Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4f096559-d164-33f2-9abd-80dd225a7de9.roa
File:                     4f096559-d164-33f2-9abd-80dd225a7de9.roa (raw, json)
Hash identifier:          TCJGBeQ8Rg44CF6EfkiPdr0q9eDqhB+E26P+7XJXgZU=
Subject key identifier:   7A:59:7C:F9:C6:96:07:44:C6:D0:9C:4E:AC:E8:D6:A7:FD:EE:D7:8E
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2F2EDC9C3D5F268427480
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4f096559-d164-33f2-9abd-80dd225a7de9.roa
Signing time:             Mon 07 Apr 2025 16:33:15 +0000
ROA not before:           Mon 07 Apr 2025 16:33:15 +0000
ROA not after:            Sun 06 Jul 2025 16:33:15 +0000
asID:                     81
IP address blocks:        204.84.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:f2:ed:c9:c3:d5:f2:68:42:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:15 2025 GMT
            Not After : Jul  6 16:33:15 2025 GMT
        Subject: CN=50090d8c-095f-4dff-9c69-38dc4f95e5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:39:3d:4e:1e:da:12:11:60:a2:c4:8d:49:
                    d3:35:31:d9:b6:1d:f2:67:fd:e3:d4:c3:f0:dd:83:
                    fd:c2:ef:07:10:d9:ba:b9:ed:2b:37:19:da:3a:cc:
                    99:bb:90:55:48:60:3a:73:0e:df:2f:02:d4:21:6f:
                    a0:e0:b2:81:2d:31:34:b2:b8:af:9a:ba:31:a8:c8:
                    2d:be:f3:1f:b5:58:5e:ac:97:5e:13:9a:1f:e6:19:
                    8e:51:db:02:9e:c6:66:f5:f9:18:d2:72:d7:d6:7c:
                    ef:35:37:17:4f:9c:f3:8f:86:6a:a1:6a:f9:95:c1:
                    8b:6c:0c:b3:64:d3:47:2d:58:f4:39:c5:b1:3d:4c:
                    8b:0f:3c:75:c4:bc:ce:2e:7a:be:46:f8:89:c9:5a:
                    82:f6:91:ec:24:6a:19:75:8a:6f:47:d1:72:c5:1d:
                    31:d6:59:11:a9:d9:74:ef:06:41:01:30:7b:a6:63:
                    f0:47:c4:3c:4b:b3:e9:dc:9b:d8:d9:9b:9e:19:33:
                    31:90:42:5f:a2:16:ca:0c:e0:91:90:cb:68:d1:7b:
                    ec:61:14:dd:46:1a:63:ba:4b:19:bd:d4:8e:60:79:
                    89:0b:f7:52:7a:2e:5a:d5:ed:02:f5:5e:67:38:5a:
                    68:a7:db:5d:b7:d6:42:87:fd:b9:ba:a5:96:d6:f1:
                    f1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:59:7C:F9:C6:96:07:44:C6:D0:9C:4E:AC:E8:D6:A7:FD:EE:D7:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4f096559-d164-33f2-9abd-80dd225a7de9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:95:2c:5b:7d:15:6c:df:1a:03:f1:56:20:f2:3b:75:5d:d3:
         b9:8e:e7:48:4a:5a:a1:9c:7c:fe:89:e0:04:da:17:62:55:65:
         79:80:22:b1:c7:ca:17:3e:01:10:5c:35:b8:84:a0:e0:c6:2e:
         77:85:7d:ea:de:72:92:4d:17:56:f3:ae:ed:52:bb:bb:79:56:
         1f:c0:cb:61:af:f5:1a:05:f2:48:af:52:28:57:a4:83:ec:63:
         1f:96:ad:7e:6f:6d:28:44:d1:43:3e:ea:7f:58:d1:1a:ee:3e:
         2d:8f:06:5b:66:5c:25:09:f8:5e:0f:d2:5f:ac:7a:df:12:8e:
         af:b2:d5:97:85:d0:a8:92:d0:b0:a7:af:e6:cb:35:8d:c6:e1:
         3f:6c:39:3f:85:30:77:d3:ff:05:96:70:86:06:0f:81:b9:f9:
         4e:a3:fb:5c:15:f2:c8:82:93:3c:5f:f1:7c:e0:9c:be:22:e6:
         44:95:66:2c:5a:d6:75:81:dd:6f:e9:75:34:93:f8:8b:fa:0a:
         ea:4e:5f:dc:f8:24:d9:2d:d4:85:2e:37:eb:08:e9:12:b0:28:
         ee:f1:17:e9:b6:80:bf:d6:27:59:0e:0e:e5:ba:70:5f:18:27:
         f5:c9:22:e7:b7:2d:1b:38:57:6e:fc:bb:b8:a4:4c:b5:81:44:
         e1:b5:9f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:23:02 2025 by rpki-client