Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/eb654470-a4b4-350b-a513-18d87c738ca9.roa
File:                     eb654470-a4b4-350b-a513-18d87c738ca9.roa (raw, json)
Hash identifier:          7YnjIc82Kd0bFtoBznGhaVSH+jBG8VSZqhIu8okWa8Q=
Subject key identifier:   25:58:55:29:B3:74:1C:8E:8F:5A:B4:A4:5F:25:DD:3C:31:2E:10:F2
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F43285849C3B96BB1BAD1F24BA94BC880
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/eb654470-a4b4-350b-a513-18d87c738ca9.roa
Signing time:             Tue 06 May 2025 15:30:03 +0000
ROA not before:           Tue 06 May 2025 15:30:03 +0000
ROA not after:            Mon 04 Aug 2025 15:30:03 +0000
asID:                     3855
IP address blocks:        207.228.190.0/24 maxlen: 24
                          207.228.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:b9:6b:b1:ba:d1:f2:4b:a9:4b:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: May  6 15:30:03 2025 GMT
            Not After : Aug  4 15:30:03 2025 GMT
        Subject: CN=0a263a08-e28b-484d-8ff0-201df1a99fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d1:7a:25:0b:8b:04:c2:cb:70:2a:f1:2c:13:
                    46:25:2a:dd:47:85:e3:4b:53:31:fc:03:cd:66:d3:
                    a4:d7:a8:d9:be:2c:97:e4:22:f7:10:61:9f:34:8f:
                    b3:3f:ed:a8:a3:1f:c5:bd:3c:dc:6d:6c:55:0a:e5:
                    08:70:15:6b:d6:3d:fb:fa:7c:23:2a:20:d8:13:94:
                    8f:aa:32:b4:52:1e:1c:c2:3a:94:ba:0e:c6:08:fb:
                    5a:3f:b9:4b:be:b1:13:85:50:55:0b:ee:1a:00:8f:
                    2d:bf:a2:d2:b2:58:7d:79:38:0f:e4:71:63:63:3a:
                    7e:ff:b2:63:39:5b:f5:71:eb:ef:ec:de:97:b9:5c:
                    6f:26:30:50:e7:4e:96:97:c6:ad:25:3a:b6:14:93:
                    55:2d:9d:a3:47:16:ce:58:de:62:4f:9d:6a:45:c5:
                    77:1b:db:b8:9d:65:f0:4f:36:79:37:1c:e6:f0:6b:
                    28:40:7c:f0:6c:05:80:a3:10:fa:25:76:25:d4:8b:
                    08:dd:c5:f3:3f:df:ee:fc:80:36:74:43:94:a8:cd:
                    43:96:af:30:d7:dc:26:f0:da:2a:b7:e8:ef:11:a4:
                    89:15:32:dc:f0:4e:8a:2d:42:db:09:ec:67:b5:88:
                    29:c5:7e:92:7d:2b:fb:ea:72:3b:41:72:59:b9:e1:
                    d1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:58:55:29:B3:74:1C:8E:8F:5A:B4:A4:5F:25:DD:3C:31:2E:10:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/eb654470-a4b4-350b-a513-18d87c738ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f2:36:05:65:d8:0a:6d:29:6a:e2:b8:5c:0c:51:cb:94:f0:
         ff:98:b2:74:81:cf:39:46:62:43:1d:64:56:2f:a4:80:e4:b6:
         6c:3d:e6:28:ed:f2:61:5b:e7:69:aa:f5:ed:d1:7b:6d:51:59:
         90:7e:05:4f:cf:b7:1f:ac:88:6c:7f:08:ce:47:2a:56:37:41:
         f5:43:69:31:d2:b8:57:ef:dc:a0:32:9b:7d:c1:50:11:95:78:
         d9:d2:b0:b2:86:a8:a8:e5:fe:0d:ee:86:45:4b:ac:1d:1f:08:
         22:5e:d8:fb:85:1e:60:7f:29:d7:f7:86:8e:9a:4f:e4:f3:25:
         eb:a0:38:4f:04:7f:97:be:3f:42:eb:7a:2b:7a:9e:b1:91:bd:
         04:14:44:38:41:b1:e5:03:af:b5:f5:b0:7a:d6:79:8d:8c:63:
         47:91:a2:56:d4:e1:a5:39:92:c3:d4:da:11:6d:0c:da:8d:3b:
         07:8a:ae:94:5b:8e:2c:4f:11:a1:39:58:5a:be:83:63:e9:51:
         8b:9f:71:2a:a4:26:43:13:d7:71:88:9a:9f:20:e3:c5:96:42:
         b6:35:68:38:f7:7c:ba:7a:30:85:82:a4:0c:f2:a8:f9:7c:59:
         b9:a4:16:5a:47:f9:06:ef:a7:4c:b2:a5:d2:77:de:0d:d3:79:
         56:38:a8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:31:59 2025 by rpki-client