Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/eb70ff5d-0ba2-31cc-ad00-b80337c1e55f.roa
File:                     eb70ff5d-0ba2-31cc-ad00-b80337c1e55f.roa (raw, json)
Hash identifier:          9RseXnv/EGhw9IeF4bX9Wg7aEYa358Sod/yBVi0oAAg=
Subject key identifier:   8A:AF:63:30:35:B9:7F:53:F3:62:DF:D8:CE:B5:0E:03:99:73:76:2F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849C904F5F4478C301D53124FDF
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/eb70ff5d-0ba2-31cc-ad00-b80337c1e55f.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     64267
IP address blocks:        173.214.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f5:f4:47:8c:30:1d:53:12:4f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=fa551c28-6ca7-4061-a234-eaec3404e3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:03:50:5c:b1:1e:9d:5e:4b:bd:ed:5d:c5:ba:
                    b9:12:b2:2f:d5:a4:a1:72:7a:35:38:3b:e2:a4:a2:
                    83:ff:58:32:3d:11:b0:7b:bf:81:6d:22:de:7b:84:
                    46:19:d2:27:92:0c:8e:97:ec:54:ab:2c:76:6d:d5:
                    d0:fb:f7:22:c5:33:de:03:05:18:cc:ea:f8:7e:57:
                    dc:8c:1c:95:46:b2:14:11:dd:00:a0:23:06:f7:d4:
                    d2:31:9f:0e:dc:57:f0:c6:aa:b0:a1:03:6d:1c:93:
                    76:eb:0e:72:26:87:61:b1:a0:35:ad:8e:56:28:f4:
                    a3:f7:d8:cc:1d:f0:c2:c8:0b:54:ee:1a:a2:01:f0:
                    71:92:33:8a:db:38:dc:c5:2c:cc:5f:c9:7c:c8:5d:
                    84:ee:f6:6c:4f:10:3d:8a:66:be:cb:28:20:16:1c:
                    8f:9d:d3:39:6f:77:16:f4:13:c9:11:7d:31:1a:f3:
                    d0:86:9e:b4:bb:07:03:80:9d:f1:f5:77:32:0a:82:
                    73:7b:54:d0:90:e5:28:c3:17:36:64:95:93:c2:53:
                    48:54:86:a6:03:cf:32:a8:22:f2:17:d7:b8:50:af:
                    c9:32:4e:0b:ca:40:c1:10:ed:b0:34:9f:29:31:a0:
                    17:68:b0:2a:52:ae:17:63:57:c2:cb:a1:a6:0b:7e:
                    8d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AF:63:30:35:B9:7F:53:F3:62:DF:D8:CE:B5:0E:03:99:73:76:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/eb70ff5d-0ba2-31cc-ad00-b80337c1e55f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:9a:bf:54:4f:cc:15:d8:46:63:36:67:72:4f:37:a9:48:6f:
         ea:e9:8f:91:a4:db:f4:14:9d:3e:9d:5f:ca:49:45:0a:11:4d:
         71:61:7c:d0:61:60:16:a9:af:7b:3b:25:63:b5:0e:d3:93:b8:
         8f:d7:73:cd:94:24:56:58:ea:48:a9:52:e2:c3:22:3d:68:e5:
         ed:aa:7c:8d:ef:d9:69:3b:3e:a4:6e:98:0a:8c:dc:9a:bc:e8:
         fe:14:52:5c:09:e7:94:09:51:7c:d9:5b:e3:38:03:9c:d6:7d:
         fc:c6:42:d5:84:87:da:20:37:5c:6a:6d:5d:f1:3b:93:01:c9:
         93:17:99:65:13:ff:0c:3d:dd:45:ce:09:01:0b:89:10:14:34:
         57:f6:3c:f5:46:43:c3:5c:a9:fd:4f:39:7b:aa:b6:0f:4d:fb:
         17:48:66:c5:e4:c1:a0:ed:d9:8d:a6:d3:d2:6c:42:15:ec:93:
         d4:30:c8:d8:65:6a:2f:e7:77:c2:54:3d:67:93:f3:53:b1:e5:
         10:7d:b3:c2:df:e9:ce:01:3f:ac:2f:0d:72:f5:9b:55:22:33:
         c5:59:f4:8a:62:b7:45:8c:b7:57:ac:2f:96:69:f6:6c:7a:11:
         6c:4b:86:2d:47:6a:a4:9b:42:d6:c1:1e:d5:8b:72:19:00:fc:
         53:9b:b3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:41:05 2025 by rpki-client