Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ae2e07e2-0345-34df-ae2e-cc5cbd28d387.roa
File:                     ae2e07e2-0345-34df-ae2e-cc5cbd28d387.roa (raw, json)
Hash identifier:          GZI7LNFYOmpiiQ6cwwdgSy/dT9IWR24ea3LGkmQV1PI=
Subject key identifier:   B9:81:87:5B:32:8D:81:54:E5:50:EE:2E:5C:DD:19:F1:89:86:9E:E6
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285849C20A20E24B4D4C3CAB21E8C0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ae2e07e2-0345-34df-ae2e-cc5cbd28d387.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     271
IP address blocks:        128.189.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:20:e2:4b:4d:4c:3c:ab:21:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=32ef7f53-32ad-4439-9d2d-8f8f7e9fd87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c1:95:78:e8:77:c0:60:0a:b9:55:48:32:99:
                    b7:ca:11:68:b4:fd:d9:cc:65:c2:fe:97:0e:e7:06:
                    7a:e1:95:c8:ff:16:29:d7:17:1d:6b:64:22:91:c1:
                    b4:17:2a:37:46:8c:9e:79:e2:35:b9:fb:64:32:03:
                    27:a0:81:41:dd:0a:09:94:1f:3f:29:b7:b9:1f:9c:
                    0c:38:74:a6:2c:77:d8:f9:8c:6c:34:ff:36:f8:98:
                    14:57:4f:a9:de:51:96:41:25:f0:60:fb:0b:8b:20:
                    32:a8:57:95:68:71:f9:78:d9:5a:f2:fc:f6:33:0c:
                    ed:d0:74:05:f9:34:c0:2c:82:51:bb:e3:f8:0d:a2:
                    c9:fa:f6:a8:3b:3d:49:82:49:81:dc:a6:a7:6d:55:
                    5a:43:d6:58:5d:a6:5c:ea:e7:4f:67:b9:4d:82:ef:
                    83:7d:51:57:99:cc:ad:94:0d:47:2b:ee:3e:39:4b:
                    f6:32:b8:fe:3b:aa:b8:c0:6f:25:dd:c1:08:84:9c:
                    dd:d2:76:49:a0:1a:23:67:11:ff:e3:d6:01:5e:ce:
                    8d:7d:7f:db:94:14:cf:de:f4:67:49:0a:20:2a:69:
                    11:9e:29:66:ce:56:76:d0:6f:0a:77:31:8e:e8:a2:
                    7c:c2:0c:77:6a:1a:df:e8:19:e3:2d:e8:db:b3:8d:
                    79:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:81:87:5B:32:8D:81:54:E5:50:EE:2E:5C:DD:19:F1:89:86:9E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ae2e07e2-0345-34df-ae2e-cc5cbd28d387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.189.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:8f:2c:9d:d6:ba:2a:11:aa:e2:9c:1c:14:cc:0b:35:4f:61:
         78:c8:d9:6f:10:ca:a3:20:ac:ba:98:c4:3f:4f:ad:af:f3:77:
         e0:55:d8:ef:ff:cd:46:2e:61:e8:56:dd:dc:ad:87:10:72:72:
         7f:be:bc:ff:60:aa:61:4b:4f:58:fe:dc:64:d8:3e:3b:3e:a2:
         46:db:5a:d2:9f:ac:99:b7:9c:2c:30:07:27:f5:9e:77:9e:6b:
         9a:48:69:4a:82:40:c0:e9:38:4f:47:21:4d:38:02:46:bd:05:
         fa:dd:46:fa:d6:77:1b:87:f2:74:06:de:f0:ee:6a:37:16:17:
         5b:8a:a8:8c:47:5b:d9:87:e6:34:4b:42:69:48:5a:04:e4:27:
         3e:f6:8d:d0:d0:4b:20:13:3b:14:95:e6:52:34:75:13:6c:7d:
         2a:72:9c:14:5e:ca:43:5c:8a:a1:c4:08:e0:fd:23:ee:d8:cf:
         63:3b:43:fc:1b:11:fd:03:e8:48:11:2b:dc:a0:a3:9a:ff:8c:
         20:83:42:99:ee:29:e6:53:f9:6b:3b:ec:85:a9:74:86:0e:90:
         16:09:73:d1:19:3e:df:c3:1f:18:67:cf:80:58:27:01:2b:c6:
         ec:ce:50:37:f7:f2:af:8d:14:b4:ad:aa:fa:d1:c6:6f:37:87:
         6f:c9:f2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:01:53 2025 by rpki-client