Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/455eae8c-8baf-3895-9866-b1fd409ce2bf.roa
File:                     455eae8c-8baf-3895-9866-b1fd409ce2bf.roa (raw, json)
Hash identifier:          Hp/1wMbVOtf7stqQWr6GERmJSe/am3oqcMZezACw6OM=
Subject key identifier:   91:6E:49:A9:B2:1E:44:01:4A:68:7D:2E:AD:A7:69:0B:4E:DB:C6:B3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C244F624CD2F26908B6C7EC
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/455eae8c-8baf-3895-9866-b1fd409ce2bf.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        151.204.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:4f:62:4c:d2:f2:69:08:b6:c7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=1b546ef1-449b-4a8b-af25-30df992a1dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:43:a8:30:30:f2:ca:9b:78:a7:9a:df:aa:40:
                    db:bb:ab:ae:34:aa:66:e2:c1:08:63:8d:4e:8d:23:
                    4c:ed:65:11:4b:17:21:68:ea:b3:8c:c2:5b:d7:38:
                    44:8c:dc:35:37:aa:c6:aa:f1:bb:8f:e6:b1:76:79:
                    0d:bd:55:d9:2d:84:06:d6:fb:39:7b:a5:59:d8:b4:
                    47:4b:c3:2f:80:e3:34:78:c5:42:d5:56:f7:a2:40:
                    31:d6:84:1a:b8:00:30:0a:e4:86:e6:62:1e:7c:08:
                    9c:12:20:c2:f0:e9:18:4c:00:22:2a:f4:d8:9b:6d:
                    1f:da:43:76:4c:b8:23:54:44:85:e2:80:5a:7c:60:
                    da:47:25:41:d3:68:ca:1c:80:77:b6:ce:c1:da:b5:
                    2a:fd:7a:d9:53:9f:57:ea:32:c9:18:fe:d4:b3:53:
                    17:a3:d8:19:e4:0a:b0:9f:f4:ba:53:1b:1f:6b:d0:
                    ea:bd:d8:cd:68:34:75:16:11:f3:b1:29:f1:86:96:
                    f3:54:59:e7:6e:fc:c7:04:ee:58:08:01:df:78:4a:
                    17:a3:94:b8:28:a9:31:3d:91:09:2b:f1:e6:07:b8:
                    65:66:d3:81:48:c9:5c:44:da:af:29:29:bf:2e:7f:
                    85:ce:f8:8e:0a:34:e1:45:0a:c1:d5:42:ca:69:7a:
                    83:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6E:49:A9:B2:1E:44:01:4A:68:7D:2E:AD:A7:69:0B:4E:DB:C6:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/455eae8c-8baf-3895-9866-b1fd409ce2bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.204.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:95:19:90:44:f4:26:a1:d6:ff:eb:b4:5f:a0:fc:4c:b7:2c:
         c4:8a:a4:b4:b6:85:e0:17:8f:1b:8a:d6:0d:8a:fc:ba:86:07:
         74:82:b3:a5:57:e4:12:5a:27:08:ae:83:50:d5:58:0b:78:3a:
         e6:c5:5c:75:24:a0:4a:c8:f1:4e:d9:e0:52:d2:85:18:47:78:
         51:17:ab:3d:8a:05:07:19:a8:2e:dd:4c:d5:4c:58:8a:3d:67:
         16:f8:17:b6:88:db:f6:37:8e:ad:5d:43:e2:1b:80:99:da:de:
         e5:8d:9b:50:1f:1b:2e:9f:28:e7:51:e9:d4:e0:67:28:28:f9:
         45:aa:11:2b:2f:4b:39:d6:42:25:43:85:2f:92:a8:87:0e:95:
         b5:14:0e:f7:62:29:97:0c:3e:42:6b:bf:88:d9:60:b1:37:0f:
         6d:5e:95:b2:be:83:27:c2:fe:a4:39:40:f8:6b:e6:2e:81:bf:
         9f:5c:f2:bd:12:81:15:c8:c3:24:a5:c9:8f:82:4e:53:be:a4:
         23:86:e4:20:e4:a8:81:8f:b4:9c:a9:46:96:d7:f6:dc:ff:2e:
         46:04:6a:34:7e:9b:d9:fe:4e:9e:25:2e:55:0f:5c:aa:83:37:
         41:20:f7:0e:d8:a4:89:1b:06:3d:18:80:ac:33:f7:cf:93:6e:
         c7:15:71:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:23:08 2025 by rpki-client