Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e1b29e8b-b39c-3622-80d7-999b82e0b378.roa
File:                     e1b29e8b-b39c-3622-80d7-999b82e0b378.roa (raw, json)
Hash identifier:          cHJEY6QM3mL7NrPieae4hbOd3Xc5RsQKHX+c6S5914k=
Subject key identifier:   67:57:17:2B:AF:59:F9:8A:A5:11:61:3F:C2:39:B3:40:AF:0B:70:3F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849B9A9FD69F607B65ED4FA83C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e1b29e8b-b39c-3622-80d7-999b82e0b378.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     64267
IP address blocks:        168.91.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:a9:fd:69:f6:07:b6:5e:d4:fa:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=1247f942-d3a0-4443-bd28-5476418b49b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:30:85:0c:77:39:3c:fd:ca:f3:38:63:9a:f8:
                    b0:7e:98:02:0f:c6:02:84:60:5a:0a:7d:9d:f4:bd:
                    78:18:2f:1b:4a:14:7c:95:5e:1b:03:d0:7e:1c:c3:
                    fd:88:52:cc:cc:ec:4a:d0:5d:0c:9c:33:ae:d8:65:
                    13:99:6e:99:d8:b9:bb:93:23:ea:6a:b7:49:2f:d9:
                    1f:07:a4:4c:dc:87:61:99:bb:5c:e1:f7:81:2d:92:
                    9f:0f:a2:21:4d:2f:cb:94:a3:5a:43:0b:b4:5f:23:
                    37:d1:ca:02:9d:75:2e:0b:f2:64:c1:13:9b:f7:06:
                    94:3a:88:dd:db:be:30:58:90:c1:7b:00:e5:6f:e2:
                    a9:b8:5e:a2:b1:94:57:f8:d3:2f:e5:a6:ee:3b:41:
                    b3:5c:86:31:5c:68:f1:16:a9:a2:a8:dd:fc:e3:62:
                    3d:8f:74:07:d0:bd:09:0c:e1:80:ae:d1:aa:a1:16:
                    90:a2:43:8c:37:81:74:9c:0b:a6:07:91:02:62:79:
                    1f:73:16:59:57:a8:38:2f:81:96:61:29:bd:00:0f:
                    fd:df:e8:ac:33:2c:79:43:c4:24:ef:e8:03:72:9f:
                    d4:b8:4a:56:c5:83:11:05:8f:5b:9d:c9:57:eb:29:
                    c0:ff:9f:9f:e4:0e:89:54:16:0d:66:69:9b:25:02:
                    71:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:57:17:2B:AF:59:F9:8A:A5:11:61:3F:C2:39:B3:40:AF:0B:70:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e1b29e8b-b39c-3622-80d7-999b82e0b378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:62:ba:04:8b:8d:04:8b:15:19:59:16:cf:b4:da:f9:b5:03:
         e5:90:50:f8:a3:71:bf:aa:f6:96:a6:ea:6b:7c:d3:4e:2f:56:
         73:4a:52:0d:0c:d4:74:59:f6:e5:9c:aa:38:6f:15:b4:5c:9f:
         fb:86:e2:aa:41:b2:ec:59:bf:52:a6:43:96:df:ef:26:33:7e:
         b3:eb:60:55:4c:e5:a2:ee:53:39:7a:f5:e7:c1:87:13:88:35:
         f3:a4:67:3f:b8:67:bb:4b:7c:4b:76:d4:be:46:f8:19:79:f4:
         21:f5:a6:92:63:b6:8d:74:86:ea:38:2e:af:a7:28:ed:49:a8:
         8a:49:aa:26:86:58:b6:c7:c4:15:4d:9a:49:bb:04:9d:77:73:
         fe:3a:81:c1:52:75:2d:55:4e:7d:ed:69:1d:4a:26:9e:61:88:
         f1:0c:fe:29:39:d7:a7:ea:d4:37:48:e6:61:bf:5e:aa:04:e0:
         12:df:0d:e3:10:05:76:0f:cd:5b:81:69:16:45:c7:65:0b:1f:
         2f:bf:76:f5:fa:2b:b3:81:4a:7f:21:fd:b4:ac:fd:75:9d:38:
         60:02:b7:c6:28:1b:bc:8c:97:f4:0f:63:6a:9c:9b:78:10:0b:
         8a:ff:e9:3b:07:fa:35:31:8f:0f:b4:83:69:ca:04:55:0a:25:
         79:14:1d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:19:10 2025 by rpki-client