Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e7e8f873-345f-3a16-84bb-b7145ebee415.roa
File:                     e7e8f873-345f-3a16-84bb-b7145ebee415.roa (raw, json)
Hash identifier:          e7MhTgzYdzmJ9LCVB/gZhK5VOBnnkS2P4lwJX8HimWg=
Subject key identifier:   78:F6:C2:4B:E0:46:53:1D:C6:DC:D3:1C:07:EB:B8:EA:7D:E3:9A:D3
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858480BDA76A8301622E446879E00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e7e8f873-345f-3a16-84bb-b7145ebee415.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     7018
IP address blocks:        199.101.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:76:a8:30:16:22:e4:46:87:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=7edbd9ca-a4b9-44b1-b5dd-7ce16f1b3987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:b7:e7:81:56:cb:ab:bc:14:27:01:a9:ee:
                    2f:96:af:5f:af:b7:95:23:7e:78:6f:20:06:ca:aa:
                    c8:6b:9b:bd:c9:49:1e:e2:d7:2e:8f:c8:7f:02:fc:
                    99:27:01:2a:26:88:52:41:e7:44:b6:8a:df:08:0a:
                    fd:f8:8b:06:fd:9b:f9:a4:ba:c0:84:e3:58:07:9e:
                    27:ef:11:e8:1b:67:0f:18:db:6a:51:c8:3e:ff:70:
                    f3:14:77:6c:b7:45:dc:2b:71:1b:f3:59:9e:ba:bc:
                    22:ec:9f:ef:bb:56:09:e3:5f:23:2a:64:47:0b:8b:
                    8e:83:17:27:31:7a:d3:16:79:7d:eb:06:e4:94:93:
                    51:42:d2:72:7c:35:48:bc:8d:6f:62:ad:c9:c2:56:
                    84:dd:9c:36:bc:d5:40:8f:bf:bf:e0:70:a4:7f:9d:
                    c4:c4:fd:d0:14:32:8d:4a:9a:29:be:e3:ea:0c:05:
                    25:b1:33:d7:4e:67:2e:64:ad:25:ea:ce:0b:2a:14:
                    0e:38:88:1d:92:01:8b:40:a7:45:a0:7e:11:3e:61:
                    b2:0b:7e:38:9b:ef:b4:fc:44:08:23:05:e4:42:a1:
                    ae:b3:47:92:63:4f:7d:70:74:fa:73:ec:68:80:13:
                    1d:82:92:81:9e:1b:d9:f7:69:a4:7c:b0:ae:f2:86:
                    bc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F6:C2:4B:E0:46:53:1D:C6:DC:D3:1C:07:EB:B8:EA:7D:E3:9A:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e7e8f873-345f-3a16-84bb-b7145ebee415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:05:06:9a:fb:09:38:d2:b5:d6:a0:f5:90:8b:79:12:4f:a2:
         33:12:86:68:7c:3b:c8:34:d4:0c:63:0f:ef:0a:b5:91:da:16:
         06:b9:4a:a2:a3:59:5a:95:71:c8:b0:9c:92:97:c9:24:ff:3f:
         8c:05:61:38:93:40:45:fc:49:47:80:dc:9e:06:26:84:df:25:
         0f:8d:13:e2:bc:1e:fe:4e:3c:89:bf:44:03:10:5e:dd:ab:93:
         0f:ed:15:a7:59:d2:20:25:83:eb:51:6c:29:b8:3c:db:e1:6e:
         0c:27:d8:96:9d:bf:14:13:6c:5b:7d:bc:fe:e4:5f:a8:61:56:
         88:73:f6:f2:24:2e:eb:51:51:0e:7c:9b:57:01:ef:9e:30:a0:
         59:7e:9d:45:fc:43:d7:41:7b:a2:b5:aa:db:f2:15:67:85:16:
         1d:a5:4f:de:96:a2:c5:82:14:66:3f:d5:c9:38:0c:53:b4:e5:
         33:05:6d:b6:1a:a5:38:71:bf:a0:3e:c1:7d:87:99:6f:83:06:
         2a:69:cc:c8:bb:e3:df:db:b0:37:84:e7:5e:be:87:21:10:29:
         0b:08:a4:e1:79:27:eb:26:2e:4d:cf:82:fe:e8:68:2d:f7:cc:
         7a:4e:d3:6e:89:7c:65:11:c8:2a:33:84:06:e8:d8:85:49:06:
         6d:50:28:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:09 2025 by rpki-client