Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/edf14e5a-01dd-31d0-b673-289917a6f791.roa
File:                     edf14e5a-01dd-31d0-b673-289917a6f791.roa (raw, json)
Hash identifier:          Xk8exBXwnwrMde50G9OZMPZODqT/1Q76rs0EoZcNoFk=
Subject key identifier:   82:5A:4C:23:15:A7:58:18:B2:64:97:F2:55:50:D9:AB:87:44:85:BF
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A03A5539C4C342CC64CEA4DA0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/edf14e5a-01dd-31d0-b673-289917a6f791.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     7018
IP address blocks:        152.44.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:53:9c:4c:34:2c:c6:4c:ea:4d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=37304de6-bfdb-49fe-b1c6-8eb02c6ca88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:74:67:19:b8:69:5d:46:87:27:8c:d9:9d:ee:
                    bf:d2:97:ba:33:fa:b9:a0:1c:83:cf:b9:5e:61:6c:
                    43:2b:60:15:70:3b:75:48:27:06:b5:ab:32:5c:66:
                    75:29:e4:04:c8:af:cc:ab:92:65:91:5d:e2:ff:d4:
                    a3:d4:62:27:d5:92:2e:eb:c6:a5:76:62:79:33:7c:
                    f8:23:ca:7b:87:22:53:64:c6:cb:bb:83:99:bc:8f:
                    24:c0:c6:07:67:55:fe:29:07:3a:ac:c0:b6:2f:85:
                    6a:ad:01:a8:5c:3b:e1:cf:45:1b:bd:f4:ea:20:ec:
                    50:c7:71:e4:b8:b0:39:66:9a:af:f5:5a:2e:ac:23:
                    12:18:5f:ee:b2:0b:83:b5:49:08:aa:9a:d3:4f:98:
                    93:00:3c:88:25:d3:1b:c2:d0:6d:92:d9:f3:72:6a:
                    bc:b3:79:05:07:d6:48:9f:fb:7e:36:08:d3:31:f7:
                    cc:54:d6:95:a4:a3:7b:d3:8b:68:1f:c2:d7:42:c5:
                    cd:0e:ab:38:fb:10:7e:f8:4c:0d:a9:55:44:b9:db:
                    c4:ec:6e:ad:2c:47:67:cd:b5:6d:6b:a3:16:6d:78:
                    6a:06:31:b0:b6:7d:c9:7e:a3:aa:ed:2b:e9:af:7d:
                    a2:ba:3e:58:02:47:74:ba:14:37:98:65:47:0a:ca:
                    bc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5A:4C:23:15:A7:58:18:B2:64:97:F2:55:50:D9:AB:87:44:85:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/edf14e5a-01dd-31d0-b673-289917a6f791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:e1:38:53:63:08:d7:c5:fd:f2:78:11:88:a3:42:b7:79:b2:
         9e:74:b5:34:f4:93:14:04:2c:dc:42:fc:42:13:32:db:47:61:
         03:d2:84:ff:42:56:12:76:53:d2:a3:ae:06:5e:58:0f:67:0a:
         92:77:fc:4d:22:aa:c1:71:46:5c:46:97:5b:5c:d3:3d:9f:6e:
         89:db:32:da:9a:db:1b:85:11:5a:22:1f:34:12:25:c2:04:ca:
         98:2e:45:a8:e1:9c:cf:0b:66:14:e1:38:e2:8e:d9:29:8e:26:
         7b:34:45:25:88:ec:05:74:3b:71:b4:da:9f:c9:be:0f:ca:bd:
         10:eb:61:42:01:96:85:4a:de:5b:b3:e4:4b:c3:2b:61:ed:2e:
         d7:8a:39:ad:df:53:7f:c9:b1:7d:85:a3:6e:d5:db:73:cf:69:
         af:3c:1a:a4:c2:f2:37:92:0b:d5:fc:ea:06:4b:03:74:81:71:
         6d:72:00:9e:28:32:59:e5:ce:d5:86:6b:6c:3a:49:da:a0:c0:
         c8:0a:5d:a0:86:43:23:32:be:db:40:69:23:87:9a:3e:46:a8:
         b3:f3:ea:67:e4:eb:10:f4:69:8e:fb:ea:ff:ba:da:38:3a:7d:
         57:25:4d:e7:14:3e:a4:00:77:39:d8:ad:ca:45:46:69:82:23:
         7d:02:2e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:12:53 2025 by rpki-client