Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1b6d170b-dd1f-3d5f-934e-d7c7cd19008c.roa
File:                     1b6d170b-dd1f-3d5f-934e-d7c7cd19008c.roa (raw, json)
Hash identifier:          lGS4UJzk7ilunWha2pkcGKjxIsf+/xYydw3D95kZJec=
Subject key identifier:   64:9D:D0:24:AD:5E:2C:33:59:B9:C6:E7:25:BB:5F:CF:6F:86:D5:D9
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B76F258E54BF220275C942EC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1b6d170b-dd1f-3d5f-934e-d7c7cd19008c.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     64267
IP address blocks:        192.171.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:58:e5:4b:f2:20:27:5c:94:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=f52a77c1-6861-4d15-8af9-46b04c310537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f0:aa:a4:ff:37:be:8d:a2:4a:0e:6e:68:42:
                    e8:90:0f:55:9f:3b:39:b8:0c:c8:3d:f5:a2:85:71:
                    f7:88:fa:ef:3f:b1:3d:f7:9a:bb:d8:c1:42:f9:c0:
                    d8:75:bc:67:ed:c5:b4:bf:1c:f3:86:bf:39:01:b8:
                    aa:38:54:79:57:59:0f:82:95:df:31:16:2a:4f:7f:
                    d0:1b:ba:87:25:2b:31:a1:b6:21:25:d4:9d:cc:39:
                    cc:38:a9:f3:1d:b6:35:a6:98:69:ab:4d:44:c7:3b:
                    16:3e:01:fb:04:94:0a:87:46:06:b2:15:fc:42:e9:
                    64:01:34:ca:4a:f8:f0:4f:62:8c:77:d4:82:3e:12:
                    8d:4f:a6:86:d0:54:98:b0:aa:51:d3:ff:d1:3b:f6:
                    ed:18:ca:71:fa:bc:cf:84:8e:3d:ec:4d:e8:f0:eb:
                    58:81:3a:fc:08:74:7e:55:31:35:fc:71:18:af:75:
                    2f:ea:89:ef:ea:14:5a:ed:cd:e8:4a:a9:ff:0f:da:
                    d9:b5:9b:28:b1:6b:d0:e6:28:fc:4b:1b:ad:62:5f:
                    71:c6:08:0a:5e:bd:78:a0:bc:c7:31:3b:5b:35:ca:
                    e9:8f:cb:be:55:47:9e:17:58:ea:69:8f:73:79:60:
                    aa:6a:05:98:68:d2:0e:9d:ce:a1:ee:8a:38:e6:d8:
                    c6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9D:D0:24:AD:5E:2C:33:59:B9:C6:E7:25:BB:5F:CF:6F:86:D5:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1b6d170b-dd1f-3d5f-934e-d7c7cd19008c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e0:d0:a3:a7:80:bf:2a:ed:ae:21:c2:d0:0e:c1:49:a2:92:
         d1:4d:fd:61:a8:f8:23:a1:92:39:24:41:dd:9e:c7:f4:45:e5:
         a5:74:55:e2:37:ca:20:5c:23:b2:32:6e:bd:0f:cd:4f:67:aa:
         fe:f1:8e:40:10:05:72:dd:07:9c:c3:1a:24:d4:49:cc:60:24:
         f6:cb:13:bc:9f:de:f7:20:2d:64:74:be:f0:77:dc:b9:cf:38:
         5b:22:f3:9b:6d:eb:69:7c:36:70:78:2d:ca:f2:b7:8e:4f:cf:
         c7:56:53:33:ba:71:bf:13:15:00:9c:b3:f7:6f:ea:0b:95:cf:
         91:8e:31:d4:3b:f6:75:17:19:cd:7a:da:4e:80:1f:44:a0:ce:
         3c:fb:93:6c:69:15:c9:04:d4:ac:7e:93:3c:30:45:51:e9:9d:
         c9:db:a6:ce:58:cf:c2:1e:69:0f:1d:6f:f0:c0:56:27:8e:fe:
         c5:c2:70:2f:9c:c6:b9:e0:be:cf:f2:3d:96:c5:86:04:2d:f2:
         74:ff:59:15:d5:bf:1f:82:81:5f:46:10:bf:0a:94:33:43:65:
         d4:f9:36:c8:29:6b:76:fd:0a:33:24:76:2b:b9:93:b1:89:e4:
         ed:ad:f2:6b:dd:29:23:61:d6:38:15:5a:a7:c8:48:93:8b:93:
         78:26:52:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:26:12 2025 by rpki-client