Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/129d9c2c-1929-3537-ab83-96096b6debe4.roa
File:                     129d9c2c-1929-3537-ab83-96096b6debe4.roa (raw, json)
Hash identifier:          J3a3xFqejFeELGxJuNE9rJNXa/Yh8YRMokkB/feMn28=
Subject key identifier:   DE:05:7D:DA:B4:61:14:8B:C3:8E:C5:68:60:3E:C9:98:F6:D1:CF:3A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B79BCB45AED583431FFA41280
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/129d9c2c-1929-3537-ab83-96096b6debe4.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     64267
IP address blocks:        168.91.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:b4:5a:ed:58:34:31:ff:a4:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=1e3b4a9f-4538-4e66-a303-187502b70742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:85:97:39:e1:2b:0c:96:e3:ae:54:09:db:9f:
                    d5:8f:e7:01:8c:31:d9:7c:2e:66:7c:ac:48:61:23:
                    01:34:1d:5c:5c:25:06:fa:12:22:4d:4c:45:8a:c3:
                    84:6d:08:e2:3b:ae:70:07:0d:8e:dc:28:bf:4d:10:
                    87:28:bc:84:42:e7:2e:1e:92:48:90:7c:33:3f:96:
                    46:91:a2:9e:db:e7:e1:ff:70:a2:a9:b2:7d:fc:8d:
                    81:2d:4f:61:65:11:7e:71:29:fc:b0:81:c4:fd:e2:
                    83:aa:71:1f:70:2c:5c:0d:44:78:5f:1b:cc:15:ba:
                    fb:aa:9f:5b:ed:cf:66:ce:a9:22:29:75:54:df:37:
                    56:84:b0:0b:42:f9:48:39:ae:a5:a8:32:44:6c:be:
                    58:80:9f:7d:ef:7f:5a:e3:c1:d9:ae:93:4c:a9:d1:
                    7f:e8:b9:3c:67:44:48:e5:0d:79:e9:e7:1d:0b:48:
                    4c:90:b4:6b:76:5f:90:56:3e:4a:9c:b3:52:f3:84:
                    3d:ed:15:be:57:4a:ca:ca:3d:ff:d5:e7:79:89:fc:
                    e6:5d:37:f0:1f:56:d8:e7:78:7c:70:99:db:93:2d:
                    d7:d6:29:eb:cb:36:d8:b0:27:4c:58:a5:cb:7e:8d:
                    4a:81:11:f5:27:8b:17:fc:77:8c:aa:07:25:3a:ea:
                    c1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:05:7D:DA:B4:61:14:8B:C3:8E:C5:68:60:3E:C9:98:F6:D1:CF:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/129d9c2c-1929-3537-ab83-96096b6debe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:64:b0:75:7f:a4:17:bd:63:1b:2c:d4:b2:29:8d:11:d7:ef:
         54:55:cc:67:61:ae:68:11:94:f7:92:ff:9a:e2:db:f0:71:1a:
         ba:02:ab:5d:fa:a1:fc:d8:c4:06:62:5c:1f:a7:e6:02:05:b9:
         e4:4f:2a:0e:ef:d2:2c:aa:08:aa:f3:5c:44:3f:03:a9:26:32:
         1c:bc:18:08:1f:e6:d6:f0:d1:4e:7b:4c:50:e4:05:cf:fd:71:
         53:b8:ef:f9:3d:c9:11:0c:37:53:b8:f0:1d:19:e5:04:17:0f:
         ac:1f:06:8e:73:e1:08:3e:9d:c4:c4:c2:ce:fc:c1:5f:6f:ce:
         f9:30:42:4e:1e:e7:75:a5:ba:59:8d:15:c3:23:3d:03:c7:73:
         77:a0:80:a9:f6:6b:75:9d:10:08:d6:d7:6d:f8:1c:69:21:a1:
         bd:ca:ad:1d:66:4b:3d:a5:07:79:60:94:d7:9a:25:f8:c2:e9:
         72:d9:87:ba:21:f7:ca:f0:e8:ea:5a:d0:f1:38:dc:06:8a:88:
         12:83:b3:89:b1:89:b6:cb:10:cd:18:eb:4b:24:6c:6a:24:9c:
         16:3a:ba:fd:49:72:69:dc:4a:c7:25:fb:be:1f:d9:fb:78:3c:
         79:1d:06:43:83:33:40:e7:4b:61:98:ab:0a:ea:b6:07:e4:80:
         58:45:88:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:52 2025 by rpki-client