Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/28f189e4-64f0-37e8-b520-14577952653f.roa
File:                     28f189e4-64f0-37e8-b520-14577952653f.roa (raw, json)
Hash identifier:          kUsO8TIoVSetOhC15G8t3e6I4aqAmOXBf2wHgSFCirU=
Subject key identifier:   F1:B5:C6:0E:D2:90:0B:DE:3E:F6:46:23:1B:BA:CA:C2:01:4B:1B:93
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584B64CC7F80C658CF0FD1167DC0
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/28f189e4-64f0-37e8-b520-14577952653f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     14813
IP address blocks:        69.73.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:7f:80:c6:58:cf:0f:d1:16:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f97e174c-38f2-4e80-9788-8a41d4407c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f6:4c:8f:f3:f7:8b:35:a6:fd:be:87:df:72:
                    14:c4:fa:00:df:8c:40:c8:82:18:1c:63:01:7f:aa:
                    9f:9e:8a:08:63:ca:b8:cc:b5:56:27:82:ca:8c:b2:
                    f5:e9:36:78:5e:53:af:28:cf:91:bf:18:7d:ae:a9:
                    44:e0:b3:45:a6:45:5f:bc:68:c2:91:85:a0:02:a3:
                    1e:4c:c8:c2:51:e1:86:bf:2f:de:d0:36:d8:c7:84:
                    28:99:0d:00:f9:47:35:eb:5f:58:55:0e:5f:b1:ae:
                    2b:45:0a:98:ae:2d:25:ea:6f:9a:2e:72:13:81:5a:
                    60:66:96:56:e1:d6:c6:45:fe:1b:b8:2a:31:e9:57:
                    1a:b0:a2:7b:e9:bb:c0:88:b8:ad:c7:22:32:8b:68:
                    2a:5e:05:73:dd:c4:c7:e1:4a:c4:09:98:cc:5c:74:
                    7a:b6:55:0a:b1:71:14:66:20:af:01:93:c9:2a:c3:
                    4a:85:0a:f9:38:30:c9:1e:93:18:71:81:14:8e:fc:
                    74:38:1f:c9:5e:30:19:63:b8:71:6b:bf:01:85:32:
                    64:fe:b7:17:52:55:dc:51:0a:c5:e7:b7:c5:4f:21:
                    18:67:2e:b6:9a:d9:4f:c6:b1:c8:b1:1f:26:e5:59:
                    95:cf:3e:d4:15:63:c3:9d:3c:79:84:05:46:f2:87:
                    1d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B5:C6:0E:D2:90:0B:DE:3E:F6:46:23:1B:BA:CA:C2:01:4B:1B:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/28f189e4-64f0-37e8-b520-14577952653f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a1:8c:5e:14:94:a8:35:9c:84:b4:3b:14:e3:63:b5:d4:e8:
         b3:94:c2:f6:7d:a1:f2:d8:e6:72:5c:97:b8:77:6f:f3:54:b6:
         1d:4d:23:cf:76:e1:1b:8e:89:a9:31:95:b2:17:ce:15:65:0c:
         62:ec:6e:2c:fb:24:dc:92:a8:85:02:d6:8c:3f:fe:aa:0f:96:
         a0:b9:c4:ba:0c:ae:e2:35:1a:1e:27:3d:8c:74:0b:85:9d:92:
         92:fe:d8:1e:b2:04:51:c9:c0:38:b8:8e:82:ec:f3:10:19:ad:
         f4:b5:98:b8:bc:5f:c4:5f:ca:3c:17:88:d6:f3:2e:f0:7d:55:
         0a:40:a1:d1:4a:76:81:bb:ff:26:03:e2:f4:4a:13:4e:ef:e3:
         8e:9f:fd:d7:c8:3e:5b:59:d9:7b:82:2d:60:60:5e:0d:bb:05:
         f1:27:77:5d:f0:bc:04:a0:8a:0e:92:8d:16:4b:d2:bb:0f:b3:
         b2:7e:2d:76:2d:bd:cf:62:36:49:b0:bd:6b:5e:51:19:aa:5c:
         9a:f0:fe:67:98:ac:9a:9b:9f:bf:96:81:40:0e:77:45:b5:9c:
         e1:bb:74:8f:c8:af:3a:4f:b9:d6:44:c1:83:45:a1:3a:6d:a8:
         9e:45:af:da:9e:19:8b:39:9e:81:ec:b6:58:78:d9:31:ff:8d:
         28:4f:00:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:59 2025 by rpki-client