Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6e84cc83-1388-3da8-9678-51c2343424c3.roa
File:                     6e84cc83-1388-3da8-9678-51c2343424c3.roa (raw, json)
Hash identifier:          Vtav/XyvI0NtEeKT7y1rXgLL+QXNr7KmZ1GGus3JPFU=
Subject key identifier:   AC:68:F5:09:B6:21:DA:EA:48:E0:F9:D1:43:98:B5:BE:16:DB:04:55
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849BB0F6C70746A4FE7F15BBC80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6e84cc83-1388-3da8-9678-51c2343424c3.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     64267
IP address blocks:        209.59.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:6c:70:74:6a:4f:e7:f1:5b:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=4148df92-d83b-4c18-8969-006e46123daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:00:e3:20:10:08:cd:be:1c:77:80:66:a7:7e:
                    74:34:e9:1f:64:d0:fe:f6:a9:3d:bf:75:4f:6b:16:
                    0e:53:fd:92:95:a9:6f:25:fa:05:4b:d1:21:48:5f:
                    57:90:e8:2b:d0:6c:37:8e:63:5d:36:76:41:7f:a6:
                    05:c5:2c:b5:db:4f:67:20:e6:4c:6b:f0:fe:cc:e5:
                    2a:98:42:f9:bf:8e:4c:38:94:3e:b5:75:ce:9f:0b:
                    7d:5a:6e:e7:b2:21:34:e6:71:9f:2f:61:8f:d7:79:
                    cc:47:a3:45:a9:18:32:12:bb:78:d2:30:75:32:ee:
                    fb:18:0e:b4:db:b9:fa:3b:20:00:e0:b3:a3:b2:d3:
                    c4:c9:cf:b3:1e:27:d3:a1:d5:57:2d:8f:c4:23:59:
                    bd:27:ae:65:e6:93:57:bb:73:a3:8c:e3:dd:d0:75:
                    59:6a:21:6f:fb:8c:7a:ee:48:0e:4b:9a:dd:38:83:
                    73:71:14:7d:8c:b6:e5:3f:9d:6e:23:d5:f3:ba:be:
                    61:3a:70:c7:d8:c1:94:0a:59:22:a5:6b:9c:d4:d1:
                    31:79:94:e9:b9:b1:a3:ef:e4:07:08:31:0e:89:af:
                    fb:2e:66:fc:a4:4d:9c:23:60:1c:62:67:1b:a9:90:
                    3b:a5:04:d0:70:f5:7d:98:f5:9d:c6:af:5f:c6:c1:
                    89:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:68:F5:09:B6:21:DA:EA:48:E0:F9:D1:43:98:B5:BE:16:DB:04:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6e84cc83-1388-3da8-9678-51c2343424c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.59.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:16:d6:29:a1:4f:40:e8:e1:61:ee:76:17:f0:1d:f5:49:96:
         99:23:c1:1e:b0:e2:60:8c:9e:54:d7:57:df:ad:0b:a5:b4:c2:
         b2:0f:11:bf:52:2c:64:43:c6:7d:f0:17:1b:ee:ba:4f:01:96:
         dc:9b:6b:3d:ca:64:f7:9a:10:8c:61:6f:74:0d:b4:08:b6:42:
         3c:46:67:c5:80:26:4d:d0:cb:63:ed:b2:76:d2:fd:ad:ce:3f:
         97:b4:32:b3:5f:5a:ed:d2:04:2c:8a:b4:4b:78:da:b8:5e:f0:
         99:bb:68:ca:69:71:de:25:31:55:e8:aa:3f:48:04:b8:cf:0f:
         18:64:92:be:51:4c:14:eb:d7:49:d0:03:f4:63:a2:dd:05:3e:
         ef:c9:54:ab:14:37:ee:a4:e3:28:ae:90:df:d2:9d:92:8c:fa:
         33:5a:2e:ac:dc:07:be:f6:bd:b5:01:dc:df:eb:dd:a4:80:be:
         75:6f:db:89:69:ac:63:13:e7:f5:2d:1d:38:e9:d4:4e:31:2b:
         49:67:15:d6:ab:1b:09:b0:d7:fd:95:68:5d:ba:b4:ab:54:c0:
         e2:06:c9:94:00:a7:7c:a1:56:6e:e1:e4:e0:a8:6a:70:95:be:
         33:76:40:6c:65:54:9a:4a:75:f5:7e:41:ee:7c:27:63:1b:fb:
         cb:04:60:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:57:15 2025 by rpki-client