4A:09:B1:93:BD:C7:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/bb479e79-d118-3ff0-b4ac-117cfb090054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl

            X509v3 Authority Key Identifier:
                keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.120.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:bb:39:01:85:00:45:7d:33:df:38:4a:f0:a3:aa:58:69:f1:
         46:10:82:d7:7e:e8:11:46:91:e0:d0:9e:c9:49:ad:02:ab:bf:
         91:7f:aa:f0:f0:d5:c1:4d:dc:90:69:b9:19:08:f5:9a:62:9c:
         ab:47:b9:57:c9:ee:fb:bf:02:78:c4:92:b3:f1:ef:40:cc:2c:
         4d:a9:9c:6c:d7:a6:70:7e:a3:c1:b9:b0:e5:72:cd:b7:54:b9:
         3f:86:42:f1:71:dc:4d:1f:81:61:65:8d:4d:0f:d5:39:36:64:
         96:cc:51:de:01:0c:e7:09:66:97:a7:de:9e:28:ef:e3:b8:16:
         3d:25:54:ea:dd:1c:ea:bb:d9:d2:ca:3c:02:66:00:7d:a8:31:
         25:5b:28:ca:33:c0:cc:b6:11:94:b4:67:28:5a:b5:b6:14:d0:
         48:a4:1b:fe:6c:52:bf:f5:ac:38:53:43:48:78:ae:48:38:fa:
         22:9d:6e:f6:5c:f6:d5:0f:49:70:b8:9e:73:53:47:e0:45:74:
         d0:91:fd:cb:6a:52:2c:f9:c8:df:1d:06:b3:c6:00:0e:cb:76:
         2a:d0:26:d6:d8:bc:09:da:f3:17:55:b7:44:e9:cc:cc:90:54:
         2b:fb:bc:83:b2:59:10:0d:e9:1c:a7:5e:87:93:a7:3b:d1:21:
         40:2e:d0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:29:48 2025 by rpki-client