Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/06862d6a-37c8-3466-bd95-939f08c1da56.roa
File:                     06862d6a-37c8-3466-bd95-939f08c1da56.roa (raw, json)
Hash identifier:          oBLsPDZu9OglEqqWqYu95rdZTk2hi1SSo4SwncsgfsQ=
Subject key identifier:   58:86:BF:49:68:62:15:23:8A:D6:55:B0:BF:91:39:5E:33:38:B2:84
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B5B074566515296A4202BA800
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/06862d6a-37c8-3466-bd95-939f08c1da56.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     64267
IP address blocks:        139.180.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:45:66:51:52:96:a4:20:2b:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=a08c9c0b-0dac-4ead-80e4-f0fd66585603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e5:84:12:4f:55:bb:b2:1e:76:72:b7:09:df:
                    eb:b1:7f:b3:dc:16:5f:5c:1b:66:e3:60:18:ec:74:
                    95:be:bd:d5:44:9a:0a:73:00:aa:0c:bd:c2:6e:cd:
                    e0:99:b2:c2:fc:a1:50:d9:07:60:94:1e:4e:f5:b8:
                    15:14:ec:30:cf:73:85:6e:91:de:c0:43:72:50:e3:
                    7d:e5:8d:8b:04:d6:7c:70:49:0f:47:dc:9d:d0:55:
                    be:9a:20:de:95:b6:8c:a0:fd:e1:38:8f:b8:b4:10:
                    93:58:a8:c5:58:b3:20:d9:06:4c:cc:c4:4c:8f:38:
                    66:50:d6:36:73:59:64:62:41:9e:43:f9:02:70:6c:
                    de:72:f4:24:84:55:6f:c5:50:61:12:54:c9:3c:42:
                    16:50:3d:f2:cf:64:40:a6:f1:c3:1c:12:59:b9:c1:
                    9a:b8:80:1f:11:23:3c:b3:66:e1:41:97:27:81:af:
                    dc:19:60:15:ba:02:aa:ea:f1:10:95:eb:d0:d9:e3:
                    0c:85:63:bc:a2:a5:31:22:1b:31:59:db:00:3e:bd:
                    e1:e9:06:be:80:4f:c5:dd:fd:e4:78:7b:5a:69:ef:
                    32:89:9b:4f:a4:81:90:2b:2a:8f:06:25:ee:9b:6e:
                    b2:5a:bb:26:15:f9:29:8d:88:47:a2:0b:e1:95:67:
                    94:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:86:BF:49:68:62:15:23:8A:D6:55:B0:BF:91:39:5E:33:38:B2:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/06862d6a-37c8-3466-bd95-939f08c1da56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:53:d6:60:8a:9b:ee:16:be:35:50:24:d8:79:6c:d4:77:c4:
         b0:f5:0b:75:d1:bf:b5:b9:8e:85:da:62:97:df:dc:7c:e9:e5:
         59:23:14:94:c5:94:0d:0b:b4:a4:ba:58:4c:c0:c4:7c:fb:bf:
         be:eb:bf:b3:98:ea:1a:3b:b6:02:2f:dd:7d:5e:55:47:da:98:
         29:92:35:8b:09:b5:d0:ea:8c:8e:27:fa:c4:01:4a:d1:d6:5d:
         d3:cd:f0:b8:a8:2c:94:c8:d7:79:20:10:16:89:4a:4b:6f:28:
         8b:f4:8a:cf:2d:9e:a0:26:20:69:64:6d:a1:dc:e1:8b:2b:bc:
         5c:74:91:2d:fb:86:09:5f:8e:7e:94:80:d7:ac:79:a4:5c:90:
         15:d1:b5:be:ce:04:b4:8a:1b:45:ad:81:e9:67:aa:5a:1e:49:
         71:ea:5b:ab:d6:5a:88:b4:f9:d4:01:ff:3c:8d:b5:6a:5b:78:
         69:2b:70:2d:8a:d8:2c:a1:65:39:7c:77:f6:5d:49:5b:56:97:
         b4:c1:cf:7b:98:24:dd:15:01:18:a6:ab:4c:ec:52:5e:94:8c:
         b7:2b:e4:95:a7:a3:1c:77:b7:cd:00:f4:6e:b0:ea:06:30:32:
         39:2e:2c:ec:de:8e:33:fe:77:18:30:b8:64:e9:c4:82:08:2e:
         42:6f:5e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:39:11 2025 by rpki-client