Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/111c58ff-eba5-3178-9d43-31030473aee7.roa
File:                     111c58ff-eba5-3178-9d43-31030473aee7.roa (raw, json)
Hash identifier:          m9bUd553hXIoC1O/497nxrgdt0jS0HRZuv1pjwsu6Vc=
Subject key identifier:   34:D9:A9:B6:21:EA:4C:71:58:DA:2B:92:AB:88:36:00:F6:65:33:0A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A46A5B0CB02FCC4684EF4A770
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/111c58ff-eba5-3178-9d43-31030473aee7.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     7018
IP address blocks:        209.251.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:b0:cb:02:fc:c4:68:4e:f4:a7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=a54fe3f2-749b-4dfa-8445-504dc5dc9684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5e:b1:2b:fc:80:e0:72:24:62:04:a2:50:91:
                    31:66:e0:88:07:96:ed:c6:ab:1b:85:0f:ce:2e:5e:
                    6f:9a:e9:bc:ab:5e:5b:ac:dc:48:3a:cb:9d:6f:58:
                    23:ae:d5:40:d8:b0:ff:df:f4:66:73:38:3c:70:fa:
                    cc:57:e3:88:84:ad:6e:2e:73:44:8b:74:5b:a0:ce:
                    f9:9a:20:25:e7:1d:bf:67:82:0f:f7:6a:66:13:63:
                    f4:4c:3f:39:06:6d:43:b6:16:d3:e4:13:17:03:a6:
                    a0:7f:f0:c7:a4:f9:3d:9b:08:65:a5:6b:8b:b6:27:
                    59:7b:87:cd:2a:f1:5e:53:32:1b:b4:10:49:21:1a:
                    e0:32:62:b9:8a:c3:88:7d:a0:e1:0b:ea:10:72:3d:
                    9b:4a:f0:d0:a3:21:05:e6:2c:6e:01:9a:bc:70:4c:
                    bb:ad:01:12:25:f6:8c:26:88:09:06:44:2a:40:34:
                    8a:8c:0f:23:f7:a0:aa:8e:c2:c8:ea:2e:7c:fa:71:
                    ce:e7:1d:96:2a:e5:9d:47:04:b8:30:fb:bb:c9:53:
                    af:75:68:ab:38:cc:24:d3:2f:3c:c5:1c:e9:cd:47:
                    83:5b:68:71:53:8f:da:20:90:37:72:c8:56:4d:46:
                    b1:f4:69:c8:3a:06:80:31:64:44:bc:b0:99:3e:b7:
                    e8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D9:A9:B6:21:EA:4C:71:58:DA:2B:92:AB:88:36:00:F6:65:33:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/111c58ff-eba5-3178-9d43-31030473aee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:e6:e1:fc:7c:c3:ec:36:d4:af:ca:d6:a9:af:a9:55:cd:08:
         8b:42:50:78:54:c7:ee:2c:c2:29:b9:23:e8:ea:84:06:65:bf:
         50:cd:3a:12:1d:7c:8a:9e:00:32:b9:32:bb:e1:07:85:b2:cd:
         2c:06:92:68:cf:e6:e3:30:ae:e2:d5:14:f3:e9:97:66:57:20:
         b6:27:b6:c6:46:f0:72:18:e1:eb:92:be:99:8f:51:70:25:d9:
         20:b9:2f:4d:ed:82:b2:79:06:41:68:ea:78:e4:83:14:e6:2f:
         ef:b8:69:db:98:ba:6d:ff:d0:9f:5a:49:53:1a:fa:be:66:ce:
         45:be:27:af:10:72:30:60:32:0f:46:c6:d5:c0:76:77:44:80:
         d2:c3:45:47:d2:47:88:97:33:4e:01:47:af:a6:d8:27:ba:3b:
         ba:f5:71:04:91:85:3e:2a:d2:07:c0:28:75:8a:88:b8:05:69:
         ab:73:c3:f1:12:c0:83:9f:84:04:d0:f7:b9:42:f5:f8:e1:4c:
         e9:ff:2f:09:86:1e:5e:ea:54:27:20:c3:4d:af:e9:3a:29:42:
         a9:a2:6f:8c:69:7f:cd:78:a3:6c:48:8b:26:76:f8:58:4f:d8:
         04:88:ed:fe:3c:fe:04:f4:80:84:83:19:4d:ec:76:2e:e6:b9:
         04:eb:e5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:19:31 2025 by rpki-client