Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/787992dd-0fb6-3a51-8dba-46fbf0ac8603.roa
File:                     787992dd-0fb6-3a51-8dba-46fbf0ac8603.roa (raw, json)
Hash identifier:          YxLqfkXZNEkfn8PqvA1X/FLvxvpUvH+GBmboiWfynPg=
Subject key identifier:   72:4E:F4:52:6D:7D:DB:02:E1:50:68:96:67:C3:DD:13:C7:92:AD:53
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F43285849C3B7AE64EFCFF21574D15840
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/787992dd-0fb6-3a51-8dba-46fbf0ac8603.roa
Signing time:             Tue 06 May 2025 15:26:33 +0000
ROA not before:           Tue 06 May 2025 15:26:33 +0000
ROA not after:            Mon 04 Aug 2025 15:26:33 +0000
asID:                     3855
IP address blocks:        207.228.160.0/24 maxlen: 24
                          207.228.161.0/24 maxlen: 24
                          207.228.162.0/24 maxlen: 24
                          207.228.163.0/24 maxlen: 24
                          207.228.164.0/24 maxlen: 24
                          207.228.165.0/24 maxlen: 24
                          207.228.166.0/24 maxlen: 24
                          207.228.167.0/24 maxlen: 24
                          207.228.168.0/24 maxlen: 24
                          207.228.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:b7:ae:64:ef:cf:f2:15:74:d1:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: May  6 15:26:33 2025 GMT
            Not After : Aug  4 15:26:33 2025 GMT
        Subject: CN=d1f6311d-cd57-47b8-829d-1c9ccd76b65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:52:db:74:38:46:d8:6e:f3:2d:32:bc:2a:de:
                    41:40:89:20:30:c5:36:20:32:67:48:08:6f:aa:65:
                    e0:60:e8:a5:f1:f5:7a:82:0c:f9:ff:55:cd:9f:c0:
                    9d:36:5d:0c:bf:ba:53:c6:52:9e:49:fb:34:1a:13:
                    e2:71:2e:57:e1:bc:89:ff:4c:dc:70:93:31:d1:26:
                    89:da:a6:2d:19:f9:a4:6c:87:a9:e5:97:30:a7:81:
                    84:b4:2b:ac:8c:b9:3d:44:54:0a:eb:ec:4b:c4:0e:
                    dd:3d:bf:2d:69:02:56:14:a6:f0:14:69:74:22:b4:
                    9b:a7:73:fa:2a:2b:e8:51:3c:ca:42:55:7d:78:a8:
                    02:c3:68:8f:b0:ef:56:e5:cc:e4:33:aa:3b:8a:e6:
                    b5:fd:64:33:90:64:df:cb:ea:36:19:03:81:89:ec:
                    0d:2c:19:21:d1:43:3b:22:a1:2a:99:9e:70:78:19:
                    37:bc:5c:b5:2d:ba:07:c6:ee:6f:8c:17:5c:5a:51:
                    ff:12:7c:f4:32:73:23:98:af:31:80:08:a0:b7:07:
                    86:15:3e:81:cc:3f:ac:ac:17:2a:23:e0:15:c6:c5:
                    68:94:30:05:32:80:05:ff:10:e6:a3:ef:34:f9:e3:
                    3f:17:b2:a1:81:5a:73:81:12:df:ac:8e:c6:a5:c4:
                    8f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4E:F4:52:6D:7D:DB:02:E1:50:68:96:67:C3:DD:13:C7:92:AD:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/787992dd-0fb6-3a51-8dba-46fbf0ac8603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.160.0-207.228.169.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ce:81:e4:8d:52:d1:cf:8b:85:09:2b:65:98:5a:96:ac:7b:
         6a:ce:8d:19:67:de:f7:e5:c6:ea:5e:7d:3e:63:a5:1f:c6:3a:
         32:ed:42:cf:d7:82:e3:a6:39:b7:53:82:7e:4e:96:4c:2b:56:
         fd:cc:95:a4:10:1b:20:fb:38:8c:b2:e3:ad:ba:6c:5f:b7:9f:
         a7:5f:c5:ed:62:43:e3:1f:ef:b0:29:d5:dc:d9:60:87:ab:ef:
         5f:26:f5:41:43:46:6b:cb:eb:95:80:16:e3:ed:79:41:ab:2b:
         cb:f6:c7:2f:94:57:d8:5c:8e:f5:33:8b:4f:c9:81:00:eb:2f:
         33:76:84:89:63:80:a4:a9:d6:cb:6f:50:f1:f9:7d:d8:92:85:
         2e:a5:2f:86:f6:59:1c:41:e2:5d:89:65:00:6a:de:bb:45:e7:
         b7:00:fb:29:d2:4f:99:90:7e:89:9e:f2:b0:6d:80:95:13:1c:
         1b:09:45:a8:9e:10:d7:d5:26:6e:9f:71:1a:08:da:b8:d6:be:
         b9:f7:70:97:a6:cf:9a:c2:3d:b6:80:85:50:4f:89:0e:3c:f8:
         d6:2c:80:ee:26:bd:a5:59:2a:57:e9:6d:05:82:95:b8:f8:e8:
         e2:1e:40:23:ce:49:13:24:67:01:97:c0:46:93:7b:62:db:26:
         9d:47:2e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:14:20 2025 by rpki-client