Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/01c88cf0-4234-34ac-8310-d9e19f25d218.roa
File:                     01c88cf0-4234-34ac-8310-d9e19f25d218.roa (raw, json)
Hash identifier:          fekV515qcvolduQEpkMhKgxDM8BZg/nn9XpxyV/z7wo=
Subject key identifier:   90:42:79:2B:0C:37:F4:11:4C:A3:E9:F2:C3:C1:58:4C:3D:42:FB:59
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849674EF7F16EF26F779FD2EA80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/01c88cf0-4234-34ac-8310-d9e19f25d218.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     7018
IP address blocks:        168.91.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:f7:f1:6e:f2:6f:77:9f:d2:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=de67402b-60a7-4feb-a48b-0751edff3a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ad:67:78:71:c7:5c:98:6f:16:d9:00:ba:bc:
                    1a:95:43:fb:53:ca:3f:04:fe:b2:ed:fe:dd:f3:a4:
                    a1:72:56:1d:7b:60:ce:78:ac:ed:ea:46:c5:b1:e8:
                    df:d9:27:87:ad:68:fc:c9:80:07:13:5f:0a:d9:80:
                    79:f5:95:1b:90:04:1e:a4:5f:d0:64:79:6a:88:30:
                    91:c0:0e:f5:8e:70:e0:76:b1:67:c6:6e:51:8b:1d:
                    81:c2:69:ff:2d:6e:23:c6:eb:99:a2:77:c8:df:58:
                    de:ba:aa:b7:ac:2e:50:49:97:ed:af:3a:f4:88:5e:
                    3f:31:d1:5f:f4:50:e8:d3:af:0d:cb:9a:5e:85:2a:
                    b3:ee:fe:8a:fe:c2:31:ea:08:34:0a:47:66:05:27:
                    73:ae:79:1a:ac:e7:f2:c3:8b:a3:5a:eb:3a:fe:c6:
                    e0:07:e7:93:20:5c:1c:ea:45:15:32:83:07:77:c5:
                    30:f7:ac:52:c0:1b:0c:00:55:bd:bf:ca:06:63:10:
                    9e:fb:e3:f9:ed:0e:10:cc:e9:eb:26:7d:59:58:19:
                    e2:37:f2:e5:b6:66:5e:78:35:c9:dc:ab:f1:22:49:
                    52:1f:c2:bf:ba:25:48:ac:f0:7f:25:ba:c1:96:44:
                    29:e6:76:0c:06:5a:13:b8:0e:a7:00:9c:54:3b:31:
                    2f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:42:79:2B:0C:37:F4:11:4C:A3:E9:F2:C3:C1:58:4C:3D:42:FB:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/01c88cf0-4234-34ac-8310-d9e19f25d218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c7:c6:f3:70:86:76:2a:f7:ff:3d:6b:14:e8:84:dd:cb:3e:
         7f:86:d0:da:0f:f6:87:87:47:e8:4f:f9:13:68:ad:70:d7:fb:
         27:e7:68:81:3d:7f:64:8d:0c:84:71:5b:83:98:06:f1:38:45:
         1f:72:35:d3:46:34:79:cc:19:9a:9f:cc:ae:9c:28:3b:33:b8:
         70:61:f9:1e:69:3f:bf:77:98:7f:b6:99:af:3e:80:df:eb:7e:
         b0:8a:4a:45:30:99:ce:b1:63:86:1f:b9:67:1e:d6:28:cb:9f:
         e9:cb:2b:7d:08:e8:75:fa:80:4f:a2:78:38:a5:29:8f:a8:9c:
         cf:86:b8:ab:0a:51:e5:6a:bf:1a:40:d2:52:a6:ef:5e:93:e8:
         98:39:ea:10:e6:58:70:e5:05:ee:93:6a:20:4c:2e:5e:e9:e6:
         18:49:0c:a1:45:32:e3:16:95:4f:9d:f1:3d:7b:87:a5:58:74:
         5e:42:9a:a6:5c:f4:c6:87:12:31:0a:6a:80:73:29:2f:c2:f6:
         b4:b0:07:45:4c:e7:ed:a7:a0:1b:b4:dd:0b:6c:68:75:d2:af:
         4f:5c:5a:c7:c0:93:49:0e:d8:4f:4b:a3:da:63:de:46:dd:1b:
         31:40:ea:46:42:66:16:6e:7d:b6:ce:ba:cd:b2:23:28:0c:16:
         07:36:ce:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:54:29 2025 by rpki-client