Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1b8497a1-452e-3034-a975-ac3f6ba199e2.roa
File:                     1b8497a1-452e-3034-a975-ac3f6ba199e2.roa (raw, json)
Hash identifier:          IIGzNtn2ByOcOCt3viazyDJsEmGYIcgsyrYsxlvfGic=
Subject key identifier:   F1:81:E3:81:83:BE:C6:5A:01:AF:F9:D3:C0:DC:0D:CD:E0:7C:E1:73
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B6BC75567CF18DBD73191B800
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1b8497a1-452e-3034-a975-ac3f6ba199e2.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     64267
IP address blocks:        147.92.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:55:67:cf:18:db:d7:31:91:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=6d52f2c9-d928-465e-aae6-89e50682ccaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:77:3b:be:67:56:75:c5:2f:14:63:5b:25:be:
                    3d:bf:0d:6c:c0:a1:9c:be:4d:f2:1e:ac:53:41:60:
                    ce:d0:b6:81:30:83:c1:20:9d:c0:98:ec:7f:b6:93:
                    cc:d8:3f:3d:00:d8:d6:d7:c4:84:72:0d:db:77:8e:
                    9f:79:e5:d6:d7:c7:bd:5f:53:66:4c:ba:00:9f:0b:
                    05:03:1b:20:a7:e4:47:d0:0c:e0:72:24:7d:42:48:
                    c7:7c:e7:50:79:87:df:85:b9:c4:c7:c0:46:9a:2c:
                    c1:a6:0b:af:51:6c:a4:ca:49:ef:86:ab:eb:ba:03:
                    f7:5c:a6:32:03:60:8e:9b:ae:38:c7:da:80:84:df:
                    3d:dd:7a:0a:7e:fe:de:45:a1:e9:9e:43:73:1a:f3:
                    ee:2d:60:1b:c7:ff:1f:c2:47:bd:32:7c:be:aa:50:
                    3c:0e:86:ba:e3:9f:c5:f6:11:5c:42:c1:1f:71:79:
                    71:96:f4:d3:73:40:75:5e:73:c9:17:ba:e0:3a:5d:
                    a5:14:a0:53:d5:ce:03:6f:97:51:55:ec:90:0d:82:
                    bb:a4:db:43:67:06:20:6b:69:48:dd:d6:81:74:b5:
                    53:a0:76:9d:25:04:e6:ff:de:7c:34:59:3b:e5:50:
                    27:12:bd:96:5c:0c:b6:bd:15:8e:01:cd:9e:d4:ab:
                    eb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:81:E3:81:83:BE:C6:5A:01:AF:F9:D3:C0:DC:0D:CD:E0:7C:E1:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1b8497a1-452e-3034-a975-ac3f6ba199e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.92.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:b7:dd:9a:ff:84:45:23:a0:c9:de:31:d4:a4:46:cd:ec:35:
         86:45:bd:a5:a3:35:1d:de:10:0e:a0:8f:da:2b:da:69:ae:b3:
         38:f8:d5:a9:34:3b:d5:2f:3a:7e:22:b5:2e:65:ed:da:b7:32:
         29:54:32:1c:74:d4:51:30:31:c8:f7:9b:4a:94:05:ac:fc:6e:
         00:fb:0c:fe:88:65:9e:c2:a3:eb:d7:d7:24:77:50:fc:07:c6:
         f5:fe:98:f3:f8:e7:63:41:35:ed:41:a6:ab:6c:f4:14:18:28:
         7e:cb:c7:98:ef:48:64:f8:e6:d6:88:56:df:2a:82:39:2e:d5:
         16:c3:96:91:88:41:7d:de:7b:b9:ed:97:79:80:2a:a4:7e:01:
         9d:9b:72:d3:2d:2e:cb:73:a2:2f:e5:f7:3b:5e:da:e1:a6:8e:
         bc:90:88:fa:9d:c0:b8:0b:0e:17:3b:bc:f3:4d:d8:73:09:d5:
         f2:1f:a7:59:e6:2a:bc:03:93:e9:33:8a:3e:b3:c0:ca:da:55:
         5e:bb:29:dc:4e:12:12:8a:30:7e:2f:b4:42:2b:cf:4e:42:83:
         9f:24:af:3e:fd:6b:b7:56:21:8c:44:2d:38:10:c5:22:49:d8:
         c8:99:7d:a3:c9:81:34:d1:82:68:75:dd:44:c6:0d:4b:23:e6:
         77:92:b4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:25:59 2025 by rpki-client