Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0462a0ec-d86d-3e0a-883d-537000ca677c.roa
File:                     0462a0ec-d86d-3e0a-883d-537000ca677c.roa (raw, json)
Hash identifier:          P01euGOxgzlIMRxOvpSJU9gvFB80XAwD7r8wFs//8LA=
Subject key identifier:   BB:1E:38:D2:C4:B2:D3:F2:29:A6:F4:35:0E:D0:D1:64:78:02:B2:1A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A384DDB9F8842D9046087E5C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0462a0ec-d86d-3e0a-883d-537000ca677c.roa
Signing time:             Tue 17 Jun 2025 09:42:54 +0000
ROA not before:           Tue 17 Jun 2025 09:42:54 +0000
ROA not after:            Mon 15 Sep 2025 09:42:54 +0000
asID:                     22516
IP address blocks:        152.44.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:4d:db:9f:88:42:d9:04:60:87:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 17 09:42:54 2025 GMT
            Not After : Sep 15 09:42:54 2025 GMT
        Subject: CN=6bcaf6c3-f946-406d-8666-bbd124279715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:9c:ce:23:e6:b1:49:f2:0d:3e:03:04:f3:
                    f8:72:1f:20:8e:4e:c7:d7:93:f9:08:3c:e4:bc:f1:
                    3f:05:aa:43:62:d5:0c:0b:f5:74:bc:b8:01:22:1d:
                    0d:1a:23:a5:24:ed:56:4d:b3:a5:e8:c3:84:b3:8c:
                    55:81:91:ed:33:77:b3:df:98:00:8a:75:12:f9:09:
                    70:69:ad:df:28:a7:85:a5:3e:d1:9c:d1:55:f3:11:
                    fa:53:0a:3f:a6:a9:1f:96:f2:3b:e8:9f:a3:71:38:
                    c5:1e:9f:67:a9:99:86:19:77:6e:9f:a1:3f:cd:25:
                    c6:12:0b:29:75:18:36:61:41:67:92:ee:13:29:ab:
                    c0:ee:ad:f5:14:0a:65:4a:d8:e7:7a:59:b5:99:14:
                    25:82:3a:42:16:60:52:fd:d3:ff:2f:13:e8:d9:7b:
                    20:4c:70:43:00:6f:05:97:a1:ca:23:ea:76:c8:f6:
                    03:36:d0:fe:53:1a:1b:85:bc:3d:bf:e3:75:8d:66:
                    12:50:7d:46:75:63:55:cd:b8:25:21:6f:34:ab:fd:
                    5e:5c:d2:5e:4d:6d:09:25:50:7c:24:15:8e:5a:eb:
                    f4:e4:0e:91:2d:49:14:d3:3a:8e:2f:37:e9:0e:90:
                    24:75:42:c7:d1:a2:86:b0:63:50:3e:9b:88:b8:82:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1E:38:D2:C4:B2:D3:F2:29:A6:F4:35:0E:D0:D1:64:78:02:B2:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0462a0ec-d86d-3e0a-883d-537000ca677c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:ac:fb:e2:cc:f2:9b:73:2c:6c:58:8a:c7:5d:6c:e5:c1:63:
         41:26:72:81:7d:f4:9a:20:d4:41:63:b9:e5:1c:20:a7:41:e8:
         7a:39:52:db:53:bd:06:9a:65:0b:45:83:73:d4:15:f9:d9:99:
         14:15:c5:7a:0d:3d:af:cf:d6:6a:04:3c:23:80:aa:a8:e4:ca:
         5d:c3:11:23:5c:36:a7:f8:75:86:58:4d:b6:77:56:a8:7c:88:
         f4:dd:d6:af:4e:28:b1:02:7e:2d:34:d9:ec:b1:25:5f:28:91:
         26:7f:18:d7:d2:00:eb:26:69:d9:36:8c:b0:e6:b7:cb:44:09:
         14:3a:13:80:50:db:59:95:ce:0c:dd:c2:87:46:de:b5:6b:61:
         03:3c:21:f8:9a:a9:92:e1:4a:db:e4:eb:ad:43:c6:98:f3:0c:
         88:87:32:6e:59:c0:df:de:47:a3:b8:7a:26:ae:3e:b2:0a:d6:
         8e:8e:4b:30:6d:d2:cd:e9:0f:d8:78:d4:99:36:08:43:5e:1e:
         42:3d:f5:cd:ad:af:cf:c8:a1:c8:0e:67:35:7f:e6:ef:78:f7:
         c5:54:c0:a9:b2:f6:f0:a4:64:5e:d5:f0:91:f8:b7:ee:32:57:
         79:e4:f4:a0:6f:ac:28:7b:63:57:7d:e4:ad:74:a3:0e:e5:07:
         43:f2:77:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:20:16 2025 by rpki-client