Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c4a6b7c2-8475-3612-9c69-66526f25323b.roa
File:                     c4a6b7c2-8475-3612-9c69-66526f25323b.roa (raw, json)
Hash identifier:          8E5Rl/M4kYvvMglzQs8IyrO8PJOziHbtNtb73c45IYk=
Subject key identifier:   30:22:D2:EF:53:D6:78:8D:AA:DE:F1:8D:2D:97:E9:06:7B:0E:35:43
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F432858499829CE34DA257855B727DC00
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c4a6b7c2-8475-3612-9c69-66526f25323b.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     11273
IP address blocks:        204.124.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:ce:34:da:25:78:55:b7:27:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=a2d7f14c-d920-4049-83a8-dd0b369fb7ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dc:b2:ba:dc:99:0b:ab:0d:8e:9c:2f:95:7a:
                    0e:72:6b:3b:bc:f7:ad:79:03:87:48:80:03:ae:37:
                    f2:eb:d5:58:7c:26:d6:ca:00:54:d6:d6:f8:5f:37:
                    22:09:c8:87:12:60:08:1c:17:97:34:e0:2a:e6:11:
                    c1:f3:c4:52:88:32:87:33:c6:59:6d:08:f2:fc:5f:
                    42:78:f0:b1:4c:24:79:ae:53:91:2f:da:bb:13:f9:
                    f7:b4:96:02:7f:3a:7e:9b:65:a1:c6:fb:78:ab:a9:
                    c7:38:54:2d:c7:5c:7b:c1:8b:b2:77:04:de:f5:7c:
                    52:96:7e:c2:aa:3b:0b:ca:01:77:4c:bd:f7:7b:e2:
                    59:a2:0e:a9:eb:24:37:70:a9:cf:42:ee:77:e9:f2:
                    2c:00:65:75:c3:a3:b2:34:84:05:29:b0:55:21:51:
                    53:4c:fa:1e:49:4f:f7:3f:7e:1b:f9:ce:d1:af:05:
                    0d:8e:0c:23:d7:e4:8a:da:06:ec:73:1d:e7:ad:2b:
                    fb:2a:6f:cf:f1:7b:d9:47:02:9c:5e:2d:74:09:69:
                    45:c3:49:8a:b9:f5:56:b9:e7:2e:bc:6a:a5:52:ff:
                    a8:25:9c:af:82:fd:52:bd:b5:a5:49:46:82:53:6e:
                    ff:be:2e:f8:2b:c7:70:ad:bd:a3:4f:20:12:93:60:
                    18:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:22:D2:EF:53:D6:78:8D:AA:DE:F1:8D:2D:97:E9:06:7B:0E:35:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c4a6b7c2-8475-3612-9c69-66526f25323b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.124.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d7:6f:db:89:cd:a1:78:28:e9:d8:e6:2f:02:60:09:87:65:
         14:f1:cc:01:29:31:90:46:d6:5d:77:84:71:2b:a3:f0:73:d7:
         f7:dd:46:de:c0:49:d2:a1:ed:e3:c6:bb:88:98:09:d4:9b:7c:
         66:38:64:13:f0:c2:a9:ff:fe:ce:08:87:d1:cf:6e:c6:d2:03:
         ba:1d:c3:92:b5:41:92:ff:00:5b:7a:df:aa:4d:54:d1:91:2e:
         48:c0:79:96:88:b3:57:99:c3:06:81:20:49:01:6b:89:c2:df:
         63:ec:45:23:f4:36:3f:45:7e:2e:5e:09:9d:cc:bb:8e:8c:89:
         16:51:44:ec:63:2d:f9:be:90:28:e9:6a:a0:0c:ff:2c:aa:ab:
         59:4f:07:87:d0:69:54:55:d2:52:98:82:a7:67:15:5b:92:7e:
         aa:2c:cb:8b:4f:fc:6e:e6:01:ce:b2:f9:c1:0c:ac:ab:57:eb:
         62:1f:68:1f:7c:6a:f9:7f:65:f8:0c:0e:da:55:d6:19:34:6c:
         b4:f2:3b:7b:7e:7a:bf:8d:36:79:6a:73:9f:70:a6:f4:35:9f:
         59:9a:1a:1f:63:37:e4:1f:26:59:fd:f1:36:68:ac:b1:18:6b:
         fa:d6:a5:fa:ec:e6:52:9f:b2:8c:4c:1d:0a:96:2c:98:87:31:
         18:02:ef:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:21:29 2025 by rpki-client