Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/64c7f1aa-e841-3477-a99e-7a146becbbc2.roa
File:                     64c7f1aa-e841-3477-a99e-7a146becbbc2.roa (raw, json)
Hash identifier:          UaVy3j6XAqIcVEi8xuviYTEp9+vucD0lgNvDyggemJ4=
Subject key identifier:   12:0F:DD:DF:7B:91:4F:60:10:88:D2:6A:CB:D2:3F:ED:15:07:D6:66
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B48E1C637DDAFFCD3B2C21180
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/64c7f1aa-e841-3477-a99e-7a146becbbc2.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397630
IP address blocks:        170.199.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:c6:37:dd:af:fc:d3:b2:c2:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=a1e11604-8d54-49ca-a1a6-e7aee9fab532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:ff:5b:f9:86:c2:cb:b6:1e:92:14:1b:58:
                    ae:e1:8e:92:85:ba:3d:65:96:71:aa:d0:71:ab:02:
                    9c:2f:63:d0:13:04:03:59:2b:df:bb:8f:ca:fb:f3:
                    77:78:8d:59:2e:72:e8:a8:23:43:b5:d8:ec:84:71:
                    51:91:0c:66:c0:78:7c:67:a9:00:05:5b:a0:22:87:
                    db:a7:fd:93:de:ff:d0:bf:ee:4a:a0:3b:35:05:a7:
                    38:0a:09:e2:2d:22:6f:77:c5:a7:09:83:b1:66:78:
                    0d:6f:7d:9e:9b:f3:73:21:0f:a6:f7:98:32:e9:34:
                    f3:5f:66:8b:5b:fa:87:8a:ee:59:30:76:26:63:38:
                    22:a9:47:5a:b9:ed:ce:ef:71:91:f0:3e:86:05:b3:
                    d8:c7:83:5d:09:7b:ed:55:54:4b:c3:31:d9:3b:a9:
                    02:cf:77:a4:50:21:cf:40:9e:5e:f1:24:54:d3:62:
                    94:eb:b3:97:66:01:29:3c:79:24:17:7b:a7:0f:41:
                    0f:6f:b3:62:d5:bc:9d:3e:2c:5c:42:0a:7f:c8:d5:
                    fc:5f:53:97:e2:80:e5:f0:9c:cc:e1:61:57:f9:a5:
                    5e:b3:b2:2b:a3:88:0a:c3:74:fe:eb:29:75:60:72:
                    1d:43:35:e1:89:81:f7:be:09:f6:d9:fe:17:0b:36:
                    77:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0F:DD:DF:7B:91:4F:60:10:88:D2:6A:CB:D2:3F:ED:15:07:D6:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/64c7f1aa-e841-3477-a99e-7a146becbbc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:d1:f2:aa:1c:5c:4a:a9:04:0f:d5:a3:b8:b1:77:78:90:a2:
         96:59:60:52:de:e8:39:6b:9a:3c:67:8d:9c:ca:d3:3b:17:f1:
         01:02:d2:ab:3f:64:31:91:94:e0:59:44:eb:7e:9c:93:a4:3f:
         46:ef:36:91:43:7d:0b:8d:06:b7:cf:a8:3a:f1:59:85:99:63:
         58:d8:32:11:bb:8a:74:c8:cf:32:37:53:82:5b:8f:c2:3c:21:
         66:2d:e2:a6:6d:a2:09:ec:a6:e7:27:c8:da:c3:58:e2:f7:20:
         ff:24:18:80:12:bc:07:05:a9:be:91:58:62:6f:13:dd:6d:ea:
         f6:88:62:85:c8:b7:33:b8:67:35:e2:3b:86:0f:6e:3c:c6:81:
         db:a7:84:1d:55:b2:90:7f:ba:31:b7:35:74:20:49:0c:c0:06:
         65:9b:32:81:fc:c8:ee:41:8e:fe:3b:ca:70:42:f6:cd:4d:22:
         21:51:ba:c1:b8:40:ce:9a:1c:96:2b:15:33:35:85:d7:51:b5:
         d7:fb:31:f7:ee:d9:8b:97:78:18:f9:7a:ab:90:fd:c3:0a:13:
         bf:ff:a0:e3:ec:26:06:ea:25:53:8f:6d:14:de:43:dd:df:47:
         04:9a:82:4a:74:f3:3e:24:49:85:01:49:f5:cf:5c:d2:5a:98:
         ae:08:a8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:36:37 2025 by rpki-client