Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/0226945e-ab08-3a2d-bc34-182a689a8e74.roa
File:                     0226945e-ab08-3a2d-bc34-182a689a8e74.roa (raw, json)
Hash identifier:          mFfS0LPyj3vUg3/fUnv1NFk1RiszASMpFN39A59VMxE=
Subject key identifier:   87:77:BF:34:F7:41:40:2A:4B:4A:5C:C2:68:0F:2F:A5:4F:EF:24:E2
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F43285849C67B1393EAD83B9D0C25F580
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/0226945e-ab08-3a2d-bc34-182a689a8e74.roa
Signing time:             Wed 07 May 2025 15:11:52 +0000
ROA not before:           Wed 07 May 2025 15:11:52 +0000
ROA not after:            Tue 05 Aug 2025 15:11:52 +0000
asID:                     198949
IP address blocks:        128.103.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c6:7b:13:93:ea:d8:3b:9d:0c:25:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: May  7 15:11:52 2025 GMT
            Not After : Aug  5 15:11:52 2025 GMT
        Subject: CN=1803670b-2a24-4b41-8c66-4ed170dd07c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:47:14:7b:aa:77:ea:05:3b:23:5c:9b:63:d5:
                    44:f7:7b:00:41:62:32:5d:e4:7f:6e:5d:c9:5f:d4:
                    82:9f:5f:48:d9:97:4c:05:cd:af:8c:ed:4e:00:2d:
                    93:f7:a7:76:6f:60:b2:49:af:56:56:04:b4:40:e2:
                    eb:0c:95:0d:d3:b1:ce:39:e9:63:f1:c9:a1:fe:4b:
                    97:3e:cd:33:98:45:5c:dc:01:e5:45:7e:43:f8:e9:
                    0d:ce:94:95:c4:6e:3d:aa:1c:fb:11:b7:5e:2b:9a:
                    3a:06:d7:6e:20:cc:5a:07:9f:8b:9c:db:52:9e:f2:
                    70:f5:3e:66:33:b5:24:62:60:e4:c2:3b:13:06:c0:
                    19:a0:e3:66:2f:6f:b8:da:1f:cb:53:97:f7:6d:30:
                    61:ef:3e:bc:19:84:7d:f4:ea:03:31:d1:31:17:ed:
                    b1:28:9a:d7:9f:48:56:dc:72:0c:9b:52:23:1f:f9:
                    af:94:20:7e:ce:b9:38:bb:f6:5d:d4:6c:16:b7:f2:
                    8f:15:87:51:82:0c:84:d1:11:ac:d7:95:27:71:d7:
                    5d:58:79:83:4b:64:f9:e8:09:24:f4:5a:bb:75:00:
                    e3:a0:18:9f:47:26:81:42:5f:c6:5c:e4:b7:c2:87:
                    01:b1:1c:27:74:70:fb:bd:9c:12:bd:6a:36:1d:09:
                    73:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:77:BF:34:F7:41:40:2A:4B:4A:5C:C2:68:0F:2F:A5:4F:EF:24:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/0226945e-ab08-3a2d-bc34-182a689a8e74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.103.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:83:e2:7f:71:b3:f1:da:0d:6b:98:ae:e3:5d:e6:b8:51:76:
         96:5b:9b:61:59:d3:56:65:03:23:e0:4d:3a:d5:bd:e5:bf:df:
         5b:7b:a8:05:a6:4a:d7:17:24:11:97:a0:c6:aa:03:5d:63:30:
         88:fe:ab:4c:13:59:85:cd:1e:7e:71:ae:53:c3:ef:fb:47:9d:
         a6:4c:89:23:55:06:e5:b6:19:64:21:b1:f1:29:fd:d9:f4:a6:
         b0:08:94:bb:e2:a0:ea:ba:2f:ed:a8:bf:3b:85:a6:82:58:b6:
         b0:d9:47:9d:fb:14:a2:1c:53:02:18:66:76:a8:7e:fd:27:4f:
         4f:da:8c:99:d0:ad:68:1d:24:e8:ec:ba:90:b8:76:c0:18:2f:
         9a:fb:10:2a:cf:a4:fc:2c:ba:8f:84:ac:28:ce:40:12:8a:2a:
         69:fc:b6:f5:63:76:be:cc:6b:93:d8:7a:aa:8f:91:9f:a5:50:
         68:e4:66:47:49:27:52:73:b9:d8:b5:c7:9c:47:ac:5e:a8:da:
         08:c4:0b:bf:25:c2:5b:a2:9c:9a:11:bd:d4:31:f5:95:38:d2:
         d5:71:cc:a4:bc:76:53:64:48:30:7b:85:08:f8:27:e7:2f:e5:
         3a:1d:0d:d1:d7:6d:8d:66:d8:31:f9:92:7c:d1:d0:b4:65:54:
         98:b4:9a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:38:11 2025 by rpki-client