Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/470521cd-f789-3745-afc4-d1d3cc6e3d1d.roa
File:                     470521cd-f789-3745-afc4-d1d3cc6e3d1d.roa (raw, json)
Hash identifier:          aUs88iDsMNiJ/qOgWdqBeF2IiUPTuLxQqwtJ7HJCQG4=
Subject key identifier:   BC:27:F2:7A:A8:EF:44:8A:21:A6:CD:4F:83:2B:13:1D:2E:09:9F:D7
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F43285849AA4F68B01B94EBFE65A02500
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/470521cd-f789-3745-afc4-d1d3cc6e3d1d.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     30037
IP address blocks:        204.194.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:68:b0:1b:94:eb:fe:65:a0:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=12f3c432-1eed-403a-9a83-1eba837fbf01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:24:66:b0:ba:77:2b:ce:c4:57:ff:af:70:55:
                    6d:ed:3e:31:d5:70:66:a7:4c:cc:5d:91:16:93:e6:
                    a7:54:27:be:83:8d:5c:c9:e7:08:d9:01:df:8b:06:
                    94:e8:15:52:1c:e4:6e:03:6e:94:5a:d7:8a:54:02:
                    c5:69:2f:59:d0:61:ba:34:cd:39:a2:9b:57:ac:69:
                    b6:0a:19:61:7a:51:ce:8e:c3:e6:77:f1:1a:72:1f:
                    46:aa:c6:65:57:58:c7:0a:84:0b:31:46:d7:68:51:
                    7e:24:2f:3b:fb:d6:c1:37:14:37:08:60:c6:e6:5d:
                    2e:4b:60:ea:a0:a6:ee:f9:7b:e3:66:a1:7d:ee:05:
                    67:ff:95:db:6b:49:87:92:65:ff:7e:04:e1:d7:df:
                    25:97:02:ea:31:ba:be:77:d8:a3:9a:75:ad:03:9e:
                    a1:ac:eb:26:d9:25:4d:93:63:b9:05:7c:85:45:55:
                    58:71:63:cf:36:09:ca:58:f4:4f:d8:f4:81:34:ce:
                    9b:43:ee:7b:51:d0:b2:a3:ec:a4:06:1b:f7:f6:54:
                    69:98:3b:68:de:91:19:48:82:69:42:59:84:12:0e:
                    81:29:1e:4c:01:1e:d2:55:7a:1c:74:86:15:24:8a:
                    49:d7:61:20:25:de:b8:89:20:d4:ae:16:92:b0:2a:
                    a7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:27:F2:7A:A8:EF:44:8A:21:A6:CD:4F:83:2B:13:1D:2E:09:9F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/470521cd-f789-3745-afc4-d1d3cc6e3d1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:98:8d:8e:5d:eb:02:18:62:f4:e8:1a:f4:2f:0f:a0:63:b6:
         8d:fb:22:e4:19:e6:05:f7:8c:c1:f5:9b:99:fe:7f:8c:e7:25:
         c5:f8:1b:14:20:9b:66:c5:bb:11:c2:2b:f4:3b:b5:26:d4:19:
         d5:09:ea:16:2f:44:17:72:e5:84:42:77:84:76:8c:ca:b6:0b:
         a0:18:08:86:74:a9:a7:72:00:fa:d8:fc:2e:fa:4c:ac:3c:07:
         49:e7:3e:6b:76:31:ed:07:b8:f3:d0:06:f8:34:d6:4e:2c:b2:
         48:b7:7e:86:d7:96:13:ed:db:75:6c:27:5c:0d:0d:9f:de:48:
         9d:03:8c:57:e1:9f:96:1e:04:e9:b6:fc:a1:f0:92:4d:d6:0d:
         4e:18:86:ca:69:4f:af:ed:7e:f4:92:e9:97:a0:db:e3:66:b9:
         81:1e:a3:3c:d7:7b:cc:4a:62:bb:d5:d7:22:38:02:02:25:72:
         d2:1a:3c:af:46:c9:00:81:4f:2b:e8:59:a1:c3:3f:7e:f2:51:
         39:33:f5:85:4c:e3:4d:0b:a7:39:3c:4a:94:7a:18:9e:70:2b:
         ef:e0:39:b3:74:b3:fe:75:76:f5:08:e3:8f:e0:67:54:94:b1:
         d6:38:81:99:b2:cd:47:38:bb:92:32:b3:e1:4e:ae:9a:a2:5b:
         5a:7d:ee:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:21:31 2025 by rpki-client