Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/528af9b3-2bf6-317c-94a5-c8fe507fd519.roa
File:                     528af9b3-2bf6-317c-94a5-c8fe507fd519.roa (raw, json)
Hash identifier:          BjBFcY/AYD0JP/hBmFBBsrWlkYDx87xn3btR8xCWPcQ=
Subject key identifier:   DB:78:C6:81:40:4C:30:6E:81:C2:5F:11:58:D2:17:D1:D9:BF:CC:5B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858499829C76342C1F0C96F1DACE0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/528af9b3-2bf6-317c-94a5-c8fe507fd519.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        207.102.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:c7:63:42:c1:f0:c9:6f:1d:ac:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=91015938-7601-43e8-9237-22c1707905d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bf:a7:76:33:b9:3f:8c:e2:c1:dc:a2:14:68:
                    ec:af:c6:28:3b:48:68:a4:6e:ff:55:f5:73:fa:33:
                    67:45:f3:73:7b:a4:02:eb:61:ec:c6:40:a2:b6:88:
                    77:fd:93:d2:3e:79:a1:9b:bb:47:d9:15:cc:4f:8c:
                    45:ba:d4:f1:67:6d:84:9b:e9:f8:47:89:24:da:c9:
                    78:dd:6c:ea:21:3b:7d:8e:e8:5d:04:49:98:cd:9b:
                    2d:9f:c8:05:51:63:e5:2c:42:66:2d:f6:65:b1:90:
                    4e:e3:19:ab:ba:88:be:26:1b:30:0b:d0:0f:1f:1a:
                    c6:37:48:ea:6f:04:b6:fe:58:96:26:0d:76:1f:ba:
                    dc:c8:68:7c:79:17:48:a1:f5:d4:61:f7:a6:e4:4e:
                    47:a0:51:96:af:75:07:1f:c9:09:02:58:cf:26:dc:
                    00:f6:6a:4b:3e:91:c2:1b:b2:9d:43:ce:aa:f1:3f:
                    f4:2d:48:fa:a6:2e:88:19:0b:4c:d8:dd:c3:0b:3b:
                    4c:b4:99:7c:08:d5:3f:b3:58:85:05:bc:27:b6:a6:
                    07:3e:7f:a3:8b:db:33:92:66:32:c1:ad:a9:1e:2f:
                    24:f0:cc:15:61:b8:81:d0:d3:7d:5c:23:c7:9b:81:
                    78:80:4a:86:8c:7c:a3:90:d2:03:84:d9:24:0d:21:
                    38:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:78:C6:81:40:4C:30:6E:81:C2:5F:11:58:D2:17:D1:D9:BF:CC:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/528af9b3-2bf6-317c-94a5-c8fe507fd519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.102.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d4:58:5d:49:3b:32:9f:4a:70:b3:99:47:da:2a:d1:4f:06:
         6f:88:9c:45:9d:8b:14:88:5c:8b:0e:fa:c4:c2:40:82:f5:14:
         82:ca:c5:4f:90:83:4c:25:ce:99:29:06:47:17:b6:df:cf:97:
         ca:bd:3d:73:2c:48:cc:6b:30:ee:c9:1e:fa:89:21:c1:61:8d:
         4b:a5:2e:25:75:8c:65:c7:61:1a:8a:8c:98:16:41:68:27:85:
         e6:c7:f0:e4:6a:bf:89:94:e0:59:87:dc:4a:fc:89:15:b0:da:
         da:f1:d1:d4:8e:7a:0c:f9:12:b8:79:f1:d8:4a:d1:a3:a3:34:
         62:9e:fe:fb:e4:a6:30:84:8d:58:ec:ba:f2:ac:65:8e:b5:c1:
         de:c1:7f:ae:92:8a:8b:4d:f0:78:9f:90:2d:9c:cf:61:5f:4c:
         fc:ba:df:cc:55:f5:01:8c:29:f6:3a:fb:b5:a1:a6:c2:f5:e8:
         51:f0:31:c6:05:3d:6d:a7:df:a9:49:f2:5a:7e:8a:52:0c:a8:
         a7:46:d6:68:ea:82:69:5b:08:17:01:78:74:f7:f7:6a:e4:71:
         52:76:d0:c0:40:cf:03:7b:02:fa:49:fc:4b:26:c0:7e:a5:46:
         ec:48:26:a3:8e:ff:63:41:a4:c2:f2:09:e6:2a:bd:38:27:50:
         75:27:ab:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:16:58 2025 by rpki-client