Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/9d47a116-fd9c-32d2-9643-721de89ac8ef.roa
File:                     9d47a116-fd9c-32d2-9643-721de89ac8ef.roa (raw, json)
Hash identifier:          66B6XjaNfu/hHAlr20jWKJaJrwxX0+Bd6C9Dza/CYXA=
Subject key identifier:   94:62:38:35:4B:C8:28:E0:37:3B:6B:3E:C8:4E:4C:25:96:2E:7F:E7
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F43285849F10D34D71B4CFC61F32CD180
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/9d47a116-fd9c-32d2-9643-721de89ac8ef.roa
Signing time:             Thu 22 May 2025 21:10:15 +0000
ROA not before:           Thu 22 May 2025 21:10:15 +0000
ROA not after:            Wed 20 Aug 2025 21:10:15 +0000
asID:                     1742
IP address blocks:        128.103.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:0d:34:d7:1b:4c:fc:61:f3:2c:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: May 22 21:10:15 2025 GMT
            Not After : Aug 20 21:10:15 2025 GMT
        Subject: CN=35552d67-d749-42b7-8652-6ea708a1f58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a9:fb:38:f8:1d:91:58:3c:f8:4c:bc:75:59:
                    df:2c:b6:f9:81:66:26:c9:e1:7c:04:00:6c:32:9b:
                    64:40:1e:11:18:2f:7f:86:06:b0:b5:0e:68:46:24:
                    e4:0a:89:bb:c1:ea:9b:34:66:98:1d:28:4f:36:fa:
                    b3:7e:73:55:0f:fd:18:d5:9f:1d:bd:42:c6:33:ff:
                    2b:44:42:22:ae:7c:5c:27:ad:75:8c:a9:fc:ef:50:
                    2f:7e:a0:cf:06:2b:4a:e6:6c:c4:6b:41:64:8d:21:
                    f9:e9:3e:b8:ee:dc:ee:c3:18:eb:29:e9:dd:04:90:
                    c3:ae:8d:74:e1:27:db:d9:ff:bc:cb:e7:9e:23:26:
                    4f:4f:2b:1f:9a:91:80:ec:21:c4:32:22:c4:06:1a:
                    d6:6d:ae:78:93:48:28:7a:0e:69:3e:78:f5:13:e8:
                    a2:91:5d:56:f6:27:d1:c9:10:7d:04:0b:21:23:a3:
                    f0:a5:72:e4:a6:ba:94:00:c0:75:32:a4:89:ef:5f:
                    2e:67:a9:07:69:50:9a:d3:10:08:0d:9a:19:53:12:
                    36:31:cd:6d:cc:ea:dd:32:8e:7c:bf:04:80:c4:0d:
                    64:b0:6f:67:0e:fc:3a:89:a1:91:34:99:16:ce:47:
                    76:7a:e2:c4:59:c8:8f:59:46:69:e5:b9:68:f0:ae:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:62:38:35:4B:C8:28:E0:37:3B:6B:3E:C8:4E:4C:25:96:2E:7F:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/9d47a116-fd9c-32d2-9643-721de89ac8ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.103.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:67:8b:d6:98:6c:fc:39:b5:78:47:c9:fc:f2:b2:18:98:62:
         47:46:7e:ec:82:82:f4:1f:54:90:2f:5e:ba:23:60:be:a7:9f:
         8a:2c:31:cc:3b:8d:e2:80:26:df:0f:a5:13:46:fd:28:64:d3:
         17:49:72:49:f6:d3:03:89:28:e0:88:2c:b2:33:67:6f:c8:c5:
         e3:12:35:66:fb:f9:b6:ab:b5:28:2f:d5:67:35:b5:9d:e0:ef:
         ae:9a:ff:a4:ee:84:c9:42:19:0a:11:e4:cb:63:5c:ce:51:70:
         f4:10:b6:6c:eb:0f:11:0f:aa:64:9a:44:76:1e:20:32:a4:1e:
         0f:43:04:e5:95:8e:e0:93:bb:68:04:b1:6d:c9:e2:4d:cd:e5:
         ff:73:40:e6:25:c7:f5:06:84:3d:4c:34:4d:06:72:ea:c2:fa:
         ff:77:bd:05:63:9e:ee:96:30:48:69:38:52:95:d0:3c:47:06:
         a5:db:f9:bd:7b:d3:a3:e2:fe:53:64:32:14:95:85:f5:46:8c:
         23:24:ce:d5:ed:6d:ae:e6:ff:19:95:82:59:62:27:21:78:47:
         05:d3:9a:cc:e6:d9:39:b7:17:41:4b:d5:15:f2:cf:1c:75:fc:
         25:e3:fa:11:5f:42:0f:f1:15:4a:31:1e:60:af:e1:fa:45:a7:
         4f:96:81:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:01 2025 by rpki-client