Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ba922fa-5dcb-3b9b-bb8d-914f614bde6d.roa
File:                     9ba922fa-5dcb-3b9b-bb8d-914f614bde6d.roa (raw, json)
Hash identifier:          FfCFBPEnNmQJogrSIc0MDChFkciRltO7cDRig7e6aI0=
Subject key identifier:   4C:50:AC:20:B6:6C:56:BB:7F:F3:D9:84:C5:89:7A:6F:23:5B:B7:C9
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584917DBFEDE5E7014272A9656E0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ba922fa-5dcb-3b9b-bb8d-914f614bde6d.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     64267
IP address blocks:        152.44.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:db:fe:de:5e:70:14:27:2a:96:56:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=2194e2b3-f6c4-4004-983e-8d9e8b453bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5e:40:4d:1c:40:ab:9a:f8:63:c6:4a:10:2b:
                    c8:43:00:ca:3b:02:20:e6:a3:41:d1:40:76:fa:35:
                    98:f8:19:76:5c:b7:4d:98:26:c4:49:44:1e:43:4c:
                    ea:e5:28:83:36:40:14:47:e5:4f:96:ef:25:5b:dd:
                    f9:93:fa:7b:84:0e:42:39:cb:ff:a6:83:ad:b9:dd:
                    3d:5a:e7:b2:6c:f5:4b:95:56:a5:6f:cd:8b:ac:ac:
                    57:e9:07:54:c6:ca:69:af:38:cc:cf:f9:fe:92:47:
                    90:49:00:ce:ab:b5:38:a2:6d:4d:1c:3d:af:ab:89:
                    79:c0:a0:11:6b:01:18:5f:a3:c9:81:00:a8:93:ed:
                    21:19:b0:59:30:5e:61:a6:bc:57:a5:f8:80:a3:05:
                    fb:56:77:b8:2e:d4:30:46:fd:8b:63:f6:ca:a2:ab:
                    ba:bf:22:a9:fa:dd:6d:8c:46:1e:9a:0e:0a:ba:37:
                    8d:5c:cb:c0:2c:09:75:ab:ef:a4:2d:60:17:37:b6:
                    b8:26:37:ac:1f:23:a2:15:39:08:20:01:0f:54:e5:
                    f4:f1:e8:d3:ed:cc:64:fb:d1:1d:04:6a:32:0c:f0:
                    bd:d3:bb:0b:f5:bd:ec:22:a1:11:09:f9:88:7c:7a:
                    ed:40:57:7b:77:bb:dc:af:f4:64:f7:75:2b:6b:bd:
                    38:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:50:AC:20:B6:6C:56:BB:7F:F3:D9:84:C5:89:7A:6F:23:5B:B7:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ba922fa-5dcb-3b9b-bb8d-914f614bde6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:d8:62:ff:f0:44:11:46:ba:04:03:08:ad:3e:b3:03:a3:85:
         26:ac:c9:72:0e:fc:af:82:82:05:63:a7:75:ba:e8:7a:b9:57:
         2b:f0:c5:bf:a6:fd:6c:74:7f:90:e5:a0:9b:33:9c:d9:4b:98:
         0a:e9:ee:b9:8b:59:8c:8c:e1:17:4f:f0:26:c9:16:88:a0:f1:
         06:a3:2e:b3:31:12:76:e2:60:b1:36:bf:ec:3c:3d:ab:63:9e:
         86:37:1d:b9:3c:b6:4c:77:06:27:f5:df:4b:12:80:bd:37:7f:
         15:ab:52:2d:9a:73:31:51:38:73:2f:b8:fc:ee:3e:ab:ac:93:
         aa:d2:3a:d6:9c:0d:81:34:fb:97:dd:13:67:eb:0f:7e:5d:8c:
         bf:18:c8:1c:1e:e1:c4:bd:ae:c6:42:f2:a7:a9:3f:a3:c9:65:
         66:67:b1:b4:f7:3b:88:7f:c0:f1:f5:f6:c4:35:02:68:0a:a1:
         1f:3d:dc:f8:bc:6f:ec:7a:8d:84:32:84:3b:d6:90:07:c3:79:
         d5:56:b5:ee:04:68:d8:55:16:0e:15:ab:b4:30:32:71:66:ce:
         9b:57:62:ee:14:e1:72:68:6e:b9:cf:a9:74:80:e1:7c:7c:87:
         ac:dd:9f:03:af:65:25:86:32:38:10:2a:19:ed:a2:3b:37:88:
         40:fd:a4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:11:01 2025 by rpki-client