Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e79704e-eb03-3bb9-8ba0-1326acd68af6.roa
File:                     5e79704e-eb03-3bb9-8ba0-1326acd68af6.roa (raw, json)
Hash identifier:          ca53yK+2Nh2UzJ/WMqYQI7WYJlqA2xMrqzqGRSiMdSc=
Subject key identifier:   07:46:43:91:3F:78:3E:27:43:C2:86:E8:EF:FA:4D:61:92:C2:5F:D4
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE863A363AD39C9FD84A1E330
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e79704e-eb03-3bb9-8ba0-1326acd68af6.roa
Signing time:             Tue 19 Aug 2025 11:29:03 +0000
ROA not before:           Tue 19 Aug 2025 11:29:03 +0000
ROA not after:            Mon 17 Nov 2025 12:29:03 +0000
asID:                     31898
IP address blocks:        158.247.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:63:a3:63:ad:39:c9:fd:84:a1:e3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 19 11:29:03 2025 GMT
            Not After : Nov 17 12:29:03 2025 GMT
        Subject: CN=47257f7c-49f3-43d2-bc61-56e9fafb0f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a9:04:71:93:7b:b1:ec:4e:86:88:de:a2:b1:
                    f0:f1:d0:0e:b8:9e:dc:f6:ad:48:66:b9:aa:56:19:
                    0e:15:d1:df:8a:6b:7f:2c:6c:c9:41:0b:26:07:60:
                    15:85:06:fc:3d:fe:fd:e4:a2:66:e4:9c:33:13:5b:
                    63:78:01:d8:52:78:97:05:24:b6:6f:24:53:45:ea:
                    d5:85:e4:97:6e:57:ab:19:0d:1f:73:5f:02:1c:fc:
                    2a:f6:ec:29:45:7b:b1:b4:2d:37:e1:cd:6a:81:51:
                    8b:37:35:67:c6:94:7a:85:9f:f9:ab:23:6a:65:e4:
                    ec:c0:56:0a:e4:50:01:a4:14:92:35:d9:5a:8c:55:
                    75:51:69:88:ea:67:a4:33:43:2e:3e:65:c1:fb:be:
                    fc:1b:f3:05:9e:02:18:b7:c5:f0:5a:8e:eb:0d:07:
                    f9:23:c5:57:68:9b:77:47:e3:82:fc:85:a4:c0:45:
                    8e:49:38:dc:ea:75:c0:ac:eb:2a:2b:86:4f:f9:b6:
                    62:ae:d4:e2:ae:b9:fc:75:46:11:50:e2:a7:b7:8f:
                    ad:8f:80:10:76:33:f6:84:9a:86:9d:d6:c4:7b:58:
                    a8:83:b7:03:59:2e:06:4b:07:3d:97:b3:4c:5f:6f:
                    8d:7d:fe:0d:fd:72:55:90:ab:4f:af:35:b9:87:17:
                    a5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:46:43:91:3F:78:3E:27:43:C2:86:E8:EF:FA:4D:61:92:C2:5F:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e79704e-eb03-3bb9-8ba0-1326acd68af6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.247.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d5:73:40:6e:39:a6:35:1e:da:bf:9e:de:ee:28:91:74:fd:
         03:da:39:1a:c7:48:87:5e:d4:36:5a:33:db:ff:34:48:3c:d8:
         b1:a4:7b:fd:01:a9:2f:da:e5:db:d9:e5:91:6b:a9:34:e2:ea:
         36:2e:b8:4f:18:c2:fc:c4:7b:5d:40:79:c2:94:e1:80:91:3b:
         61:6d:12:01:7f:dd:46:0e:43:80:ce:12:47:13:90:af:63:5e:
         a6:83:ce:d7:ee:2a:90:86:5b:0b:39:60:51:bb:3f:ab:fe:7b:
         d7:8e:61:82:16:d7:cc:c9:1e:b8:c9:90:91:24:8a:7f:55:79:
         97:d6:a9:29:19:f6:2e:db:2c:51:4f:4c:0e:83:74:59:07:a0:
         0f:87:83:76:59:bc:a8:79:1c:b4:a0:ed:2d:c3:58:bf:e0:5d:
         88:f2:88:84:0a:68:a4:cf:e6:b0:30:86:bc:d0:aa:7b:8b:0a:
         f5:03:b5:d6:d3:bd:e3:2a:df:02:17:e9:0f:17:8e:c2:70:c7:
         6c:0d:14:62:72:b4:7e:7a:b6:15:70:8d:97:41:26:a0:a3:f3:
         1d:c5:df:b3:17:31:ea:05:22:a6:91:6d:5d:56:49:1b:77:33:
         dd:75:6e:72:fa:c7:f4:83:63:31:41:12:5c:22:ee:2f:20:89:
         c1:88:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:25:20 2025 by rpki-client