Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fa4fd6c0-de61-3cb2-849c-dc438dda3144.roa
File:                     fa4fd6c0-de61-3cb2-849c-dc438dda3144.roa (raw, json)
Hash identifier:          miaXwWULIzbusM1XZJictSt5LdyKVZyeUErntEow2sY=
Subject key identifier:   EF:94:D4:09:DE:D7:87:F2:A7:83:13:3D:A6:FB:02:FA:42:4E:FD:99
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849ABB4A48CE60807B7C68FB600
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fa4fd6c0-de61-3cb2-849c-dc438dda3144.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     64267
IP address blocks:        173.214.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:a4:8c:e6:08:07:b7:c6:8f:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=05e26de8-cf89-4565-9fa5-4f9ba429ee23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b8:2e:0f:b6:cf:08:41:8c:f2:4a:c2:ae:04:
                    0a:fc:3e:fc:d4:ee:86:d1:ed:10:12:84:5d:06:41:
                    8a:e5:59:b0:d3:6e:f0:fa:d4:9a:32:6d:57:f8:90:
                    2d:db:99:3b:dc:ca:48:57:e4:4d:d3:68:fa:64:40:
                    d7:df:bb:24:f9:0b:98:ab:f7:b5:0d:55:0e:38:57:
                    a4:56:6f:e6:74:ad:35:2f:f0:c0:62:82:75:23:ef:
                    51:62:17:3d:2b:0d:eb:e8:b6:47:f1:bb:66:b4:cc:
                    a6:d4:eb:c0:d6:57:f3:1b:f4:8d:d3:6d:4a:cd:b0:
                    7d:52:cd:eb:48:ee:9a:d9:e4:11:60:3b:b3:d8:7b:
                    c8:47:de:b0:e7:82:ec:bc:9b:84:5d:68:3c:06:70:
                    64:dc:75:f6:32:f7:5d:7f:fe:71:02:eb:8c:79:25:
                    c5:a6:43:25:ba:81:6b:3b:bc:35:6d:ff:a8:70:cd:
                    51:7a:97:f1:08:78:98:1c:e2:c0:ee:9b:0a:51:5f:
                    c0:c4:68:5b:71:48:38:93:fb:37:d2:b0:c6:e4:35:
                    db:cd:a5:a3:41:53:48:af:8d:94:68:64:dd:22:a5:
                    3a:23:4c:42:da:a8:7f:d4:b6:98:cc:92:88:6b:30:
                    e2:99:f0:75:e4:bb:fd:01:6a:41:9e:4a:d6:05:70:
                    34:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:94:D4:09:DE:D7:87:F2:A7:83:13:3D:A6:FB:02:FA:42:4E:FD:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fa4fd6c0-de61-3cb2-849c-dc438dda3144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a5:38:bd:fb:b7:ef:8b:b0:c7:b4:f6:e1:ac:21:51:aa:58:
         02:59:61:a2:94:bc:fc:af:b6:3f:3c:a5:0b:b0:f2:9d:31:ad:
         ea:34:d9:7e:79:78:7c:74:79:c1:6e:ff:6f:3a:e8:bc:f7:7f:
         2f:59:81:08:8b:67:04:d4:0e:81:58:6c:b2:bd:64:4b:51:63:
         2f:fb:77:d2:24:4e:32:7e:af:92:04:74:cc:ca:9e:29:0e:a2:
         7f:b0:8f:d6:f3:64:da:86:5c:57:a5:35:64:8b:ff:a7:4a:43:
         3c:d6:aa:6e:ab:37:9f:3d:fb:0c:dc:16:8e:7a:fc:d7:b2:65:
         10:44:6f:81:98:71:4a:63:ce:0c:3a:28:2d:60:a7:00:6a:07:
         e3:35:6f:55:bf:66:79:c6:4a:ac:86:eb:8c:f0:c3:ad:fa:89:
         0f:2a:13:aa:33:2f:c9:92:0f:f7:b9:fb:45:45:94:89:64:a9:
         2d:7c:74:db:3f:7f:c6:4b:48:bd:47:2a:c7:94:cb:eb:6c:70:
         ac:99:07:c6:db:3d:53:0c:4b:0d:3a:95:bb:99:80:1d:93:4d:
         96:52:e7:49:24:17:e5:56:04:af:39:78:13:34:e2:8b:88:ce:
         58:08:8d:4e:e3:76:e7:36:cf:8f:19:0f:6a:cc:85:ff:6e:33:
         70:b8:6e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:20:44 2025 by rpki-client