Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/957f4629-8825-3597-999b-ff03241d485f.roa
File:                     957f4629-8825-3597-999b-ff03241d485f.roa (raw, json)
Hash identifier:          bQfhgt5B6jKtaN4i/PTjGhjFwmMkt8LekiF23Oi1w34=
Subject key identifier:   E6:AB:1E:F1:2F:7C:83:E7:DB:9C:6A:76:F8:C2:B6:6A:8A:53:56:8F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849B9AA032004497EDE19C9D980
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/957f4629-8825-3597-999b-ff03241d485f.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     397630
IP address blocks:        207.254.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:03:20:04:49:7e:de:19:c9:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=875d74cc-150a-452c-bb70-24e4720f2bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:02:e8:4d:da:ec:68:b9:fa:e4:b7:05:c4:a5:
                    44:5d:3d:93:50:cc:e6:57:73:1a:48:28:d3:26:2c:
                    54:04:0b:c2:5e:4d:83:51:aa:ab:30:98:65:70:6f:
                    67:9e:83:88:3c:fc:ef:4e:ce:62:df:dd:19:a5:e7:
                    ef:e9:87:68:6d:fd:b6:1b:7f:ef:6d:cd:c0:d4:38:
                    ae:33:28:16:82:e5:f2:0a:f8:38:47:55:50:2e:92:
                    5b:01:a9:3c:81:6e:15:69:ea:69:b1:e6:6c:ea:c1:
                    16:69:0d:5f:d0:e3:08:6c:e0:26:be:45:b3:9d:da:
                    56:cf:66:4b:45:d2:4a:4c:8f:21:b6:00:da:52:0b:
                    47:2f:11:8d:bc:43:8c:08:92:ff:7c:66:80:5a:17:
                    71:e1:d0:97:43:3d:7c:6c:86:50:67:2d:c5:3f:da:
                    44:48:6c:ae:9c:3e:ff:a7:63:12:69:05:1a:37:d5:
                    a6:00:61:df:cb:d3:be:2e:44:77:36:e0:f2:34:c3:
                    53:96:33:60:f5:b4:fa:f5:ac:85:11:7c:43:67:45:
                    31:32:a8:ed:cf:5d:70:c8:e3:db:76:8f:4d:31:0b:
                    e9:96:6c:15:61:c0:57:50:df:23:46:89:95:1a:40:
                    49:d0:0e:04:e2:88:17:ed:5e:0a:b5:1c:d2:af:2a:
                    73:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AB:1E:F1:2F:7C:83:E7:DB:9C:6A:76:F8:C2:B6:6A:8A:53:56:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/957f4629-8825-3597-999b-ff03241d485f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.254.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:3c:60:ca:81:4e:d0:1e:b7:32:98:72:5d:d6:51:e7:82:c6:
         cb:5f:7b:7e:80:b6:78:ee:73:44:cc:b8:06:26:77:0c:38:5e:
         ee:8b:8f:78:90:ab:c2:da:7c:34:c6:a7:46:ce:b7:62:65:15:
         7c:a2:c5:30:4e:f1:aa:11:43:c4:f6:f3:0f:8d:12:c0:88:7e:
         53:f2:92:e7:c5:98:a6:b2:6d:25:bc:93:1d:5a:ef:8b:4e:54:
         7c:fa:e7:9c:bb:81:82:2c:16:07:eb:4c:d7:83:fc:b4:94:68:
         54:db:10:d7:15:3b:55:eb:0f:39:9e:2d:9d:a6:96:bb:b0:4d:
         74:a3:ee:ee:8a:1a:86:ed:7f:bf:19:0f:12:4a:f2:7f:1a:c4:
         63:80:e4:95:d7:2a:d1:54:f7:90:09:b3:2a:1f:2c:e8:dc:0f:
         07:d5:43:9b:55:93:37:4b:a9:37:6f:03:97:64:86:20:d9:e3:
         24:2d:1d:49:7a:ee:6a:17:37:12:89:67:34:b9:9d:26:a8:f0:
         10:92:80:43:e1:e9:88:d5:df:8c:aa:43:14:1d:5b:4f:14:9b:
         91:4e:36:b0:f0:ee:53:eb:ca:5b:66:1e:61:05:f3:9b:e2:93:
         90:14:1d:96:7f:91:61:bd:30:c8:83:51:33:fd:38:8a:06:05:
         05:2b:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:17:24 2025 by rpki-client