Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa
File:                     b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa (raw, json)
Hash identifier:          m2VJK96T0RLoGm6fllb0ox3Z4WAott7tYrsjXPZLrQU=
Subject key identifier:   07:32:27:1D:9C:F6:C7:6F:1E:E0:1A:05:2F:01:A8:48:51:9B:C1:FC
Certificate issuer:       /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
Certificate serial:       010D0C9F43285849F87A9255C54D138F243F0300
Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     32435
IP address blocks:        199.189.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:92:55:c5:4d:13:8f:24:3f:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=6f24ddcf-299d-41f1-ade1-d66d54d44057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1f:ef:83:f1:62:90:2d:b0:f5:0f:e9:70:07:
                    de:47:1e:32:dc:d2:b1:f1:e4:ff:8e:04:37:74:75:
                    8f:07:3c:f9:9f:5d:96:89:09:8e:ac:f1:a0:35:4a:
                    14:f4:e0:b2:aa:b6:4b:ef:bb:cb:75:29:ba:5f:2c:
                    f6:f7:b6:15:e8:a0:23:dc:21:bc:1d:67:a8:b5:2c:
                    4d:bd:4a:2d:73:ad:e2:3e:e0:96:8d:87:e2:f4:e1:
                    df:b3:a3:78:d9:84:72:0e:8e:50:99:52:7c:63:72:
                    bc:46:81:80:bb:d4:c6:06:d0:bb:b2:b9:fd:a5:4b:
                    2e:d2:aa:45:86:e7:af:a3:70:e3:7a:2e:f9:33:37:
                    59:4c:90:12:be:3b:e4:cd:65:b1:ff:f9:19:e2:f1:
                    14:1a:06:ee:7d:7d:49:61:03:ec:01:89:1b:55:bf:
                    d1:d3:da:8b:80:04:d9:d4:f7:2b:94:7a:81:59:e9:
                    17:06:26:fc:ba:fa:71:35:c6:90:1f:f4:b4:d2:62:
                    75:13:72:a2:29:65:72:e8:2f:eb:24:ee:b2:0b:0b:
                    8c:ee:e7:f9:31:66:7e:22:95:4b:1c:3b:b3:16:cb:
                    d9:ab:d6:f6:f8:43:62:41:34:2b:9f:4c:ff:34:75:
                    fc:55:f8:55:18:54:69:32:21:c6:bc:ca:e5:b7:3e:
                    0f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:32:27:1D:9C:F6:C7:6F:1E:E0:1A:05:2F:01:A8:48:51:9B:C1:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl

            X509v3 Authority Key Identifier:
                keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:6a:69:41:ee:fa:5a:26:11:ef:b0:87:9b:b9:98:b3:89:14:
         6e:04:e4:94:99:25:c0:d6:12:ed:2f:17:f3:a4:0d:4a:58:2c:
         3a:cd:d4:83:96:02:5a:15:89:be:47:b2:2b:94:32:8a:15:b4:
         66:bd:15:28:72:09:8e:42:81:ff:c8:17:98:eb:d1:0f:e7:c9:
         34:2a:ba:9e:35:e8:4b:35:9c:8b:8b:36:09:a1:b9:66:e4:c0:
         f1:c3:d0:0b:2e:7c:54:5c:a1:36:1e:e3:0c:a6:51:7b:70:f6:
         5e:2a:39:76:9c:e3:71:8f:8c:35:c5:d5:6d:b1:1a:e9:11:5b:
         95:11:32:4a:8d:5d:76:55:32:92:2a:3f:62:ab:6d:ca:88:af:
         11:25:ed:21:32:2b:59:b1:14:0d:1b:13:df:e3:5e:60:1a:0a:
         2b:93:01:25:f0:93:d4:5e:fb:b3:e0:46:b1:c4:e8:23:98:5b:
         c6:8c:38:36:34:b1:8f:fe:06:17:bd:b1:b0:82:ad:6e:14:1e:
         59:97:39:f9:c4:55:11:1e:ae:dc:ef:d9:7a:a3:b3:e7:cd:42:
         ad:44:d6:24:1d:d3:94:2e:06:f7:58:0c:16:64:8f:7b:aa:ef:
         51:71:e6:0b:19:02:50:09:2e:bb:61:90:36:eb:ac:e9:58:d9:
         58:86:95:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:25:57 2025 by rpki-client