Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26c2808b-3bf5-3888-9903-172907242ac7.roa
File:                     26c2808b-3bf5-3888-9903-172907242ac7.roa (raw, json)
Hash identifier:          vvRv6Cj+wfQM+k7vdUg6fleCZ8iGVB7hykOnwXGhiTo=
Subject key identifier:   B1:92:B3:CE:72:6A:3B:28:70:B5:B1:FC:6B:80:44:A1:0A:A6:E1:52
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA968523F76A68E177CC80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26c2808b-3bf5-3888-9903-172907242ac7.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        172.243.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:96:85:23:f7:6a:68:e1:77:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=14707097-ba7b-48d4-9679-4bf7ea2fd197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ea:31:b7:a1:0d:4c:be:b5:a2:70:01:e2:bd:
                    b0:98:54:10:4e:e1:40:37:c3:65:e6:00:e7:33:c3:
                    51:83:6e:ad:f9:b6:7d:08:69:33:27:c7:4e:da:90:
                    89:d1:a2:c0:20:5f:6a:ba:c3:30:f7:e7:e5:fa:c5:
                    6a:c0:14:50:df:10:63:fb:02:03:57:f7:40:68:33:
                    cf:d1:c8:a5:2b:f8:6a:25:bf:dc:16:ed:c7:82:94:
                    d0:5a:28:41:ec:22:79:73:f2:88:b1:08:e9:37:a8:
                    f2:99:eb:08:4d:34:a4:4b:9a:39:78:ea:ac:4b:a9:
                    67:0f:d4:a9:57:6e:ca:05:47:3d:4c:4a:f5:9e:2e:
                    ce:1e:05:58:4c:90:70:47:2f:9d:7e:97:20:44:9c:
                    6c:71:1d:21:a9:e5:8e:45:ee:d2:38:dd:ac:1e:bf:
                    10:fa:ea:4f:f6:af:4b:80:4d:6f:58:03:a9:c8:43:
                    31:25:77:05:95:78:93:b2:99:9c:8a:17:95:98:3f:
                    c6:fa:e1:33:65:e3:33:cf:62:99:92:28:74:65:0c:
                    68:2a:c1:40:d7:01:d0:eb:36:1c:4f:43:14:13:05:
                    f2:a6:31:7b:86:07:51:72:59:37:c4:93:6c:6f:30:
                    65:a0:08:f9:36:c4:d2:db:42:5e:b6:d9:03:fe:5d:
                    e2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:92:B3:CE:72:6A:3B:28:70:B5:B1:FC:6B:80:44:A1:0A:A6:E1:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26c2808b-3bf5-3888-9903-172907242ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:1e:eb:9e:47:f2:5e:28:e9:f6:64:19:c7:8a:f1:af:30:10:
         9e:b6:d0:42:b8:ff:34:9c:e9:4c:58:77:b7:96:52:1f:92:66:
         56:5c:ae:50:26:4d:2a:8b:ca:7e:50:45:b1:35:09:c7:33:be:
         f5:b2:4f:68:b5:3a:7d:9b:e1:90:d5:9e:5e:42:c5:15:0a:e9:
         4f:6f:fc:fa:0e:0e:aa:90:e1:64:73:e4:03:78:d5:51:55:8c:
         ff:a8:d2:a1:e0:d5:fc:b1:41:97:8b:ca:5a:8a:0f:a9:c5:3f:
         e4:27:8a:da:42:7f:e9:32:49:fa:90:19:12:b1:76:75:f6:d9:
         b1:a3:dd:55:60:47:a8:2b:49:81:27:19:87:a1:88:04:3a:17:
         1c:19:00:7c:1b:1b:a0:85:b3:76:a5:fe:cb:4a:48:e8:d3:af:
         ef:63:aa:4d:10:8a:47:b4:1d:97:9f:dc:49:bf:bb:3d:03:0e:
         dc:09:44:25:08:5a:d7:ce:cc:b8:c6:0d:2e:6f:3b:31:30:fe:
         55:dc:2b:5b:64:e2:ea:be:3d:69:f6:b9:cd:76:f9:e9:f3:4c:
         14:10:46:b9:12:89:81:6b:a0:c3:7d:66:e7:69:64:8c:14:d7:
         be:42:80:df:e4:4f:83:7f:c1:85:1a:48:81:6b:00:81:36:8a:
         43:ea:4e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:22:44 2025 by rpki-client