Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/136f4e7e-e89e-3387-8860-1a99849486ca.roa
File:                     136f4e7e-e89e-3387-8860-1a99849486ca.roa (raw, json)
Hash identifier:          84ELZ9jM/yNs4Umw6OQLQjlYSOo9xPTZ9leDBGQZE7E=
Subject key identifier:   01:97:D9:2D:20:A2:A1:D8:95:02:76:CE:8F:B6:07:B6:15:9E:B6:CC
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849AE7F42F471C96FF8466998A0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/136f4e7e-e89e-3387-8860-1a99849486ca.roa
Signing time:             Tue 29 Apr 2025 01:00:47 +0000
ROA not before:           Tue 29 Apr 2025 01:00:47 +0000
ROA not after:            Mon 28 Jul 2025 01:00:47 +0000
asID:                     397630
IP address blocks:        172.96.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7f:42:f4:71:c9:6f:f8:46:69:98:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 29 01:00:47 2025 GMT
            Not After : Jul 28 01:00:47 2025 GMT
        Subject: CN=14c97ae1-61c1-4120-aa58-25627879aa70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:98:f8:c4:d6:8e:85:6d:76:fa:de:4b:75:
                    0d:63:76:8a:be:7f:1b:ba:60:18:c0:76:7e:52:3a:
                    9d:2e:44:eb:97:d6:e9:09:70:be:bc:74:82:35:55:
                    79:c5:43:ed:68:bf:c3:02:28:f7:15:49:31:76:aa:
                    ac:cb:46:e1:f4:10:99:35:4a:00:69:78:a9:fb:67:
                    6f:0d:e7:22:2f:60:c9:46:9e:e7:8e:16:03:88:b8:
                    fa:29:14:49:9e:22:0d:17:bb:41:55:44:ce:fe:dd:
                    56:b3:b0:9a:7a:2c:73:75:26:12:2c:80:16:9f:a6:
                    5d:31:c0:e9:a1:aa:eb:26:30:c4:b8:e3:91:e7:56:
                    49:05:29:7a:45:cb:ec:ff:f1:f8:16:40:b4:f7:fa:
                    df:3c:76:08:21:b2:37:a7:a8:d6:c2:a3:e9:21:37:
                    c7:82:2e:d2:a0:37:e3:e9:68:5f:55:62:93:5d:aa:
                    9e:52:6a:04:25:e8:c0:4d:32:11:17:b3:a0:f7:0d:
                    17:27:26:df:3b:4a:54:a9:6a:54:e5:72:97:05:1d:
                    99:0d:de:dc:62:16:62:20:48:01:59:1a:d5:22:f8:
                    6e:fa:65:5f:66:77:e2:bc:d6:9e:57:43:88:f3:f4:
                    8a:0e:fc:98:79:c3:96:ff:d6:92:b6:57:e2:bf:e2:
                    c9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:97:D9:2D:20:A2:A1:D8:95:02:76:CE:8F:B6:07:B6:15:9E:B6:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/136f4e7e-e89e-3387-8860-1a99849486ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:4f:d5:aa:0a:e0:9c:db:30:c8:82:2e:2b:68:40:bc:45:4d:
         16:ed:e3:c4:69:58:00:df:a8:aa:ed:84:a6:14:c9:ae:bd:e4:
         37:33:3d:2d:a0:7c:10:98:7a:e3:24:dd:f7:5b:4f:5b:b5:76:
         97:68:80:f3:e0:fc:ba:c0:27:63:43:73:97:ca:25:31:58:20:
         14:9d:40:ad:66:6f:bf:03:45:2e:17:73:8e:60:03:ea:96:47:
         6e:ba:b1:10:2e:56:ed:f1:68:c8:2e:4d:fd:a2:94:cb:a4:00:
         17:a9:35:0c:f6:fa:94:ca:ef:f7:34:50:bb:06:ed:26:a6:d4:
         66:a8:8c:92:20:e8:86:e7:d3:3e:7f:5e:c7:ff:52:1d:f2:3a:
         38:cc:f2:0c:42:9d:39:c8:65:e0:66:f3:ab:9d:91:8e:d4:7b:
         bd:92:67:45:e3:1f:a0:4c:54:69:95:bd:b7:16:c4:5a:3b:e3:
         87:e8:da:2b:22:f7:5a:6a:f2:5b:ea:a8:12:26:e6:a0:0d:06:
         36:8d:4d:ce:9f:54:40:2a:74:08:26:5e:b1:cc:7f:13:df:d4:
         c6:23:b5:82:67:66:4c:f1:6b:ca:9e:d8:a9:ad:17:d3:3e:33:
         57:ae:bd:42:d3:5e:64:2b:8b:ac:ad:36:25:16:f3:3c:ec:e7:
         fe:a3:7b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:05:56 2025 by rpki-client