Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3570f6c2-d6d4-380a-9bc5-a273e6dae4ba.roa
File:                     3570f6c2-d6d4-380a-9bc5-a273e6dae4ba.roa (raw, json)
Hash identifier:          I4gFGZpzBXVm0YDdIYRu3eGXYT0EEiM8B1LyJfQaie4=
Subject key identifier:   7C:62:F6:28:92:F5:EB:34:CD:B2:96:AA:8F:34:E9:E8:88:85:00:EB
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B1806F8F7A1172C35BEEFE280
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3570f6c2-d6d4-380a-9bc5-a273e6dae4ba.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     7029
IP address blocks:        170.199.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:f8:f7:a1:17:2c:35:be:ef:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=f22923c4-bd9f-44a5-9e71-2d7313741320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:75:9e:ea:1f:b6:57:b4:7f:94:b5:54:2d:94:
                    cc:1c:66:ad:5c:5b:b5:6b:68:41:03:48:ee:a1:ef:
                    93:72:c3:8d:87:82:8b:b0:be:65:68:07:87:50:51:
                    bc:8d:6f:35:75:21:c6:6f:f3:e1:8e:c0:72:f5:0f:
                    3f:6e:f4:53:4b:2f:82:94:a9:13:7c:9a:57:9d:0d:
                    42:76:f8:3a:fc:5a:76:b0:91:f5:b6:89:96:39:74:
                    ed:49:b3:e5:32:07:92:5f:b2:44:b3:0d:0b:94:d1:
                    51:df:bb:d2:bb:04:18:78:4a:8b:7f:9b:8f:81:8d:
                    37:0b:fb:47:c4:c5:cf:97:69:e3:59:26:98:27:4b:
                    ed:2f:8c:ab:2f:7c:f6:4b:4d:71:85:4d:d5:c6:06:
                    6b:ef:a5:37:b6:4f:00:c6:03:08:3d:69:d7:82:29:
                    df:9e:93:a0:76:4c:e8:59:10:12:1e:3a:3f:bd:d3:
                    26:4c:23:fa:7e:ac:5c:fd:b4:bb:e2:b4:60:55:7c:
                    d0:d7:18:51:d1:59:7d:32:fa:7f:f6:7d:d3:a3:3c:
                    c7:0f:69:aa:db:1c:da:23:0b:34:4d:cf:50:35:68:
                    23:f6:8d:34:c8:50:53:17:73:5c:1d:2a:6a:f1:ef:
                    7e:03:18:63:82:75:75:9a:8f:50:0d:91:49:52:27:
                    9a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:62:F6:28:92:F5:EB:34:CD:B2:96:AA:8F:34:E9:E8:88:85:00:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3570f6c2-d6d4-380a-9bc5-a273e6dae4ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:88:61:bd:96:c4:9b:6c:70:15:c6:ed:c9:98:8f:e7:f0:41:
         23:17:d7:35:1f:19:2c:cb:cc:15:b4:46:0e:82:e1:2a:42:8a:
         55:c0:22:0c:7a:2f:c3:b4:52:e7:25:83:18:8f:a4:63:81:43:
         67:c0:e8:27:57:16:13:fd:1b:6d:28:d7:9d:56:4a:2c:75:70:
         e1:01:13:1f:02:ba:8d:b1:46:78:f6:ad:66:80:cf:37:61:f4:
         71:86:55:fd:90:dd:32:fb:76:aa:e1:75:6f:a9:56:7f:6f:fa:
         35:97:fc:8f:76:3a:d3:d6:98:14:e1:e0:86:30:82:e0:c2:19:
         a4:13:60:29:3a:d8:0d:14:3e:6f:75:a5:6a:19:4e:da:a5:fb:
         16:dc:42:aa:a4:de:f1:b4:88:59:38:d3:96:4c:5a:f6:8a:03:
         35:f0:11:e5:6b:f3:89:fb:cd:18:95:9b:a2:ad:cb:1d:90:13:
         8b:43:8d:90:6e:a9:cf:b4:98:e5:6c:62:48:ec:39:5c:40:fd:
         24:39:cb:0b:c6:81:5f:2e:08:25:c2:ed:8a:9c:b6:f6:43:42:
         42:d7:6b:11:7a:b9:a3:bf:45:02:e8:74:88:4f:14:2b:a3:7a:
         d4:18:ef:3c:82:82:06:1b:da:e5:33:33:f2:1a:8f:d2:7c:41:
         f1:48:42:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:45:14 2025 by rpki-client