Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/3d9be492-283e-32a9-9ca3-e5235522fa2b.roa
File:                     3d9be492-283e-32a9-9ca3-e5235522fa2b.roa (raw, json)
Hash identifier:          lmTqL5i3h/6P4Tbh8vFKooiQ1UPc7C/TG5G5nrBpaH4=
Subject key identifier:   68:25:00:C5:5E:46:36:17:FB:1E:90:2C:07:D0:F6:96:E3:90:3D:7E
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F43285848CC7B9F9D5E143C30ED11D880
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/3d9be492-283e-32a9-9ca3-e5235522fa2b.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     399294
IP address blocks:        200.5.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:9f:9d:5e:14:3c:30:ed:11:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=ffcc7ae9-3452-4bcb-921c-93b32649e104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7b:3d:5e:05:74:b4:19:04:4d:d8:11:c6:76:
                    dd:c2:86:a6:fe:84:22:ac:66:b8:6d:40:ec:04:3b:
                    69:4e:f3:40:86:ef:02:24:66:eb:1c:41:de:9d:b2:
                    0f:9b:77:44:bf:56:83:74:ee:ea:11:e4:2d:51:8b:
                    db:84:63:fe:8c:bd:d6:9a:3b:45:da:7f:25:29:55:
                    bd:4a:1c:ce:b5:d9:b8:5b:5b:3c:08:ca:b7:4c:bd:
                    cb:b3:35:da:4f:eb:be:c6:ae:a1:d8:ad:df:4e:00:
                    fa:a6:4e:19:dd:0b:80:90:a7:bb:b0:60:7f:43:36:
                    d9:68:93:83:e7:87:90:8d:b6:f7:0e:fa:56:77:ec:
                    18:2d:09:27:81:fe:1b:3c:6c:c9:ec:e7:0c:9a:c4:
                    1b:a6:ba:19:bf:94:b7:f6:24:f1:65:71:6e:0a:95:
                    d4:5e:20:51:d4:91:de:bb:a6:4b:90:47:f0:88:6d:
                    07:8d:25:b4:3b:8d:9e:33:c5:92:e0:4c:a0:1d:09:
                    0c:c4:1c:96:38:7e:43:6f:12:b5:1f:9c:98:ce:e0:
                    09:ae:8a:57:65:af:15:ba:05:f5:ab:5d:8b:46:52:
                    2d:3f:ad:f6:8d:aa:f9:f0:25:67:cb:26:c2:0a:93:
                    bf:d5:96:60:d9:a9:39:3e:31:f4:d7:e9:2a:b1:30:
                    35:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:25:00:C5:5E:46:36:17:FB:1E:90:2C:07:D0:F6:96:E3:90:3D:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/3d9be492-283e-32a9-9ca3-e5235522fa2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d4:72:d8:2e:a7:41:e1:29:55:f9:12:a1:bc:1c:77:a7:56:
         e5:e0:e1:c8:b3:91:6e:c2:df:5e:87:f8:d4:04:5d:cb:f9:2a:
         d0:b6:14:4c:81:35:de:7f:e4:b3:67:8d:31:c8:a4:5b:58:75:
         da:e7:b7:9b:f2:e2:6c:98:1e:71:66:36:5e:0c:b6:de:bc:6f:
         32:aa:fc:3c:30:d6:3b:f6:0c:95:a7:ad:15:92:75:d5:9e:87:
         f5:d2:cd:69:5f:92:f7:cf:c6:65:d3:da:41:95:f7:55:d2:14:
         45:d7:27:3b:1f:9c:c5:34:a1:4f:fe:a6:4d:15:e0:91:d6:fe:
         7f:f6:78:c4:88:ba:c2:6c:ae:6f:77:6e:c5:27:0c:f2:74:13:
         31:e5:4c:65:fb:41:b0:26:b6:3b:9a:d5:74:7a:34:65:42:f4:
         77:55:f6:51:06:4b:1b:91:c9:85:30:9d:e8:df:5f:60:39:e0:
         b1:e4:74:19:a0:ea:0c:8d:7c:c6:ba:15:fa:8c:65:3c:49:81:
         6d:27:59:0a:53:2e:56:96:e6:4b:5a:ab:b9:56:4e:d7:50:8d:
         9a:89:2b:a7:55:fc:19:2f:69:8a:c5:91:bc:14:80:ed:9d:02:
         45:cd:9c:a8:c0:ad:ed:ef:58:bc:b8:c1:4b:c2:b4:98:a0:97:
         60:e2:b5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:34:39 2025 by rpki-client