Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/83fd283c-ca61-359f-94c0-1199c0eda9aa.roa
File:                     83fd283c-ca61-359f-94c0-1199c0eda9aa.roa (raw, json)
Hash identifier:          t1ibNN0UPlrqwmuXA3FaA/WnfmQ/tWZHlo8W6wBLI44=
Subject key identifier:   F7:EF:2D:9F:A8:94:83:5C:25:B4:FE:17:D9:1F:90:12:92:A9:DF:82
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A4A39512E9B45707990BD9A80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/83fd283c-ca61-359f-94c0-1199c0eda9aa.roa
Signing time:             Mon 23 Jun 2025 19:46:04 +0000
ROA not before:           Mon 23 Jun 2025 19:46:04 +0000
ROA not after:            Sun 21 Sep 2025 19:46:04 +0000
asID:                     20001
IP address blocks:        209.163.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:39:51:2e:9b:45:70:79:90:bd:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 23 19:46:04 2025 GMT
            Not After : Sep 21 19:46:04 2025 GMT
        Subject: CN=c08718db-fdb7-409b-b9d9-6a3a91d7c02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2c:64:e3:b5:86:cf:66:16:ca:fe:f5:e3:db:
                    bc:30:48:ff:5d:29:50:40:85:4f:57:1c:3e:8d:7d:
                    6e:68:0a:23:4a:49:ac:c6:51:1a:3a:31:4f:99:bc:
                    06:81:89:c7:da:3e:5f:e5:bb:a7:02:5b:ae:05:3f:
                    16:51:95:e6:fb:a1:34:34:57:72:45:41:93:8b:bc:
                    cb:81:60:b4:c9:e9:6e:b7:49:f3:43:f1:68:30:05:
                    b7:aa:9f:b7:51:65:62:b5:5d:4c:ef:19:b9:d3:0f:
                    b2:e5:1b:a7:bd:a5:f1:a1:5c:8a:f3:04:a5:f3:45:
                    9f:d0:c0:9d:12:98:ef:86:dd:c4:e5:49:40:cc:9f:
                    30:b0:d0:69:45:92:a3:65:5f:3a:4f:fc:cb:99:16:
                    56:14:fa:2d:1f:a8:f5:2c:cc:15:05:f1:b9:f5:20:
                    f0:41:6a:f9:e6:4d:b3:f1:77:72:8e:8e:c5:cd:99:
                    ed:1a:b9:df:bf:84:9b:4c:4d:20:58:15:4a:8a:e8:
                    55:44:d8:70:2d:20:58:36:9d:99:b3:06:ea:ff:51:
                    0e:64:d0:f0:92:96:51:66:1b:e9:7a:f2:65:c8:c2:
                    4f:fa:83:0d:48:3d:a7:d2:2d:75:5c:a3:7c:39:95:
                    ee:4c:72:ca:97:db:61:44:71:8a:93:b4:8f:c7:50:
                    b5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EF:2D:9F:A8:94:83:5C:25:B4:FE:17:D9:1F:90:12:92:A9:DF:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/83fd283c-ca61-359f-94c0-1199c0eda9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:5d:fe:26:85:b8:4c:10:38:51:8d:31:48:20:5c:97:6b:57:
         12:f9:3a:d2:1c:64:86:6c:71:17:a7:c8:60:a2:de:59:d3:28:
         45:cf:98:18:6d:0c:bb:73:d6:ea:f6:51:c8:0e:b9:b0:a0:96:
         e8:be:7c:cd:fb:51:11:bc:80:25:f3:05:63:bb:85:9b:02:fd:
         7f:fc:6e:33:15:b0:16:0e:0c:45:3c:ac:1a:6c:c4:85:f9:7a:
         3e:b1:4b:ba:a2:9e:5c:4a:61:83:83:3b:60:a5:b5:c7:11:ff:
         52:e1:f2:02:81:b2:2b:e1:13:76:3a:5a:0d:bb:1c:d3:47:e0:
         78:63:d5:ac:a3:09:14:85:0b:75:d9:0f:1b:17:33:7d:cd:5a:
         ad:e6:a9:65:97:17:13:32:a0:6e:9d:0c:5d:07:63:3b:bb:fa:
         d3:09:42:42:6c:a8:9a:be:01:9a:cf:c5:4f:ac:f6:f4:b9:59:
         39:46:cc:0d:d1:26:7c:3f:c3:d3:8b:1c:97:d6:9f:ee:5c:23:
         0d:14:cf:79:54:61:b4:86:ea:41:35:9b:5a:cd:65:3a:04:62:
         c6:2f:5d:38:60:45:45:8f:2d:bf:9d:30:36:b7:ee:01:9f:d5:
         d5:10:52:28:da:7a:66:50:df:f8:7e:3a:6e:70:1b:42:93:4a:
         b7:1b:0d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:22:08 2025 by rpki-client