Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/ff77217b-f2ff-3766-b392-b4fd31895d99.roa
File:                     ff77217b-f2ff-3766-b392-b4fd31895d99.roa (raw, json)
Hash identifier:          P67b0TckGwjyV0VyZ4t6erXUAbKJwdJVy+AT1f1624g=
Subject key identifier:   F6:42:54:82:AF:64:0E:10:F9:C9:AB:6A:F5:E9:8C:79:9F:06:76:2E
Certificate issuer:       /CN=7ae65634-ea60-4e81-b4f1-309c9aa6bc2a
Certificate serial:       010D0C9F43285848CDE117DF6A0CB4B135AF6C00
Authority key identifier: C1:29:7B:36:8E:A8:37:B2:9C:C0:02:2D:37:41:46:E4:A4:B6:07:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/ff77217b-f2ff-3766-b392-b4fd31895d99.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     40676
IP address blocks:        130.51.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:17:df:6a:0c:b4:b1:35:af:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ae65634-ea60-4e81-b4f1-309c9aa6bc2a
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=1c7edfd4-8d22-4ec8-be76-674c5750b90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:eb:36:1c:7c:ba:b6:00:48:c5:91:68:64:
                    8d:26:95:86:37:d8:f8:8d:26:a2:77:3c:7a:d3:01:
                    70:8c:a7:fb:4c:b5:21:5c:0f:74:2c:5c:bf:8f:10:
                    96:00:d4:81:8c:e1:a9:70:e9:4b:08:0c:fd:00:9b:
                    bc:15:eb:4e:43:51:10:25:b0:0e:c6:e5:7e:04:e0:
                    e2:0a:b0:0e:22:a5:06:d7:93:3a:70:61:00:94:37:
                    3e:22:f0:01:6f:14:81:e7:a1:cf:90:b8:5f:2c:f9:
                    ab:54:d3:65:bd:9d:38:ea:b2:c1:2c:8d:78:1f:7b:
                    6d:a9:16:2d:ab:18:73:24:be:c7:bd:1d:90:58:70:
                    5c:0e:89:bd:78:2d:64:31:15:17:8c:12:3c:1e:f0:
                    fc:94:12:57:b9:b0:3c:eb:d5:06:49:17:77:df:e7:
                    29:2b:fe:ec:6a:b6:9d:c3:66:90:dc:2e:ad:cc:a0:
                    35:49:03:cc:d2:08:fb:84:62:95:0e:45:7d:5c:95:
                    83:1d:6b:09:85:c6:6f:47:84:54:6c:a9:7a:8a:e3:
                    91:d8:13:90:3d:ff:72:46:1b:ae:90:9e:ea:f2:6e:
                    86:02:55:d9:8f:5b:7d:66:27:92:e9:9f:1a:8b:e0:
                    3e:12:70:46:81:67:45:6a:68:4a:dd:77:b1:be:d0:
                    2c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:42:54:82:AF:64:0E:10:F9:C9:AB:6A:F5:E9:8C:79:9F:06:76:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/ff77217b-f2ff-3766-b392-b4fd31895d99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.crl

            X509v3 Authority Key Identifier:
                keyid:C1:29:7B:36:8E:A8:37:B2:9C:C0:02:2D:37:41:46:E4:A4:B6:07:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:48:cd:b1:4c:06:0d:93:85:bf:ac:fe:06:10:a4:17:93:dc:
         ee:02:15:05:2a:3b:ee:07:d8:c5:5a:b2:cc:a7:56:69:52:49:
         d7:cc:5a:14:dd:04:70:2a:e3:82:c3:5a:6c:74:fd:bd:93:f9:
         16:fa:d4:4c:55:25:db:40:45:16:b5:e8:e4:56:5c:bf:47:84:
         72:61:a6:5e:a7:52:3a:0c:61:68:85:63:9c:0a:14:1f:4f:fd:
         77:bf:eb:69:d0:05:94:07:f6:9f:5e:fa:1d:ea:c1:2a:27:75:
         a9:fd:88:fd:47:53:f5:a0:d7:4c:fa:af:c2:a9:f1:8f:c2:2a:
         cb:5e:d4:7a:66:43:77:0c:4b:7e:18:28:d4:86:14:f1:04:3d:
         f3:22:55:8f:e4:2d:3a:ee:0a:b3:62:11:8e:fe:0b:40:13:bb:
         e9:ed:8c:e5:bd:64:1e:74:30:ef:e5:78:66:03:e6:bd:92:76:
         81:02:fb:a9:16:ff:3e:a0:bb:99:ea:30:e7:3b:4a:94:bb:96:
         29:86:31:be:f1:7c:78:6c:98:3e:d3:03:5d:40:f4:b3:26:28:
         f8:71:4d:c9:40:f1:15:18:a6:f6:a0:52:b5:9b:a7:fd:42:d0:
         87:34:d7:a8:bd:60:70:04:bb:60:c1:0c:d6:df:9e:c3:81:07:
         26:cb:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:27:18 2025 by rpki-client