Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7dfadb2a-ce36-3a79-8e91-5c9947135313.roa
File:                     7dfadb2a-ce36-3a79-8e91-5c9947135313.roa (raw, json)
Hash identifier:          NoVgZ8HXKOMOmzJ0DRmjGYFlpRRe76PmSvzfXj+CSRE=
Subject key identifier:   17:F4:F0:9E:E3:4B:CD:B1:69:3B:89:9B:EF:71:10:B7:1E:25:F5:36
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849244E6C810C0132DA706EAC60
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7dfadb2a-ce36-3a79-8e91-5c9947135313.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        168.91.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:6c:81:0c:01:32:da:70:6e:ac:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=d0681295-03e2-4799-aa98-905dad072610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:d2:13:1d:e2:bd:8a:5a:11:72:60:19:85:
                    f7:6d:aa:a8:03:81:0c:ea:0f:f2:74:06:aa:cd:f1:
                    83:d9:da:f2:cb:6a:aa:6f:a6:2f:8f:37:b3:5d:d8:
                    a5:32:0c:c7:69:ad:28:7a:bf:74:aa:83:53:62:5a:
                    b7:16:8e:c8:c4:24:92:11:8d:d8:2a:0e:c5:b9:b7:
                    1e:70:3d:56:9b:1d:d4:26:07:6c:91:a0:6e:72:58:
                    ae:7f:96:83:18:58:6b:5c:e1:6b:83:11:cf:e0:f9:
                    e9:c0:f1:b5:3a:cd:e0:da:12:3c:6e:12:64:b1:d6:
                    07:1d:39:79:37:ea:a9:07:95:5f:80:44:8f:63:8e:
                    11:31:ed:0a:8a:33:dc:86:78:7c:94:29:e5:ea:14:
                    f4:1e:e7:8a:77:51:5b:a4:d1:a8:ff:3f:3c:fb:8e:
                    f9:82:b7:d6:44:1b:a3:16:cf:4d:e7:b0:36:b2:32:
                    50:ac:43:81:a1:40:1d:a0:47:ea:6c:53:9a:9f:10:
                    43:57:18:07:11:97:ae:c7:9e:84:13:6b:c1:62:bf:
                    47:f9:ef:65:3a:d7:f2:50:0e:1c:37:9c:74:da:d5:
                    20:a8:01:56:3c:06:86:1f:92:e5:c3:1d:3c:1b:1c:
                    d2:16:45:48:d9:b4:52:c0:a6:de:1c:1f:2e:70:8f:
                    a4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F4:F0:9E:E3:4B:CD:B1:69:3B:89:9B:EF:71:10:B7:1E:25:F5:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7dfadb2a-ce36-3a79-8e91-5c9947135313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:1e:54:b8:d2:54:2e:b7:bd:df:a1:72:c3:77:17:d7:57:d1:
         83:cf:8e:de:08:1f:65:22:e3:2f:ac:f4:7a:30:a3:73:92:70:
         28:b5:09:7a:b1:81:59:a6:cc:fa:8c:f4:48:dc:d8:0a:c9:34:
         a9:00:e3:1c:e0:b2:76:9d:5b:fa:3b:f5:c6:a1:c3:0e:e0:d4:
         5a:41:a2:90:e3:e2:a0:3a:9e:66:a0:43:45:dc:e4:dd:b0:cc:
         d0:99:c5:32:b4:02:f4:d0:bd:53:23:7f:8b:3e:48:34:84:ce:
         b9:37:8e:1c:d0:9a:19:29:5a:91:7a:86:eb:86:57:c1:ec:0f:
         04:de:04:54:c9:49:f9:18:2c:67:3b:29:fa:94:e0:b1:4b:11:
         47:6c:40:c5:d8:08:0b:24:d3:ff:08:e1:e1:fa:74:86:3e:c6:
         6c:4d:1a:ed:87:6d:1e:6b:e6:a9:07:15:fa:16:a7:c8:5b:a0:
         20:be:ee:3d:95:31:d5:bd:16:63:ac:03:cb:02:a7:c9:9b:a7:
         e2:71:4c:37:62:e6:14:94:44:cc:e6:44:e8:20:ba:38:f6:7f:
         9f:2e:13:06:72:ef:cd:41:57:e8:cd:ee:14:8a:65:c8:af:a6:
         77:35:b8:39:85:bf:f9:ac:fb:db:7f:77:91:35:93:88:9d:da:
         dd:4f:94:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:35:41 2025 by rpki-client