Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/07488373-19a8-33a1-b4b5-309ca09b3cd0.roa
File:                     07488373-19a8-33a1-b4b5-309ca09b3cd0.roa (raw, json)
Hash identifier:          xD3OnEIKY5NYKwCiBrW/RxiVECG4h93kPZJFhc3NSxA=
Subject key identifier:   D1:7E:1F:20:61:D2:C8:44:B3:BA:6A:E2:0D:D1:C9:F6:79:C8:BA:FE
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B79BCB384C8F36A1839B41A80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/07488373-19a8-33a1-b4b5-309ca09b3cd0.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     64267
IP address blocks:        168.91.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:b3:84:c8:f3:6a:18:39:b4:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=4d992b03-630f-4a82-89d4-f51ae22a3cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a7:b2:13:ff:10:21:66:64:f5:e4:f8:57:9e:
                    6a:0a:14:54:3b:f4:56:0e:4e:a0:0c:24:fd:fe:92:
                    4c:89:90:75:54:11:bf:4a:55:c3:cb:43:62:b4:6f:
                    23:d4:4d:82:ee:49:c9:bb:16:b0:c5:17:eb:29:59:
                    64:d2:99:39:6a:3c:7e:5d:83:da:c8:13:50:cc:e1:
                    61:2a:d1:d7:18:57:73:bf:72:ad:de:87:e1:af:33:
                    df:c7:b8:3d:92:f7:2b:dd:be:8a:e4:63:e0:43:49:
                    c2:71:cb:92:87:5e:f1:b1:93:45:bd:14:79:50:ce:
                    84:e3:2e:0d:a6:df:27:d8:4c:b3:96:87:a9:fb:ba:
                    22:82:dd:05:16:5f:33:7c:23:f8:37:e9:47:d9:6f:
                    97:3c:8d:ef:88:60:be:8e:a7:8b:4e:b6:28:e6:21:
                    26:90:5d:0e:3d:63:df:9a:7e:0a:08:b4:0c:68:28:
                    69:52:ee:3c:a3:1c:5e:c4:0c:54:40:2b:a2:9c:93:
                    0a:db:de:a3:11:6b:20:79:a8:b7:85:06:d8:f7:f8:
                    7b:6a:9d:0b:8d:fc:5c:20:8f:21:b7:54:3a:d2:8d:
                    13:8f:52:d3:4e:20:b1:7a:e2:dd:22:ef:14:a8:3e:
                    a2:c9:14:fa:18:c8:ee:b0:86:57:28:66:d8:7a:56:
                    3e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7E:1F:20:61:D2:C8:44:B3:BA:6A:E2:0D:D1:C9:F6:79:C8:BA:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/07488373-19a8-33a1-b4b5-309ca09b3cd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:0a:e9:51:c0:56:84:77:fd:db:0d:d8:6e:8b:a7:d8:96:04:
         01:ba:39:2f:de:8e:20:6a:9d:77:76:b2:82:83:ae:66:c1:a4:
         f6:41:5f:36:32:16:fe:e6:bc:07:06:23:8f:4f:80:00:c8:32:
         af:3e:af:90:95:09:d9:56:f5:1b:8c:b9:bf:01:3f:f6:e8:96:
         60:e8:77:f2:98:26:dd:43:18:dd:bc:31:77:c5:5a:9c:59:1f:
         4b:fb:0f:3b:6e:cb:17:6c:a9:39:f6:b9:1a:a9:b2:d6:c7:f2:
         70:bc:1c:e0:d4:67:97:82:04:fd:db:93:ed:0d:c3:6b:b4:e4:
         24:a3:31:51:27:84:99:ee:e9:a3:30:77:c9:91:be:fc:f1:32:
         52:71:0a:55:78:db:30:c9:0b:37:46:f9:f2:5b:07:46:18:f6:
         98:3f:51:cc:97:0e:35:b0:2a:2d:ad:50:f1:c9:2a:61:45:82:
         b8:d0:4c:44:10:be:9e:37:5e:79:4a:01:b7:76:2e:ab:bc:11:
         6d:17:4c:8d:b2:e8:77:c9:f4:bf:fa:59:a1:30:4c:f6:71:8a:
         e1:3f:79:83:f5:4e:80:fe:bd:2a:2f:46:3a:4a:a8:aa:61:f2:
         39:f8:51:c5:66:86:26:9d:5b:e5:49:e7:3a:ae:66:7a:4f:07:
         bf:db:b1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:52 2025 by rpki-client