Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/07c1c0e7-ec4d-3df9-981e-52c095cc72f8.roa
File:                     07c1c0e7-ec4d-3df9-981e-52c095cc72f8.roa (raw, json)
Hash identifier:          P+lB2GF2URHwQX7WSqHwmd/AG9CW7ncbqzm5J5CaBa4=
Subject key identifier:   D5:27:1A:12:4D:DA:B7:9D:51:0A:B7:38:26:5E:30:AF:81:52:C9:BD
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849AE7F42D021B7A9DF2DD53180
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/07c1c0e7-ec4d-3df9-981e-52c095cc72f8.roa
Signing time:             Tue 29 Apr 2025 01:00:47 +0000
ROA not before:           Tue 29 Apr 2025 01:00:47 +0000
ROA not after:            Mon 28 Jul 2025 01:00:47 +0000
asID:                     397630
IP address blocks:        172.96.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7f:42:d0:21:b7:a9:df:2d:d5:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 29 01:00:47 2025 GMT
            Not After : Jul 28 01:00:47 2025 GMT
        Subject: CN=9c467285-227b-4357-a412-8c51c5d72cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:75:87:99:8a:b5:35:d5:73:be:ab:e9:2f:
                    df:d3:da:a7:81:45:e1:94:79:82:3b:a9:f2:6a:1e:
                    8e:6c:68:79:52:2b:82:89:4e:16:1d:a5:69:ec:9f:
                    5e:28:ec:6c:e8:91:47:01:83:30:f6:e9:53:26:75:
                    01:e3:eb:6f:b8:1c:fc:57:3f:f7:8e:3f:56:53:bd:
                    fc:46:bb:36:bc:78:7e:9d:ab:bc:4b:92:f2:dc:67:
                    a5:cb:15:31:5b:1e:d6:e8:7c:e1:02:fe:f9:90:ac:
                    49:fe:b6:dc:d8:86:86:97:8e:93:37:ff:df:b5:77:
                    cd:74:6d:d6:3b:68:35:ae:70:af:01:58:a4:68:9f:
                    ee:1d:fb:c5:13:81:82:38:e4:2b:75:3b:b5:1c:38:
                    9d:e4:fd:79:5f:0a:35:09:fc:78:c0:6d:5a:4c:47:
                    75:d2:d4:4b:5d:a1:9b:08:19:59:bf:4e:89:91:83:
                    1b:6c:7a:23:70:fc:3c:dc:02:f9:aa:fe:1e:73:ec:
                    5d:6e:b0:c8:79:08:89:c7:d7:e2:01:79:b4:dd:f5:
                    87:5d:b9:ef:cf:fb:09:ec:99:f6:0f:36:be:0e:d4:
                    b4:52:1e:b9:c3:34:5a:39:4d:20:a2:70:bd:c7:54:
                    f9:a2:36:a9:a4:90:b6:75:c5:b9:73:ba:f7:a4:3a:
                    21:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:27:1A:12:4D:DA:B7:9D:51:0A:B7:38:26:5E:30:AF:81:52:C9:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/07c1c0e7-ec4d-3df9-981e-52c095cc72f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:46:21:db:f6:e3:76:82:17:a9:34:06:f7:0e:b9:d2:27:78:
         ba:0b:00:37:c6:36:36:2a:10:02:7d:d9:41:b5:d8:0c:fa:d9:
         e1:4d:44:c4:b5:b8:79:36:93:58:5e:7c:d0:ad:d4:e4:84:9b:
         74:03:0a:f1:0c:ff:64:23:59:7c:ae:98:f1:f8:d3:d2:5a:e9:
         5c:27:d3:a6:ae:9c:50:15:22:a2:f6:9a:89:a9:8c:55:82:2b:
         9c:04:25:0d:d9:d9:56:05:60:60:63:30:80:70:53:33:53:b3:
         3c:05:d4:a7:16:64:c8:1e:7f:13:01:57:cc:e0:23:0b:fd:19:
         be:36:e1:1b:e7:18:90:41:5f:81:92:d7:fc:b9:c6:33:48:60:
         31:c9:86:51:76:13:41:61:54:a9:ea:e5:20:a8:46:14:37:ab:
         e6:4f:91:84:c5:9f:20:b5:aa:97:02:0a:77:a9:f5:fd:d8:17:
         0e:4e:e7:89:c9:4a:a0:56:bf:88:f0:33:60:c5:0e:e1:2c:d3:
         fd:73:7f:b8:12:fe:dc:65:81:05:15:54:f2:50:08:1b:63:fb:
         9f:03:f2:3b:57:1f:9e:a6:33:1d:e6:19:ea:f5:94:9e:55:7b:
         00:a1:bb:2e:0d:37:f0:56:f9:60:de:8d:64:ec:39:5d:d5:45:
         8a:5f:ce:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:58:38 2025 by rpki-client