Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/10ee14ab-625c-36d9-8450-245893eff1c8.roa
File:                     10ee14ab-625c-36d9-8450-245893eff1c8.roa (raw, json)
Hash identifier:          1eA+6vhHQ1+g36RvHNDLwvZS9azCeCjKHzVvZXJKXqI=
Subject key identifier:   59:FF:38:6C:D5:D9:11:C8:BB:16:99:03:23:8D:E7:D5:CC:97:CC:80
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584AE46124A56387FDE01E528A00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/10ee14ab-625c-36d9-8450-245893eff1c8.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     7018
IP address blocks:        209.163.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:24:a5:63:87:fd:e0:1e:52:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=1c332d6c-0c99-4dc7-802b-9e5ebe729ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9a:62:39:7a:5d:47:d9:59:6d:59:16:24:46:
                    16:7a:a0:14:f7:34:b0:8a:bb:f6:85:c5:a5:86:fb:
                    c5:1a:55:dd:98:b1:62:89:11:00:a6:1c:c7:94:49:
                    78:26:c5:47:30:f4:f5:c0:66:9e:1c:3e:d3:0a:f3:
                    27:26:b4:07:f9:b6:34:9f:e8:89:86:90:54:df:c7:
                    ba:d0:a3:7d:6c:f5:44:f3:c8:7d:c4:0d:32:1b:98:
                    88:95:58:dc:7b:24:2b:7f:c5:e3:e2:01:df:ab:81:
                    28:54:4d:16:39:54:91:cb:19:75:40:cb:89:4b:ea:
                    ef:45:f3:9e:4a:0b:90:85:3b:0d:be:0e:36:d4:a0:
                    3d:53:72:8f:6d:73:18:ee:17:cd:b1:fc:6a:26:56:
                    31:e0:78:d7:55:2a:7a:dd:8b:75:78:b1:81:e8:8a:
                    02:94:0c:6c:77:3f:56:56:c4:5e:b4:7f:a4:9c:1b:
                    e9:63:9e:ed:72:64:d4:ba:56:46:93:80:e1:de:73:
                    6d:2b:e0:21:4b:df:21:9d:8b:12:38:d1:0c:23:c8:
                    93:40:f1:9e:01:b6:50:e5:8d:87:ab:7d:45:70:85:
                    3b:b9:18:76:22:14:3d:d2:6b:fc:67:1f:75:c5:3d:
                    70:32:e7:c6:8e:6b:92:96:58:1a:db:1d:05:db:b5:
                    00:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FF:38:6C:D5:D9:11:C8:BB:16:99:03:23:8D:E7:D5:CC:97:CC:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/10ee14ab-625c-36d9-8450-245893eff1c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:af:e6:af:15:08:26:8e:fa:64:ee:21:c1:57:5a:49:a4:d0:
         97:fa:d0:28:ba:17:b5:16:bd:f0:27:cf:ad:e4:08:7d:bc:e7:
         23:62:50:ac:19:72:84:2b:7f:b8:2a:82:96:ed:72:ce:6c:32:
         68:56:af:d3:4d:0d:1c:ba:d7:4b:c0:fd:32:0b:2e:a3:20:12:
         f1:a7:78:d1:c7:a5:03:d1:41:7f:15:f9:29:d0:d6:f1:c7:d8:
         20:dd:bc:60:67:77:77:ac:ee:7c:18:92:d8:fd:6b:80:48:54:
         be:a7:7c:c2:a5:d5:c1:90:0a:7b:e4:51:9e:75:07:bf:a0:e5:
         d4:58:12:eb:36:27:ee:99:34:9b:59:ab:82:75:80:f2:90:7a:
         35:ad:12:7c:31:2b:ed:ce:a3:6c:16:50:4c:b7:4a:07:2b:5f:
         2c:50:cb:6d:93:6d:7c:bb:07:df:71:d6:62:c3:52:e0:b8:d6:
         7d:0a:97:c3:cd:21:eb:af:17:20:24:31:2d:46:c7:16:e3:de:
         8b:04:8a:bc:d8:e1:10:bc:46:91:f6:e6:25:b2:21:6a:da:b5:
         85:cf:7c:04:93:db:93:a1:24:c5:5c:29:ea:99:5d:55:79:4a:
         15:dd:75:b1:40:6e:21:30:42:8b:6f:d9:58:b5:51:21:de:3c:
         1d:3c:75:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSSlY4f94B5SigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk
MWMzMzJkNmMtMGM5OS00ZGM3LTgwMmItOWU1ZWJlNzI5YWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5piOXpdR9lZbVkWJEYWeqAU9zSwirv2hcWl
hvvFGlXdmLFiiREAphzHlEl4JsVHMPT1wGaeHD7TCvMnJrQH+bY0n+iJhpBU38e6
0KN9bPVE88h9xA0yG5iIlVjceyQrf8Xj4gHfq4EoVE0WOVSRyxl1QMuJS+rvRfOe
SguQhTsNvg421KA9U3KPbXMY7hfNsfxqJlYx4HjXVSp63Yt1eLGB6IoClAxsdz9W
VsRetH+knBvpY57tcmTUulZGk4Dh3nNtK+AhS98hnYsSONEMI8iTQPGeAbZQ5Y2H
q31FcIU7uRh2IhQ90mv8Zx91xT1wMufGjmuSllga2x0F27UARQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFn/OGzV2RHIuxaZAyON59XMl8yAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMTBlZTE0YWItNjI1Yy0z
NmQ5LTg0NTAtMjQ1ODkzZWZmMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aN1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKuv5q8VCCaO+mTuIcFXWkmk0Jf60Ci6F7UWvfAnz63kCH285yNiUKwZ
coQrf7gqgpbtcs5sMmhWr9NNDRy610vA/TILLqMgEvGneNHHpQPRQX8V+SnQ1vHH
2CDdvGBnd3es7nwYktj9a4BIVL6nfMKl1cGQCnvkUZ51B7+g5dRYEus2J+6ZNJtZ
q4J1gPKQejWtEnwxK+3Oo2wWUEy3SgcrXyxQy22TbXy7B99x1mLDUuC41n0Kl8PN
IeuvFyAkMS1Gxxbj3osEirzY4RC8RpH25iWyIWratYXPfAST25OhJMVcKeqZXVV5
ShXddbFAbiEwQotv2Vi1USHePB08dQo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:12:49 2025 by rpki-client