Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/31e27e03-7faa-3dab-98c9-402e5bb31977.roa
File:                     31e27e03-7faa-3dab-98c9-402e5bb31977.roa (raw, json)
Hash identifier:          7+SZ+a0je8vgXSXcWUlsJ4jgkwL/KTYUWAAFLdZZ2tA=
Subject key identifier:   F1:06:97:42:FB:2E:03:D1:84:BE:46:AC:51:E1:0C:76:1F:91:E4:F9
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A305039CC3D877C64C3BF9A40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/31e27e03-7faa-3dab-98c9-402e5bb31977.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     397630
IP address blocks:        72.14.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:39:cc:3d:87:7c:64:c3:bf:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=a320fcab-9c98-4edc-8477-e267ee36b217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4a:92:a2:b9:79:bf:ed:97:4b:c2:75:56:06:
                    8c:45:22:9a:30:33:cc:75:68:8a:f2:00:63:e5:2b:
                    be:74:bb:5b:2d:41:f1:91:98:dc:f2:a7:2d:10:93:
                    3e:d9:61:9f:2a:69:20:14:c7:54:d6:8c:c5:e7:b2:
                    d7:95:25:2b:07:0b:d3:b3:42:70:0c:e2:96:7a:f5:
                    ec:09:4a:61:ca:1a:53:37:c2:31:fb:47:b3:ab:c9:
                    a3:9d:9b:af:24:5e:09:12:e4:e0:20:71:e4:26:71:
                    d5:6d:29:6d:67:d5:a4:95:7a:de:79:f4:e8:5d:d6:
                    b3:e4:b5:68:6c:85:c5:0f:31:ad:d0:94:14:81:b5:
                    e0:00:8b:9c:09:6f:79:fe:6b:7a:ee:57:98:f9:5e:
                    94:46:79:04:42:b0:fe:11:34:ff:11:c8:d0:0d:40:
                    83:fe:99:6a:c0:e4:19:29:d9:a8:e6:2f:de:73:f3:
                    b3:9a:62:28:ec:4d:52:4c:5e:04:1f:67:48:11:63:
                    04:b8:a2:09:06:b4:1d:a3:77:cd:d8:98:34:04:24:
                    52:db:86:c0:51:3c:c9:b7:14:2b:0f:3b:fa:d7:05:
                    25:6c:c6:af:8d:8a:7c:dd:56:25:79:5b:fb:ce:82:
                    55:12:b7:18:0a:bc:eb:b7:36:ae:3c:94:df:95:ed:
                    0c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:06:97:42:FB:2E:03:D1:84:BE:46:AC:51:E1:0C:76:1F:91:E4:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/31e27e03-7faa-3dab-98c9-402e5bb31977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ab:b1:7b:67:5e:f2:2a:fa:a3:34:83:d2:ad:14:5f:05:ac:
         4e:8e:3c:06:c3:d3:85:7b:77:84:cd:0f:f0:82:72:3b:d9:a1:
         1d:54:c0:d4:aa:ec:75:4e:d4:23:b0:b8:ec:59:33:b7:4e:b4:
         eb:9a:cd:59:a7:00:49:81:f4:d5:42:54:c2:7e:49:68:4c:a1:
         2d:b9:18:d3:cc:eb:91:ee:31:de:7f:7e:ba:e9:8b:0c:bd:eb:
         ab:2d:e8:0e:83:a3:c1:ca:77:40:ec:2f:e8:f8:7f:ff:c5:f1:
         11:fe:e8:84:23:91:b4:c3:9e:c4:30:89:82:c8:4b:84:1e:3a:
         c0:79:fb:ce:75:2d:b7:32:2b:58:e4:0a:99:43:02:b4:4e:4c:
         c0:ec:0f:d7:7f:33:de:a5:28:c3:6a:ad:7e:a9:51:a3:0f:90:
         b2:46:15:18:66:98:48:d1:7b:b1:49:15:8c:27:bf:91:4f:41:
         8c:69:da:d2:1b:c0:73:44:71:d6:bb:ab:df:57:96:1d:bf:f0:
         02:a1:e5:45:c0:a4:f8:2c:56:39:7e:14:35:08:78:2f:71:cd:
         44:2c:18:45:b0:3f:44:19:c0:ad:6a:01:29:c3:51:55:e3:4e:
         b1:47:de:06:98:c7:e6:e7:18:5a:8f:9d:b1:bd:1f:3d:55:59:
         0f:d3:4d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:08:20 2025 by rpki-client