Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b8e04097-9cf9-319f-b848-5e2a18e47e51.roa
File:                     b8e04097-9cf9-319f-b848-5e2a18e47e51.roa (raw, json)
Hash identifier:          gTVUcbC6jGmWBn1XXa4iXu7Jlkv8Zm2hcA9gv/iwR60=
Subject key identifier:   AC:3F:43:52:3D:F7:1F:04:FC:40:BF:86:FA:3C:B8:64:C8:C8:24:91
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849B6DF58E4C5A73636E0A4BF00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b8e04097-9cf9-319f-b848-5e2a18e47e51.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     7018
IP address blocks:        158.62.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:58:e4:c5:a7:36:36:e0:a4:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=f6647eeb-9ef0-429c-a9d7-970a4851e734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d1:d8:f6:97:52:87:28:27:16:19:f1:69:ab:
                    47:22:65:1a:0c:6c:a2:19:4f:82:26:0c:47:74:1b:
                    dd:6a:ad:56:57:d0:a1:58:74:f2:20:32:cb:83:af:
                    57:69:c6:c5:f7:48:b6:3b:d7:f1:59:a9:7b:cc:e4:
                    9b:60:5c:b4:4b:ee:d5:a8:8e:92:d1:20:23:fc:8d:
                    64:bb:50:c3:ce:9e:7d:fa:1d:c8:9f:cc:f0:49:ae:
                    e8:72:12:51:b3:04:a8:61:0d:07:09:bf:48:65:e0:
                    00:3c:36:1d:64:cc:9d:af:81:45:a0:b0:2a:7d:d5:
                    1a:3b:5b:83:cd:a7:1b:94:ce:84:f0:90:16:79:6b:
                    d3:c4:f8:55:11:22:92:b5:54:31:01:38:ae:05:6a:
                    00:b5:4d:6c:e3:49:2e:05:9d:df:c7:90:3d:24:0a:
                    89:eb:98:58:b5:90:67:b5:e4:85:5b:60:b5:3d:ca:
                    82:e3:a2:ef:1d:cc:31:a0:3f:5b:e3:0b:0c:6a:f9:
                    ff:17:27:9b:b5:f3:e7:c4:c6:98:27:e9:1d:08:c3:
                    94:39:2e:54:75:5d:34:16:65:46:da:4b:76:26:a2:
                    3b:1a:52:cd:7d:41:66:13:2d:4b:c7:f7:65:ef:bf:
                    2e:e8:96:e6:de:a8:fd:8f:f6:ce:c5:66:f7:84:29:
                    a9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3F:43:52:3D:F7:1F:04:FC:40:BF:86:FA:3C:B8:64:C8:C8:24:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b8e04097-9cf9-319f-b848-5e2a18e47e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:1e:d7:24:c5:4e:d6:0d:c5:52:96:98:57:86:b9:e6:09:a2:
         54:11:d9:10:64:1c:94:c7:ff:8f:9b:a5:7b:dc:1c:4c:3f:80:
         ef:92:7e:83:7d:88:10:4d:c7:41:6b:06:ab:53:23:a5:3b:bb:
         5d:8d:9b:be:db:5d:7e:a2:85:7d:98:c9:b0:82:1b:66:e5:50:
         d8:70:01:3c:6d:60:de:c7:4d:49:cc:07:0e:5d:e5:f2:38:e6:
         3c:3e:1f:31:d7:65:93:27:6d:d3:7f:58:3d:a8:a3:ef:8c:db:
         b5:a9:bb:d9:4c:a7:30:73:4a:9d:2c:24:0d:12:80:4f:bb:ac:
         cc:e2:bb:ac:ac:78:5d:5d:8e:ce:97:1a:13:52:a4:97:0a:69:
         3b:a2:34:8b:63:3d:5d:ee:95:a6:22:0f:da:96:b6:ea:72:00:
         0f:c2:0d:79:2b:10:33:a3:50:e0:f3:b8:d1:04:2a:97:48:0e:
         ea:2e:fe:2a:d5:6d:7a:98:b0:5b:51:67:8b:45:c3:e6:4b:ee:
         42:44:f2:e3:08:28:96:4d:b6:0a:b3:4f:1e:1a:51:0d:e1:ab:
         03:31:6b:89:30:14:89:ac:a6:a5:40:cc:72:e4:7d:62:a8:cb:
         24:dd:55:ee:1f:39:b1:a1:9f:97:0a:89:e1:83:41:1c:8e:64:
         ed:0c:cc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:41:41 2025 by rpki-client