Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/906fb5d0-5e1a-3f1d-bce3-7d3cada98357.roa
File:                     906fb5d0-5e1a-3f1d-bce3-7d3cada98357.roa (raw, json)
Hash identifier:          9ZFzAkpzDoSmNN5mfu0FBDbzyUs9UwAvJoNXaaAqO2A=
Subject key identifier:   51:DA:C3:4E:F8:9A:0C:90:A0:DA:F3:B3:5B:9E:10:BF:75:A0:3D:D3
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A00DACCFADE0CCF60296A6D70
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/906fb5d0-5e1a-3f1d-bce3-7d3cada98357.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     64267
IP address blocks:        152.44.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:cc:fa:de:0c:cf:60:29:6a:6d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=50a64643-e656-4629-9e9e-49e2f73e16c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:48:56:10:3e:5a:cf:78:d0:f0:86:03:9c:b3:
                    77:0f:d8:17:fb:40:b7:b9:66:1a:ec:07:7e:30:00:
                    4b:74:37:ec:68:c1:2f:58:19:dd:ee:6e:81:5c:d9:
                    94:16:87:7c:39:f9:01:c3:b9:33:dd:60:5f:cd:c4:
                    fe:6c:d0:1f:89:6b:e7:76:b1:b3:0d:1b:1c:09:d2:
                    df:a1:85:ac:99:36:89:28:71:8f:8e:c1:e0:7d:e6:
                    41:9d:f4:77:70:4b:1d:85:fe:c5:5c:d1:14:4b:0d:
                    90:87:65:9b:0b:53:a4:d6:a9:dc:36:fd:af:0e:45:
                    9b:88:92:6a:c3:7a:d2:a8:76:48:43:b7:cc:06:06:
                    eb:2a:91:e6:aa:7f:4c:e6:b7:e2:6b:6e:16:5d:c0:
                    5f:27:22:02:12:05:5a:af:f0:5f:9e:f0:bc:4f:8f:
                    de:45:01:88:95:f0:91:e8:10:f1:ac:cc:9d:4c:41:
                    ff:a7:11:f7:3e:79:fb:c6:26:ed:85:c0:66:e5:7a:
                    19:f3:90:c9:c6:28:d4:a3:96:32:2a:bb:9a:ca:95:
                    52:5a:fd:84:93:83:91:4c:f7:f6:aa:24:be:64:56:
                    1f:9e:20:8b:d4:1a:d1:52:70:6d:99:6d:70:e0:52:
                    cd:7c:82:c9:68:49:78:5c:a7:17:15:ed:38:f3:47:
                    f8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DA:C3:4E:F8:9A:0C:90:A0:DA:F3:B3:5B:9E:10:BF:75:A0:3D:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/906fb5d0-5e1a-3f1d-bce3-7d3cada98357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:35:1b:43:dd:e4:ed:81:c6:3f:5e:11:e7:fe:7c:0a:a1:d1:
         e6:b3:1f:7f:17:e3:2d:06:13:39:2d:0b:18:1b:35:b4:04:3c:
         b6:10:54:89:fb:e7:a8:e8:73:e1:ad:85:02:14:63:f5:53:77:
         d9:ed:59:3c:10:af:da:e8:98:18:26:ce:3b:f8:ca:97:a4:1c:
         57:6b:8c:26:4e:e7:db:2f:9d:69:34:fc:91:0f:8a:31:89:a7:
         9e:29:c2:5f:3b:a2:62:86:ce:78:0d:f8:71:f1:37:d7:74:19:
         d9:ad:31:fa:44:bf:74:f9:86:42:5c:63:20:83:60:0c:36:f3:
         88:54:91:b3:f5:c8:8b:f2:46:49:ad:20:77:b7:0e:7b:dd:e1:
         c9:6e:f1:ca:21:32:24:c9:af:98:9d:d8:9d:0c:d8:4f:19:00:
         5c:d9:1b:a7:05:ca:fd:d5:57:74:84:71:99:9e:36:d7:89:f5:
         53:b2:74:7e:d9:ad:dc:e5:fb:86:fc:6a:9d:f1:fe:a2:d2:f4:
         a3:5a:f8:fe:14:fa:e3:b3:78:56:4e:0f:5e:af:cf:ab:de:28:
         97:c1:87:2d:57:26:39:3c:50:36:d9:10:e5:d5:d8:76:c6:4d:
         84:00:06:fd:cb:58:a2:99:04:dd:51:18:25:8a:04:28:7c:a9:
         64:f0:3c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:16:23 2025 by rpki-client