Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/28e22d74-8d89-35b5-9422-e9f18d8ad93e.roa
File:                     28e22d74-8d89-35b5-9422-e9f18d8ad93e.roa (raw, json)
Hash identifier:          jRXAkE9C4dnSZolr6OEUNug75os8WfozebZgldmxreY=
Subject key identifier:   FE:B2:0E:02:A1:86:7D:36:E7:7D:E7:06:84:31:EF:69:84:01:E3:E2
Certificate issuer:       /CN=6b72a822-0e8f-45f9-a612-463da7164bf3
Certificate serial:       010D0C9F4328584ADECBBBFB4C5D5CA4F9367B00
Authority key identifier: 58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/28e22d74-8d89-35b5-9422-e9f18d8ad93e.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     174
IP address blocks:        69.54.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:bb:fb:4c:5d:5c:a4:f9:36:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b72a822-0e8f-45f9-a612-463da7164bf3
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=93e3eaa3-9632-449d-b1cc-df25a1e4d71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:be:8e:f2:ff:f8:ad:ca:7d:bf:40:dc:f7:7a:
                    9c:09:c9:b4:71:9d:50:06:8f:4c:f3:8e:04:29:d8:
                    fc:5b:55:df:63:e9:3c:5c:62:ac:dc:9d:4b:84:a8:
                    8a:a0:c5:7a:fe:80:f3:6f:ff:89:bd:5d:a3:10:59:
                    3e:85:ff:25:29:84:9c:cc:c5:b3:52:75:19:e3:c3:
                    c7:41:6c:d7:41:bc:0c:c7:10:ee:7a:4b:09:fc:f5:
                    04:79:4e:8d:a6:77:06:2f:a6:b6:dd:fd:44:88:9b:
                    39:34:2f:c9:b6:ec:93:53:2f:4f:ad:1e:89:2f:f7:
                    c9:bf:e2:e9:ea:0c:de:88:41:7d:f8:88:b1:7e:a0:
                    56:a6:41:1d:30:73:09:c2:08:13:06:ba:52:82:b7:
                    17:41:8c:5b:8c:65:22:b7:94:c3:bd:8e:38:8d:76:
                    b2:86:a8:03:de:ff:76:62:df:1b:9c:29:12:7c:54:
                    10:c0:c0:61:5d:cd:3b:af:29:6c:4f:53:ab:1e:a1:
                    75:62:55:c4:21:95:66:5d:95:21:31:bb:aa:39:15:
                    8a:60:0c:3f:59:d2:ec:1d:ba:8e:d3:5a:0b:ec:6b:
                    45:f9:77:4d:66:3d:d3:6d:b1:6d:c0:af:ce:86:3d:
                    71:ad:0c:47:14:dc:e3:27:cb:d1:88:44:89:a9:f7:
                    a3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B2:0E:02:A1:86:7D:36:E7:7D:E7:06:84:31:EF:69:84:01:E3:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/28e22d74-8d89-35b5-9422-e9f18d8ad93e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.crl

            X509v3 Authority Key Identifier:
                keyid:58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.54.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b6:e6:bd:c3:8f:af:28:ab:7f:d1:5c:c1:0b:ab:bd:87:43:
         36:6c:54:24:5b:bf:f2:d6:a6:ee:f6:2f:5b:d6:96:35:1d:36:
         d5:b2:db:38:0c:2d:a8:65:f0:1c:6a:bf:80:21:96:cb:d0:bf:
         9e:08:0a:31:96:d5:97:37:a5:16:e1:7c:b9:57:9a:72:fb:a3:
         ec:23:45:51:a8:08:3b:0c:49:cc:45:e9:13:b6:8c:6c:d9:1b:
         9f:b5:6d:d4:50:26:7f:46:8d:e4:ef:41:01:2a:62:8d:08:c6:
         e2:81:e6:d2:8e:65:ae:33:5e:36:ba:3d:13:6d:3f:da:cf:1c:
         e6:2d:70:da:7b:56:83:9a:50:79:80:67:5c:17:d3:c9:a6:81:
         41:09:9f:10:09:a8:66:79:a8:8a:84:82:a9:a0:9f:d8:be:21:
         3b:ae:b0:84:92:c9:54:a1:50:25:77:8a:b9:1c:cc:59:fd:08:
         36:61:a5:71:14:d8:78:e3:ee:bf:29:45:24:56:ff:92:94:ed:
         c6:ac:53:d8:70:b6:8d:e0:c5:36:fe:95:df:8b:95:ca:fc:5b:
         f7:81:be:30:f5:64:6e:ba:ee:03:dc:7a:7a:32:98:a8:c1:2b:
         cc:0c:e1:1d:3c:e1:5d:59:d7:04:7b:11:ef:10:b5:2c:5a:6c:
         cd:8d:f4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:13 2025 by rpki-client