Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa
File:                     5dd6712e-6178-3993-8873-ab9cf5de0d88.roa (raw, json)
Hash identifier:          JPXpQILEjQdHUG6VWEqYlIRyctIRyAupaHanZ1pfs0E=
Subject key identifier:   7F:B2:52:EA:F7:41:A3:53:60:1B:05:7F:DD:96:1D:89:83:C6:48:98
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858499AF489653AE363F83F05EE00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     64267
IP address blocks:        199.250.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:89:65:3a:e3:63:f8:3f:05:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=bfa17123-521b-40b3-beaf-7a07ced48fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:51:27:e9:f8:b6:ed:f1:80:2f:51:00:e0:
                    c1:7f:9d:b7:47:4f:3f:b5:69:12:db:a9:e5:f8:55:
                    ba:ef:6e:82:f6:12:9f:d1:b7:c5:15:a6:8f:ce:b9:
                    fa:22:7e:ff:a7:13:18:45:72:5b:54:6a:f2:47:51:
                    04:c8:6b:5b:ea:82:10:09:25:7b:fa:28:48:4b:6a:
                    4d:20:31:4b:c5:c0:3f:d9:4f:b1:57:09:dd:b3:6d:
                    03:1a:0e:7b:29:cc:7e:a6:59:10:0d:1e:02:33:24:
                    35:b5:ee:ec:38:e6:d1:e3:79:9a:b9:76:4f:57:47:
                    ef:0b:b4:ba:58:62:48:6d:64:98:bf:46:da:fc:bb:
                    7a:92:80:5c:d2:4c:44:31:6e:9b:93:55:29:a4:d9:
                    6d:c9:db:e0:b7:51:14:df:1b:45:f8:7d:c8:1b:64:
                    81:5f:a2:0b:c5:27:96:28:f9:73:f1:ab:8e:f2:85:
                    5a:e4:39:2f:f9:1b:56:24:e3:32:02:11:07:c5:f9:
                    f6:8b:79:4a:b5:62:cd:67:c1:9c:42:0a:2d:ab:54:
                    3f:f6:a0:ef:1e:e9:25:a9:aa:6d:0d:17:a7:ef:97:
                    ac:3e:3c:47:63:77:0e:ec:a6:98:9a:4d:6f:ee:ec:
                    ee:16:5a:89:e8:f4:fa:12:ed:b6:be:9c:41:5a:9b:
                    59:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B2:52:EA:F7:41:A3:53:60:1B:05:7F:DD:96:1D:89:83:C6:48:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ff:cf:79:3c:01:36:e0:d2:0b:07:97:e9:a8:b2:9e:92:db:
         13:61:e1:fa:9c:76:dd:9e:0a:21:d4:1e:7b:19:6f:ae:38:74:
         8e:d8:92:14:07:83:90:d3:f3:cc:73:6e:de:48:a4:f9:c4:fc:
         79:8c:4e:b1:a2:67:73:b4:3e:17:4b:08:69:08:f1:37:5e:02:
         d7:07:37:cc:ac:f3:f8:09:79:79:45:f2:5c:cf:53:b4:2b:af:
         6b:94:17:ca:7b:f0:01:c6:fa:ab:c2:af:0b:5b:76:f6:1c:7f:
         4b:ed:cf:74:4f:1b:9d:a3:ff:47:25:0e:2a:3b:31:26:8d:25:
         cf:33:cf:97:87:28:c4:ae:c8:9c:02:a3:78:5c:f0:fe:64:12:
         09:43:08:29:2b:be:36:68:59:dc:0f:c5:d8:87:7b:b2:04:f3:
         00:88:57:82:8f:ae:df:29:05:12:34:21:a6:0a:d4:a3:6c:d1:
         6f:6e:44:51:4c:a2:69:7a:08:82:fe:5e:cf:d8:c8:1b:ed:74:
         69:1e:f8:7d:10:aa:6d:7f:91:9c:67:1d:bf:98:a0:56:11:02:
         03:cb:e5:77:c0:f9:8c:a3:04:5c:a8:9f:61:43:23:ac:07:01:
         fd:15:b6:ee:50:59:e5:00:0a:06:17:de:86:56:8a:07:9a:77:
         c6:67:31:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:54:02 2025 by rpki-client