Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/b88280d0-752f-36bc-aafc-c7e4bcba34ef.roa
File:                     b88280d0-752f-36bc-aafc-c7e4bcba34ef.roa (raw, json)
Hash identifier:          3RbRT7D4NSczEZjj6TA0yWS5hWPsRuyH4AuaPDR0rTM=
Subject key identifier:   47:1F:5F:89:52:72:37:D2:4B:7F:B2:1C:7C:2B:24:D6:F4:C7:16:CF
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F43285849C6C9F9D9F31EE46FD4517500
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/b88280d0-752f-36bc-aafc-c7e4bcba34ef.roa
Signing time:             Wed 07 May 2025 17:50:50 +0000
ROA not before:           Wed 07 May 2025 17:50:50 +0000
ROA not after:            Tue 05 Aug 2025 17:50:50 +0000
asID:                     36549
IP address blocks:        207.228.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c6:c9:f9:d9:f3:1e:e4:6f:d4:51:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: May  7 17:50:50 2025 GMT
            Not After : Aug  5 17:50:50 2025 GMT
        Subject: CN=68d73e1b-1b38-4c37-b21d-c337875fe555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:b6:bd:0c:eb:91:51:22:e4:f4:d3:66:84:
                    94:ab:2a:5b:a0:bc:ac:a2:40:36:38:42:8f:71:11:
                    ec:10:20:13:cc:69:49:95:e7:09:6a:67:c9:9a:8b:
                    64:f0:89:cb:28:4e:67:66:92:b4:88:84:b3:37:4b:
                    0d:35:77:4c:98:70:2b:13:2d:14:a8:08:30:a3:8a:
                    21:bb:0c:a3:68:ca:6e:ad:0a:32:e5:46:aa:a0:c3:
                    54:e8:1f:ba:22:e9:aa:53:29:44:ff:87:13:4f:29:
                    ee:9c:5d:5b:4d:13:d0:95:1e:ba:bc:d7:97:a3:bf:
                    33:28:f1:74:2b:8f:32:93:de:73:a7:50:4a:c2:e4:
                    e1:48:60:2d:02:cc:94:6c:e4:60:30:55:64:46:ca:
                    b5:14:8c:9c:eb:f6:a7:26:77:b7:2a:30:ed:aa:42:
                    05:96:62:cb:7e:1e:6b:30:4a:e7:26:52:6b:bb:0a:
                    07:d4:9b:8f:92:ba:72:cf:6e:64:a5:7d:51:8f:d3:
                    0a:80:03:df:9a:5e:b4:33:10:48:e1:74:dd:f5:2c:
                    10:be:11:68:ce:b4:bd:d0:09:0d:0f:e4:cf:b8:65:
                    fa:de:6f:06:7a:2d:db:3e:bb:bb:ea:74:97:93:33:
                    3d:2f:d3:06:6f:59:88:2c:b8:61:8f:9e:31:aa:eb:
                    f3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1F:5F:89:52:72:37:D2:4B:7F:B2:1C:7C:2B:24:D6:F4:C7:16:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/b88280d0-752f-36bc-aafc-c7e4bcba34ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:90:68:b9:ac:3c:a8:4e:82:8b:1b:b3:01:6c:c5:b0:31:ff:
         d7:68:8b:51:b6:7b:fb:57:6b:41:42:6b:cc:62:30:90:5f:39:
         c3:cf:05:cd:e4:93:57:70:4b:84:44:ce:40:d0:2a:ee:6d:a9:
         84:8c:70:a9:94:d3:e9:12:57:c5:15:e1:28:ed:d0:64:a0:4c:
         ad:0c:4c:4c:41:7d:ea:3b:46:cd:7d:97:fc:77:9e:d7:4c:03:
         0b:49:4b:e0:42:33:c5:63:cc:f2:cd:c6:dc:20:34:f4:e7:cb:
         01:72:76:90:f9:49:93:63:41:73:e9:c8:ee:42:96:04:69:e4:
         d3:d3:cd:d1:08:d8:e8:04:ac:65:b1:28:eb:c4:b6:cb:61:20:
         76:43:c5:7d:00:9d:25:18:05:61:4a:db:e7:60:33:75:dd:fa:
         1f:53:27:42:14:88:be:a2:f8:f0:c0:02:4e:66:7d:24:57:a3:
         6e:73:b6:8f:9f:7b:72:1d:df:56:54:b2:be:6c:0c:3b:5a:68:
         cc:9c:a7:36:fc:8c:d8:58:6c:5d:87:c2:c2:e1:5c:1d:42:fc:
         9e:5d:e8:97:c9:45:4d:5a:18:6a:b6:04:af:50:22:1b:7f:fc:
         6a:ca:23:6d:9b:ec:a1:0c:76:f8:8c:4f:e5:56:89:b9:00:6e:
         d0:88:9d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:32:00 2025 by rpki-client