Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/23c59214-aa26-3682-8b1e-5d2b64b83986.roa
File:                     23c59214-aa26-3682-8b1e-5d2b64b83986.roa (raw, json)
Hash identifier:          uGud7F6M7g91qzM1EsEjBEtJS7gAyiNyYHV5KwsZLcw=
Subject key identifier:   57:9A:B5:98:44:9B:28:25:15:55:C5:24:2E:1A:25:F1:14:F2:CC:13
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A4A0FF58B10F1372062D86770
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/23c59214-aa26-3682-8b1e-5d2b64b83986.roa
Signing time:             Mon 23 Jun 2025 18:22:44 +0000
ROA not before:           Mon 23 Jun 2025 18:22:44 +0000
ROA not after:            Sun 21 Sep 2025 18:22:44 +0000
asID:                     20001
IP address blocks:        170.199.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:0f:f5:8b:10:f1:37:20:62:d8:67:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 23 18:22:44 2025 GMT
            Not After : Sep 21 18:22:44 2025 GMT
        Subject: CN=9a83ca58-302d-411f-8203-88dbe2f80a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a5:b5:2a:cb:60:c9:38:f1:34:1a:a5:e8:c3:
                    79:5f:8f:ac:bd:fe:97:ac:b4:e9:fc:f9:81:91:61:
                    1c:58:ee:0d:c8:8a:9d:fb:57:60:a9:8f:ec:59:e9:
                    c9:d3:94:d3:5c:4d:f9:27:94:d2:9d:6b:9b:42:4d:
                    01:07:5d:e7:23:3d:41:2e:5d:b3:af:61:56:d2:f3:
                    32:2f:a5:db:3a:ea:e0:6f:8a:a9:13:77:17:42:28:
                    66:b3:f3:40:6d:4a:c8:b4:d4:39:22:d1:55:e6:85:
                    f0:50:92:40:f1:00:23:82:8a:ea:00:c2:38:1e:13:
                    c9:dc:9d:34:a5:74:4a:6e:21:93:70:b5:fb:63:97:
                    10:f6:4f:46:42:dd:9d:1e:78:a6:e1:e1:18:35:d2:
                    d6:5a:f5:9c:6a:52:06:a2:5b:ff:d6:90:30:2a:a2:
                    da:c5:0e:da:9a:3f:a0:fc:71:ce:bb:40:5d:e0:15:
                    e3:8a:82:36:7e:c2:08:13:31:9a:19:ac:8b:36:16:
                    89:65:3a:c2:91:65:5a:a1:e8:70:5c:5f:39:7f:a1:
                    6c:f2:fb:6e:c7:59:28:7a:53:93:f7:13:89:58:e3:
                    42:ef:c1:65:95:19:ba:b1:3f:4e:30:bf:5c:c9:9c:
                    26:3b:4b:02:2c:f1:bd:f3:34:28:e3:c6:cb:90:11:
                    be:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9A:B5:98:44:9B:28:25:15:55:C5:24:2E:1A:25:F1:14:F2:CC:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/23c59214-aa26-3682-8b1e-5d2b64b83986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:45:32:b4:0c:4e:9f:79:3a:12:b1:7f:a8:90:7a:87:f8:46:
         80:3e:8d:f4:f5:07:7c:29:01:32:a1:18:a8:6a:d4:e3:4e:d8:
         8e:6d:4e:f1:30:63:26:47:14:7a:27:4f:6b:ab:76:bc:a7:fd:
         be:fa:19:36:02:42:82:51:5c:47:9e:47:8b:09:04:2f:95:1e:
         29:c3:b1:7b:b0:90:3d:b4:39:2d:da:97:c1:90:ca:94:5b:36:
         11:24:43:35:d9:40:cc:c0:3d:c6:91:42:f4:68:7d:a9:9a:67:
         28:82:ab:bf:a3:93:89:81:d9:3b:40:8a:43:a4:df:7a:f7:60:
         b4:4f:0c:4d:1b:0e:4e:08:c2:ef:34:d6:30:39:12:7e:ca:de:
         e0:f6:60:6b:11:16:5f:51:70:5b:fe:11:55:3f:cd:f9:27:de:
         e3:db:16:04:a1:d8:7c:74:29:d1:79:c0:fc:98:17:6a:59:5a:
         9d:85:d8:cf:49:6c:09:24:ee:b4:51:38:f8:d6:65:90:25:ae:
         c8:f7:bd:e3:db:9d:71:08:61:e3:b2:27:95:06:cd:5d:0b:82:
         0c:b7:8e:ff:3f:00:e9:ba:95:47:48:74:9a:3b:cb:02:36:14:
         a7:81:16:c2:d0:f9:f6:a3:1a:20:51:32:78:e0:b1:df:15:de:
         49:c4:c0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:48:44 2025 by rpki-client