Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1a652fb4-5e2d-338e-ba84-ac25f63bf537.roa
File:                     1a652fb4-5e2d-338e-ba84-ac25f63bf537.roa (raw, json)
Hash identifier:          AefIlkbVvBaAFG8XZJmGZCXOrmGXuoxWMvJeoI74Tfc=
Subject key identifier:   1C:31:4F:91:9B:9A:F8:27:6B:4B:82:17:47:22:71:A9:7A:58:1D:0C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849B6DF59D11FCB6F3AD0F8D0C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1a652fb4-5e2d-338e-ba84-ac25f63bf537.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     64267
IP address blocks:        199.34.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:59:d1:1f:cb:6f:3a:d0:f8:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=97a2474e-e591-4d05-9921-ed184e5ca66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3e:24:89:70:eb:25:c7:ab:ae:be:b8:ac:4a:
                    0c:62:1d:58:4d:a0:fd:a3:d0:a9:87:8c:7e:6c:e9:
                    fc:3f:13:8b:4f:b2:d5:0b:1d:0a:a0:1f:30:e3:07:
                    98:aa:ea:26:5b:dc:cd:a5:78:24:1f:40:a5:09:9e:
                    f2:f4:08:75:90:58:d8:b7:22:4a:0e:32:35:30:4f:
                    f1:1a:a4:e9:b6:47:18:b5:19:fe:98:53:81:26:02:
                    45:48:0f:86:39:ad:af:3c:5b:61:07:32:3c:0c:28:
                    97:11:8d:5a:5e:78:28:06:ee:f2:ed:68:8d:2f:01:
                    9c:b0:18:19:23:b8:47:3b:88:14:88:45:bf:47:1c:
                    59:c1:8a:a9:d5:b0:2c:55:61:7f:94:74:98:71:92:
                    55:6c:b7:79:dc:96:27:a1:9b:c3:91:e4:0a:6f:6c:
                    f2:0c:1e:2f:53:59:da:61:36:c0:02:b3:77:13:aa:
                    7f:5c:42:a2:7f:55:c7:41:14:86:6c:9b:7f:a3:d6:
                    70:b6:c6:25:2a:b9:02:aa:70:3a:e0:11:0d:70:f3:
                    3c:84:b4:00:f0:b3:39:7d:5d:87:ca:14:76:1c:33:
                    e4:5a:c8:38:29:fb:e9:ee:66:62:c6:d5:b9:d7:b1:
                    bc:33:d2:33:fd:39:ba:b8:80:ea:80:13:8a:36:a9:
                    af:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:31:4F:91:9B:9A:F8:27:6B:4B:82:17:47:22:71:A9:7A:58:1D:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1a652fb4-5e2d-338e-ba84-ac25f63bf537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:29:7d:96:be:69:81:ce:e8:bf:1f:5a:a1:fc:37:fa:c8:9c:
         9f:f8:1e:65:97:26:7d:42:e8:68:83:e5:79:cd:df:d7:3e:13:
         ed:d5:a9:fc:f7:bd:c3:85:26:1f:2a:d4:56:b8:10:fc:cb:5b:
         21:72:6d:f2:fe:e5:bb:b4:a3:5e:7e:a2:51:32:6a:b9:5b:e7:
         43:9e:bf:b0:4c:7a:c2:bd:81:e9:2e:e0:45:80:6b:c8:64:e2:
         f3:e5:18:fa:48:c5:a3:bc:05:5a:c4:6c:18:40:9c:41:90:33:
         3b:eb:5a:4b:8c:02:be:99:d2:25:39:6f:34:ff:9f:ce:04:c9:
         23:ba:f6:53:58:c6:e0:bd:35:ce:05:f5:7f:e9:ab:bc:64:73:
         4d:c8:04:8a:95:e1:4f:fc:ec:ab:24:92:cf:99:4c:83:c9:a1:
         e6:fb:24:ea:b1:2b:53:5a:5c:c5:04:ab:9b:7f:55:4a:72:60:
         31:dd:d0:3c:6c:a1:cf:0c:eb:7d:07:3f:c6:fa:58:ab:de:8f:
         32:cf:3c:af:b1:9a:b8:24:82:c3:73:84:c2:da:03:74:bc:c1:
         a7:6a:eb:f9:fb:ce:b7:2c:67:f0:ba:2e:2b:ad:c6:4a:60:6f:
         62:85:2d:e1:db:29:d6:16:97:3f:66:c9:11:36:b7:10:17:3e:
         99:d7:c5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:00:47 2025 by rpki-client