Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3bc20ebb-1449-3fba-a6cf-d79e0ce33932.roa
File:                     3bc20ebb-1449-3fba-a6cf-d79e0ce33932.roa (raw, json)
Hash identifier:          CLLy3MYWnqSPVbgmP53JgUFzD+Xd0t/CoRgl3oVoxwY=
Subject key identifier:   B7:0B:0A:95:FE:AC:DB:C0:59:7D:1B:AA:62:96:E3:CF:24:7B:62:3C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A9900C37C702D97C16DACD300
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3bc20ebb-1449-3fba-a6cf-d79e0ce33932.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     7018
IP address blocks:        207.254.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c3:7c:70:2d:97:c1:6d:ac:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=5b02aa28-486b-45b8-a95d-cf3d9c1c276f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:11:1c:6b:2e:72:35:d4:f1:ff:30:31:4a:d7:
                    4b:0d:ee:bf:db:f4:81:8f:ca:af:b1:38:68:bd:7c:
                    f2:19:69:64:23:a5:93:6a:30:09:90:9c:31:7d:1f:
                    2a:2c:1d:32:6d:08:74:aa:d9:3f:42:0c:c9:42:b1:
                    e1:44:6b:8a:c5:0a:fd:a0:27:da:f0:2b:6b:62:8d:
                    45:5e:f7:d7:91:7e:64:28:f9:7a:de:a0:b9:4e:89:
                    ea:21:32:50:e9:4d:dd:d3:d3:18:a3:26:f6:29:f6:
                    aa:e5:75:77:fc:e7:b6:76:de:bb:54:1e:15:06:dd:
                    46:9f:14:5d:45:37:73:21:5f:9c:eb:80:7f:1b:0a:
                    92:1f:6b:5d:fd:8b:31:7a:29:3a:b7:6c:4d:9e:30:
                    f3:4d:cb:4b:22:cc:b3:60:85:74:a2:d8:39:ee:75:
                    a1:01:5c:31:ec:76:a4:e8:46:82:65:2c:e4:d4:df:
                    1c:09:b4:c8:3d:d0:95:61:9d:d3:8d:18:3d:5d:35:
                    1f:d8:af:44:03:6c:f0:51:69:51:88:63:28:61:b7:
                    b0:eb:49:1d:52:16:24:0d:c0:c2:5a:f0:60:d8:7b:
                    d0:2a:24:97:5f:d5:8e:29:f8:56:9d:45:98:48:b9:
                    03:17:67:d9:7e:98:0a:49:82:fe:95:d5:e9:7f:9d:
                    7a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0B:0A:95:FE:AC:DB:C0:59:7D:1B:AA:62:96:E3:CF:24:7B:62:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3bc20ebb-1449-3fba-a6cf-d79e0ce33932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.254.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:94:f9:31:5f:f8:a4:d5:85:f3:6d:9e:34:6d:b5:07:af:33:
         99:15:b9:e7:02:d3:38:44:24:a4:f5:f5:7b:e4:90:1f:08:48:
         3e:b8:ce:bb:f4:9b:97:48:02:11:87:e2:2d:d3:99:7e:b8:5e:
         e1:23:b5:5b:65:44:c0:64:88:a2:98:e8:ee:68:f6:af:c2:48:
         ae:46:87:d9:e7:7e:27:d0:53:73:51:8e:51:c1:2a:4b:c9:97:
         51:ad:3b:c6:a0:f0:fb:98:96:0c:20:b6:f4:8a:39:e4:53:5f:
         b3:f7:d8:e5:43:54:44:c5:c9:26:38:ac:4a:ef:4e:93:e2:17:
         5d:cd:10:59:aa:30:5b:b2:c3:b2:d4:45:b4:df:f9:0c:82:49:
         09:36:7a:a2:03:7b:e7:bc:be:a8:87:36:e5:bd:8d:09:7a:15:
         c7:df:9b:5a:ec:5f:a5:1d:65:71:11:0d:e6:da:19:b7:65:3c:
         ab:4c:06:06:92:7f:4a:d9:6f:2a:fb:6f:96:ee:5c:ac:f3:75:
         6b:ac:29:a7:aa:67:44:ab:8e:47:87:a0:bc:28:cd:45:27:49:
         df:81:b7:4b:50:b9:9d:d2:00:f2:cf:6f:bc:e3:e5:7a:35:8c:
         b3:69:90:44:d2:4a:4b:40:87:aa:5a:96:f7:6c:12:3f:f0:90:
         8a:98:77:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:54:23 2025 by rpki-client