Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d5ffceaa-a9f2-3b92-bd48-8545ca96fbcd.roa
File:                     d5ffceaa-a9f2-3b92-bd48-8545ca96fbcd.roa (raw, json)
Hash identifier:          35BZBkgzYynbaAqS+a5zqAP5I/gcOGiPv6nekCPbxJ8=
Subject key identifier:   88:75:C3:2E:1C:9F:E1:D6:EB:B2:8A:F1:18:3B:A5:4D:90:11:3D:B9
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849A61F465AE7E1149F80208258
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d5ffceaa-a9f2-3b92-bd48-8545ca96fbcd.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     64267
IP address blocks:        68.234.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:46:5a:e7:e1:14:9f:80:20:82:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=ed3de3e1-41f6-4c3a-a573-1c11cdeed353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4c:f8:d0:28:e1:7a:38:4d:b0:81:d6:f5:ec:
                    4a:f5:01:78:1e:1b:f0:d0:31:78:8c:5b:91:28:98:
                    eb:74:19:bc:4f:b3:4f:3d:19:a8:76:18:24:3a:5f:
                    4b:8a:3b:4c:7c:5c:46:d2:f3:4b:72:4b:52:c5:89:
                    42:a4:52:0b:77:8a:61:65:77:82:04:1a:3a:0a:7c:
                    fe:32:91:13:04:75:65:e5:48:72:06:40:a8:61:28:
                    c8:35:54:ae:e5:5f:25:a3:42:55:41:27:b6:6d:bf:
                    fe:14:67:f1:56:a0:cb:24:0b:c0:0d:d6:bc:b0:20:
                    f2:ca:c8:6d:61:0e:fa:f6:28:c8:e1:0b:38:c0:cd:
                    d2:6a:ee:dc:46:17:83:96:bf:9c:8d:32:40:cf:6e:
                    13:63:42:a0:78:d3:03:ac:33:a4:6d:7b:a6:19:c1:
                    95:db:c0:6b:03:bb:99:a6:1c:01:2b:37:bd:28:ba:
                    2a:e7:a9:69:bd:9e:2f:07:08:32:79:ad:3d:be:90:
                    70:b9:bd:07:63:fb:d3:19:1e:9e:5f:a0:a0:a2:bd:
                    86:a8:23:18:a8:bb:2c:ac:23:c1:08:ef:c5:1e:5b:
                    92:ab:5c:93:94:d3:fa:31:28:78:19:de:03:cc:7e:
                    d0:17:91:1c:61:ca:ea:ad:3a:58:fd:ed:91:63:e7:
                    ee:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:75:C3:2E:1C:9F:E1:D6:EB:B2:8A:F1:18:3B:A5:4D:90:11:3D:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d5ffceaa-a9f2-3b92-bd48-8545ca96fbcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:9a:45:1b:63:67:cb:17:9e:ba:e2:61:db:f3:7e:56:d4:e3:
         00:31:25:9c:05:1f:f9:a0:2f:29:d6:9c:19:d5:56:b5:7c:03:
         e9:a6:20:ef:85:18:31:53:8f:f7:87:f5:61:90:fb:89:9d:05:
         0b:ea:d5:b8:e8:49:68:30:dd:e6:1c:af:b0:29:7b:2b:93:f8:
         53:5c:ec:c0:49:6e:30:6f:da:49:19:b2:f6:0f:3b:4c:cd:fe:
         c3:9d:80:ed:3c:e5:fb:9b:ce:82:1c:40:cb:5e:a4:07:58:9e:
         16:32:16:18:87:6e:ee:fa:bb:19:18:27:b6:08:ed:bb:14:99:
         e1:4a:31:64:08:ae:ad:06:23:3a:49:a6:72:f8:82:cc:e8:cf:
         f0:53:6e:68:bf:2f:29:71:62:0a:90:a9:78:65:2f:c7:e6:dd:
         b6:3e:5f:f2:87:78:ad:bd:82:9d:16:2c:fc:ae:8d:80:3b:2c:
         ac:8c:7d:e8:47:d9:71:ce:74:86:68:21:94:8d:63:a9:78:90:
         08:6d:38:65:c4:48:a8:73:87:fd:93:73:55:f0:d4:50:48:9f:
         a4:ae:48:be:04:48:36:6a:78:43:1d:17:16:24:be:6f:af:f5:
         2e:e2:14:db:0b:fa:73:e9:8a:cf:3e:29:63:63:e0:c5:3e:df:
         8a:00:33:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:09:40 2025 by rpki-client