Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/72b283cd-357a-3634-9e71-f3500f551858.roa
File:                     72b283cd-357a-3634-9e71-f3500f551858.roa (raw, json)
Hash identifier:          Mg/HjB2EuT55NXxznD9EcNch4YRZngoVlNxr/K86FKQ=
Subject key identifier:   EF:C0:52:BA:4E:39:76:50:E4:F7:35:6A:DF:A5:98:93:6D:88:C2:E0
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584AD7D11E7CBC9AF1D3D922A000
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/72b283cd-357a-3634-9e71-f3500f551858.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     7018
IP address blocks:        170.199.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:1e:7c:bc:9a:f1:d3:d9:22:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=0539f97e-2492-47aa-9ce3-80826426b199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:d3:dd:e7:c7:3a:31:d0:cb:99:b8:7b:cb:
                    9a:14:bb:7d:17:f8:b4:a6:21:f5:57:f4:d2:e6:2f:
                    10:7f:9c:e4:65:a9:2f:64:ba:85:38:79:e5:32:e0:
                    a8:22:38:01:35:e8:35:15:e7:12:b2:a1:56:3d:72:
                    3f:99:7b:77:a2:e5:49:f6:32:df:79:b6:e3:20:0a:
                    b9:aa:fd:25:ff:b6:6f:1f:07:f4:99:90:14:ac:ef:
                    13:ab:dc:d1:a5:b3:c4:8f:19:74:d3:35:2c:b9:b8:
                    7e:83:93:86:80:fc:dc:3e:bd:70:92:fd:b0:c0:16:
                    e0:61:d6:ea:7c:fd:99:08:88:4a:73:5d:ae:3c:47:
                    c5:be:83:de:65:a2:dd:c9:d0:81:02:55:18:54:99:
                    ad:a7:62:68:71:a4:3c:48:3f:01:c0:e8:e7:eb:19:
                    d2:7f:37:48:b1:21:3e:36:03:de:22:0d:02:e9:fa:
                    84:d8:3f:7d:1b:3a:e7:e5:f7:a8:03:91:f3:eb:ee:
                    e1:76:75:ce:64:3b:63:ad:d8:d2:6f:ec:14:6d:b3:
                    07:70:18:d3:f2:13:1f:bc:1a:fd:21:75:05:66:fa:
                    9d:4a:12:0a:f3:62:c4:f6:76:32:90:a9:c9:e4:69:
                    2d:ae:24:2c:98:7c:03:e4:5a:6f:1b:97:7c:c5:1f:
                    aa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C0:52:BA:4E:39:76:50:E4:F7:35:6A:DF:A5:98:93:6D:88:C2:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/72b283cd-357a-3634-9e71-f3500f551858.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:70:ad:03:f4:fb:62:6d:9e:d6:b5:3e:f6:95:c3:84:23:bd:
         ce:02:71:2f:06:0d:7f:e2:3b:e4:69:b7:e0:5a:7f:91:62:d2:
         72:d2:ba:03:64:be:26:bb:1f:ac:ed:a3:f9:cd:19:ff:14:57:
         09:55:a8:2f:b3:ed:54:68:68:a5:84:50:04:c2:f1:8b:9b:bb:
         22:b9:85:75:72:c2:97:9f:6f:c8:c2:1c:ab:68:74:31:ed:88:
         fa:f4:ea:29:d1:4f:83:7c:49:13:bc:0e:a8:dc:ea:fe:a9:16:
         ff:fc:a7:75:e0:72:da:56:0d:db:3b:2f:ba:53:3d:c1:8b:c7:
         2b:73:a9:7c:53:74:d1:0c:aa:b1:45:0e:74:fe:1d:93:16:c7:
         73:30:1d:9a:3b:25:33:f2:65:cc:c6:e9:00:a7:e6:ad:34:2d:
         00:75:ab:7c:47:93:9d:57:34:61:35:0f:89:c0:0a:3a:9e:f9:
         4e:1c:37:9d:e9:b9:f5:b8:86:53:2a:12:19:14:c3:46:a4:f1:
         9b:61:52:b4:9f:73:7a:eb:22:c0:38:46:8e:03:be:76:d5:ab:
         e3:28:61:78:c1:7d:4f:97:78:f0:fc:87:e3:e6:2a:57:25:ee:
         a8:5d:b2:0e:c2:5f:5b:6f:cc:64:9e:e0:d5:2b:6c:40:bb:2c:
         2b:0d:f3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:12:17 2025 by rpki-client