Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/779bed01-3408-31cb-9dbe-f3cc9e603ef8.roa
File:                     779bed01-3408-31cb-9dbe-f3cc9e603ef8.roa (raw, json)
Hash identifier:          Dm4aIcBUlLW32pZVnevfKG3GTOj4wQpwMIeuibPidD8=
Subject key identifier:   4D:5E:BF:13:C6:08:79:2A:3A:D8:FA:A4:4C:C5:C5:AF:89:F8:21:16
Certificate issuer:       /CN=7478c754-137f-4ef1-a8b5-aa954253fb79
Certificate serial:       010D0C9F4328584AB650F2D17952597FB4A57080
Authority key identifier: E7:A1:63:1D:2D:78:FC:91:26:02:97:AE:83:13:BE:E6:6C:D8:7C:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/779bed01-3408-31cb-9dbe-f3cc9e603ef8.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     18474
IP address blocks:        209.173.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:f2:d1:79:52:59:7f:b4:a5:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7478c754-137f-4ef1-a8b5-aa954253fb79
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=674756a2-e923-40f9-856d-abb53ee4d1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:c7:f6:4f:ed:fb:0d:96:0c:af:48:d9:c4:
                    f8:46:19:13:cb:f7:35:b1:ef:d4:0c:8c:7b:37:91:
                    5b:f8:3e:89:8b:31:ae:56:32:6c:b2:db:e8:c0:07:
                    1c:ea:b7:86:e5:b6:4b:5c:4f:6e:5e:bd:e0:e8:3e:
                    58:b5:3a:41:ab:ca:52:f3:85:4b:d5:b5:5f:9d:a2:
                    37:c0:e8:99:5f:61:41:95:7d:75:20:fc:a4:f1:2a:
                    76:95:99:77:b7:c4:29:ae:b5:58:32:16:db:c3:8d:
                    b0:7a:57:9c:46:2b:ff:a7:c5:2a:d6:69:37:11:b8:
                    0f:a6:c6:b1:9a:1c:89:2d:c8:5f:ac:15:74:ea:1a:
                    38:42:6e:a3:fa:9e:87:4f:74:3c:b4:39:45:35:53:
                    db:6f:e1:81:1c:68:b4:08:c4:32:2c:28:99:fe:2e:
                    fe:9f:00:fa:b8:29:d3:0a:9f:a9:9a:f7:3c:9d:36:
                    1c:8f:7d:50:ff:ee:53:bf:b4:09:70:51:7b:cf:94:
                    9e:67:d0:ec:bb:b7:00:56:2a:64:47:ff:1e:cb:9c:
                    08:af:f7:1b:42:1c:37:f0:b8:22:d9:86:60:17:ec:
                    c6:08:4d:13:18:1f:b7:9f:2a:d4:b3:95:90:db:c9:
                    39:c5:44:f1:b3:1c:84:b2:e5:c8:71:e5:39:1b:38:
                    6d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5E:BF:13:C6:08:79:2A:3A:D8:FA:A4:4C:C5:C5:AF:89:F8:21:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/779bed01-3408-31cb-9dbe-f3cc9e603ef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A1:63:1D:2D:78:FC:91:26:02:97:AE:83:13:BE:E6:6C:D8:7C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:f2:ee:e6:4a:f4:73:69:48:dd:c3:53:5a:3a:08:fe:47:bc:
         46:2a:be:56:c6:ef:d7:e4:69:10:30:57:21:7a:c9:c1:7f:ef:
         27:90:3d:f5:3c:00:c7:e5:c5:62:37:50:c2:39:d1:29:34:2e:
         5a:e4:9c:eb:a2:ae:70:b1:83:02:37:e5:f4:4b:57:f6:2c:9b:
         60:a2:fe:25:44:64:1c:d8:af:8f:8a:51:74:b3:33:67:57:6f:
         d3:f6:b0:8c:89:85:66:ea:03:32:81:c8:11:4d:11:06:43:06:
         5e:2b:cb:6e:70:f6:9c:1a:75:e5:31:3d:e4:69:1e:c2:a9:b8:
         99:35:ff:0d:ae:86:76:5d:81:22:32:4f:2b:3b:31:cc:cb:24:
         ea:c2:2e:33:e5:24:9d:34:d3:04:f6:f9:4c:04:ee:1b:a5:ad:
         21:57:53:b3:e2:f2:21:78:4b:4d:55:45:d1:30:55:0c:d0:f0:
         7c:da:26:48:3f:78:f8:1a:ba:36:47:26:51:8b:4a:59:47:a9:
         d4:66:b0:26:b6:92:2d:81:1b:d1:27:2d:35:46:b5:d6:47:68:
         d6:67:da:a3:5b:81:d6:74:0e:52:ab:6b:67:01:25:2a:7e:6e:
         fb:9b:d7:c4:24:6e:bf:dc:88:be:5a:3b:73:96:de:14:4a:f9:
         55:6f:a9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:12:43 2025 by rpki-client