Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2c9318b3-c8ba-354a-92a1-16c138da49bd.roa
File:                     2c9318b3-c8ba-354a-92a1-16c138da49bd.roa (raw, json)
Hash identifier:          xSnwS7TPYzUSykp0HvHFpXJDGctu8kepy6LtN1Z+W6I=
Subject key identifier:   BF:44:1B:EB:35:0C:74:A9:66:81:1C:DB:31:E5:7D:E4:35:C3:83:F5
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B2A2C6036349987B7450C1380
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2c9318b3-c8ba-354a-92a1-16c138da49bd.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     20001
IP address blocks:        69.58.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:60:36:34:99:87:b7:45:0c:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=1cff70f6-0813-4715-b8c1-0788117a41f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:af:f1:92:e2:7a:ea:8a:51:4b:e2:3b:aa:fb:
                    f2:be:e8:8b:f2:71:8a:f1:2e:5b:6c:3c:b6:d3:2a:
                    fd:bd:38:b5:8c:72:f8:91:f7:5b:83:33:4d:ed:0b:
                    14:62:c5:a2:8e:41:5f:28:96:b6:ed:15:fe:cd:15:
                    13:28:0e:a8:89:2b:53:02:3b:41:8b:22:87:ee:8c:
                    1e:35:a2:fa:28:f7:04:a5:46:f6:0c:f0:21:23:6a:
                    ee:3d:97:da:cc:42:d8:41:a0:61:71:56:1d:26:7e:
                    a9:1d:6f:12:83:08:1a:a4:70:ef:16:0c:44:2b:77:
                    97:87:81:0e:27:05:43:c4:4b:14:a1:cb:5b:e7:b2:
                    4f:db:d3:fc:fe:70:02:8e:21:1f:2e:21:08:2e:90:
                    34:c5:00:a9:37:66:7a:5b:63:54:56:03:25:2a:cf:
                    a1:98:85:2f:93:83:c6:ec:82:cf:65:d6:5f:9d:22:
                    64:fe:38:e4:34:e8:33:c7:a4:53:ce:b0:64:a5:0d:
                    a0:8b:f9:a1:25:d9:8e:48:c8:1c:db:46:d5:a6:fc:
                    92:d0:a5:de:31:92:4d:94:2c:69:c3:32:14:17:7c:
                    50:64:62:4b:5a:a2:01:f9:52:7e:38:88:c3:7f:89:
                    39:d6:55:77:c2:6c:e0:ff:93:3e:71:65:ae:db:9c:
                    99:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:44:1B:EB:35:0C:74:A9:66:81:1C:DB:31:E5:7D:E4:35:C3:83:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2c9318b3-c8ba-354a-92a1-16c138da49bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:46:e7:80:e8:f9:fe:d4:2d:04:e5:8d:21:3f:17:99:70:2a:
         52:8d:9e:38:d3:95:b4:08:71:8c:93:c6:11:27:c4:a5:9b:24:
         fc:18:75:9e:b1:f6:e5:76:50:91:52:9d:92:9f:09:73:90:f8:
         83:c2:e9:af:f3:cc:4a:8e:d0:35:c2:7b:59:1b:cd:33:3a:0b:
         70:63:ec:f5:dd:3d:7c:f7:e3:81:40:64:11:8c:b6:e8:b9:eb:
         44:e8:56:c9:0f:1a:3c:4e:1f:cb:06:b9:e7:24:e8:e7:c1:53:
         9d:c0:ae:82:fc:ea:4e:01:67:5c:c4:32:c8:00:fa:f7:67:b9:
         51:66:22:34:f8:47:53:f0:9b:05:0e:28:1f:6f:e6:98:9d:b3:
         cc:a3:6b:ae:5e:62:27:a3:c1:38:6e:cb:86:8e:e9:a8:af:a8:
         df:89:f4:a2:44:29:58:ad:e4:c4:01:e6:b1:ef:3c:10:33:09:
         42:5b:a6:43:42:9b:f9:5f:70:8d:51:54:92:68:f9:ec:ef:5c:
         f4:60:51:35:98:e6:04:1f:8d:96:68:85:8a:6e:10:e8:01:2b:
         c9:44:b6:de:48:4a:42:ca:f3:bc:56:50:6e:08:a0:90:71:ce:
         5a:89:ab:b2:a4:73:19:bb:02:98:53:16:ce:e2:01:5e:7d:47:
         f7:c5:34:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:56:06 2025 by rpki-client