Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8f84fc28-6c73-3455-b271-5ba66161728a.roa
File:                     8f84fc28-6c73-3455-b271-5ba66161728a.roa (raw, json)
Hash identifier:          Aj240N46kY7rCcHwIx0Xml8FuAJvfSoO2sgfbum4NNY=
Subject key identifier:   D1:A1:73:A2:3D:F9:09:D4:69:4E:D5:7F:18:65:BB:19:84:80:78:B9
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849BF3F6382758C86B0760ED964
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8f84fc28-6c73-3455-b271-5ba66161728a.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     19893
IP address blocks:        128.242.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:63:82:75:8c:86:b0:76:0e:d9:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=b3a071a8-16d8-439c-a9df-50b391aca252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:8a:c6:3c:61:95:c9:5c:4c:f2:13:3f:da:
                    8e:00:19:83:0c:6d:d9:c9:52:23:1a:c7:e0:c5:76:
                    ff:a7:00:e7:a9:0b:bb:bc:49:f4:a1:b6:1f:d0:cd:
                    7e:60:01:c8:47:4b:2f:a8:6a:a3:d2:35:1f:7e:64:
                    d5:85:83:96:35:37:18:eb:05:36:56:6c:19:5f:95:
                    0a:3d:bc:4e:8e:74:75:3b:b8:c2:ad:c9:11:37:1c:
                    c4:6f:c4:43:2e:d9:61:f0:0b:0e:15:0c:b7:ce:58:
                    de:42:bf:d3:87:d7:85:c0:01:32:83:cb:d3:f6:52:
                    2d:7e:d9:5f:64:19:62:0f:df:d5:a9:57:db:6a:b2:
                    b2:c2:3d:7d:db:04:a5:22:61:3b:ed:82:0b:f2:56:
                    d7:71:d8:cc:f8:b7:6e:5a:23:a4:ae:63:71:e3:c7:
                    3d:cf:78:6c:95:0a:d6:3a:97:38:fa:06:8a:92:6a:
                    2d:38:f0:04:cb:2e:88:67:ce:d8:c5:47:03:5a:33:
                    64:10:81:ad:a3:05:1d:63:6d:82:84:1e:91:ab:50:
                    36:0a:c5:e8:47:9d:26:6a:a9:2b:83:f4:6a:61:14:
                    4a:3d:e9:a2:92:85:b7:c8:40:bb:b0:30:ef:f8:b5:
                    56:67:79:e2:88:2e:10:4a:d2:a3:98:16:8f:15:40:
                    e0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A1:73:A2:3D:F9:09:D4:69:4E:D5:7F:18:65:BB:19:84:80:78:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8f84fc28-6c73-3455-b271-5ba66161728a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.242.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:eb:4c:fa:63:70:2d:de:2e:af:2a:eb:d9:ca:95:51:ab:35:
         45:1b:b4:8d:e5:02:d9:09:e3:ca:a2:d4:92:fc:f2:90:91:b0:
         e4:71:6a:46:00:46:2c:b5:0e:72:e2:43:5e:54:2c:82:50:66:
         44:26:31:16:96:eb:0a:9f:49:82:fe:e1:ed:db:f6:dd:e1:af:
         3a:5e:0c:ae:4a:6d:8a:e3:6d:58:b9:6a:10:80:75:0d:a6:bb:
         ab:09:5b:e7:88:79:5c:3d:81:79:42:f9:3b:bd:98:31:03:37:
         22:92:5f:6a:ae:c1:0b:b3:7b:dc:0b:a7:33:94:7c:e7:eb:b5:
         7f:10:6f:6b:f6:70:04:09:97:ba:fc:d1:18:dc:2a:a7:c4:08:
         e5:56:f7:35:a8:65:be:18:e5:f5:da:a0:ca:cc:58:0f:1c:44:
         71:f3:92:5a:b2:e3:07:d0:f6:0b:86:38:9e:31:e7:41:0c:f6:
         5e:bb:74:64:f0:38:bf:25:e1:14:13:dd:6d:98:98:73:d7:ab:
         86:1f:25:3f:44:3c:1c:d2:1d:63:da:bf:79:8d:ac:85:bf:c4:
         22:24:0c:c3:87:f1:8c:9a:3b:0f:59:a0:57:eb:9d:e1:67:86:
         f8:d6:12:4d:7b:7f:8a:08:4f:f9:d8:ce:0f:3d:04:37:f0:4e:
         2c:7d:24:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:48:08 2025 by rpki-client