Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/18e3e331-df28-3305-8366-37f3e76f00e3.roa
File:                     18e3e331-df28-3305-8366-37f3e76f00e3.roa (raw, json)
Hash identifier:          tLFR+zSyZSuY5lNB+lBvXj9o30+4uyYiHUERV+gfm1M=
Subject key identifier:   B4:18:40:4D:D7:77:85:6F:BA:0D:EF:62:61:58:CE:D6:DE:05:44:32
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B2A2C5DE52189260C364A0100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/18e3e331-df28-3305-8366-37f3e76f00e3.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     20001
IP address blocks:        207.182.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:5d:e5:21:89:26:0c:36:4a:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=77dfd505-2369-4bbf-b3e4-d2929af2f206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a1:35:5b:3c:96:af:56:b9:fd:b9:52:3d:d2:
                    a6:cf:4e:a8:f1:d0:be:ed:a9:51:e3:8f:c3:9c:4d:
                    39:f9:f6:82:53:16:9b:74:15:40:e0:0e:38:4f:22:
                    e4:2f:6c:43:37:a6:39:28:e7:50:cb:c9:01:8b:26:
                    45:b0:1b:a8:36:3e:96:17:8e:49:a7:0a:f9:64:47:
                    da:e4:bb:ea:33:24:8e:74:ef:8d:7a:fa:47:6c:2f:
                    ca:58:60:57:0c:79:1d:d6:7e:9d:19:e9:ce:97:61:
                    68:12:74:a3:6a:02:57:91:97:9b:aa:1e:2a:0e:85:
                    f3:bc:22:88:b1:de:86:7c:a8:7e:c5:36:1e:6a:c8:
                    a8:aa:ee:ee:77:df:91:a2:04:a7:65:48:df:7c:53:
                    94:ba:42:d7:56:6f:f5:b9:57:f8:a8:aa:31:77:1d:
                    8e:c3:a5:d1:06:3f:2e:56:ae:44:3d:1e:f1:af:5c:
                    d3:ea:b1:14:8f:17:a7:03:19:94:22:a2:fc:67:75:
                    03:2c:76:19:48:97:6d:2b:1c:e7:35:6b:4e:57:94:
                    b7:ff:48:44:e2:cf:4a:a5:09:5c:91:fd:7b:d0:52:
                    6b:b2:9b:d9:39:0d:c8:12:fe:cf:7c:d1:e1:a4:1c:
                    a4:d7:25:35:ee:f4:71:d9:c8:df:19:2e:48:39:80:
                    22:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:18:40:4D:D7:77:85:6F:BA:0D:EF:62:61:58:CE:D6:DE:05:44:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/18e3e331-df28-3305-8366-37f3e76f00e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.182.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:91:54:5f:5a:7f:7f:76:0f:5c:68:c6:02:e3:eb:a8:63:0b:
         1a:ef:0d:34:a5:04:a0:74:76:37:5b:a7:d7:7b:2e:27:35:c4:
         39:a5:99:ca:1d:a7:c2:fd:7d:12:6e:c2:b2:e5:33:9c:92:ed:
         cb:59:e0:21:f0:17:af:27:24:d6:38:d3:ac:61:a4:e5:98:ac:
         c0:ce:9e:de:8d:1b:9a:a5:ed:38:f5:6b:05:6d:5e:f6:c2:60:
         c7:7f:15:52:59:5a:46:cb:e9:7a:fc:8c:be:6f:f3:99:a4:54:
         d6:a2:73:f1:90:05:10:c0:44:b7:12:bd:30:3b:68:04:78:a3:
         fc:f6:03:cb:fa:bc:00:d4:fb:b9:91:54:3f:f8:61:78:6f:2c:
         49:c4:82:79:b6:37:64:22:96:40:d5:89:d0:74:78:4b:f2:1f:
         83:62:cc:fd:86:fc:0f:a9:54:e4:19:53:9c:09:c9:cc:4a:ad:
         89:50:a5:1c:db:23:1c:88:c4:5f:12:88:df:a8:0d:da:00:46:
         91:87:3b:43:d8:08:e9:f4:84:5a:74:e9:56:1e:a5:69:c5:f0:
         93:f4:04:2f:b0:7f:20:ef:f3:cd:d8:dc:f6:e5:ed:f7:56:ff:
         1e:05:7d:a9:df:16:d2:e0:2f:00:9b:b6:ab:21:42:b6:20:19:
         04:95:40:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:56:28 2025 by rpki-client