Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/90e73c18-5a5e-369a-a020-9f731144ee39.roa
File:                     90e73c18-5a5e-369a-a020-9f731144ee39.roa (raw, json)
Hash identifier:          hDm4H5CRgAi+d9lMZbzj111fdoXLLxkXr8peP8KvSAo=
Subject key identifier:   94:8A:2B:DB:9B:CB:ED:A0:5C:2D:3B:98:9A:BA:EF:01:07:B4:AC:F7
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B6201D83E16E14322B8D1C0C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/90e73c18-5a5e-369a-a020-9f731144ee39.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     7018
IP address blocks:        173.214.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:d8:3e:16:e1:43:22:b8:d1:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=ed957496-b3c4-4dbb-93e4-8cf3d0df449d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:d7:56:b7:9c:80:a8:d4:44:08:cb:79:94:
                    b1:ea:32:b6:5d:b9:49:1f:19:d4:0b:66:f1:6a:5e:
                    31:df:56:18:54:ee:d4:d7:0b:fd:4e:06:b9:da:cb:
                    d2:b6:ac:e0:1c:36:f4:be:c7:24:44:c2:20:a3:55:
                    ba:67:93:99:57:67:03:bf:1d:c3:94:1d:01:2e:a2:
                    c9:09:0d:6b:73:1a:54:84:ef:a0:f3:b0:92:81:9e:
                    ba:f0:11:a1:b6:25:d8:05:c9:3e:01:50:40:83:c3:
                    6c:10:fb:22:60:b8:1b:2d:db:07:83:6b:c1:d3:b1:
                    8c:95:de:3a:8f:fa:e2:00:70:d0:a5:eb:5a:6f:69:
                    ae:55:20:72:e4:b7:73:6d:30:74:25:3c:86:50:89:
                    4a:29:18:db:00:dc:4f:b6:c0:92:b9:fa:56:21:f3:
                    e6:d7:a9:0c:2d:48:ec:fd:c3:13:85:77:ae:34:15:
                    35:46:24:50:cf:5b:66:64:ea:c7:74:c6:1d:01:6a:
                    54:4b:cc:73:82:98:b4:a7:ed:49:7b:8f:75:58:50:
                    4c:86:36:a8:3e:cb:12:8a:e8:3d:ee:11:7c:e0:d3:
                    b6:08:c8:54:51:c7:03:28:4e:75:dc:10:54:6d:12:
                    9e:15:99:c3:4e:09:af:13:7d:e3:00:4a:10:86:2b:
                    94:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8A:2B:DB:9B:CB:ED:A0:5C:2D:3B:98:9A:BA:EF:01:07:B4:AC:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/90e73c18-5a5e-369a-a020-9f731144ee39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f5:16:8d:b4:f9:d2:a9:ce:25:a1:b1:66:7d:3b:e8:68:b6:
         5b:fa:61:69:a8:b5:9b:94:29:21:f4:e1:a3:45:f9:0c:72:b0:
         c3:a2:e6:24:06:a1:aa:a0:be:84:a4:60:3b:16:b5:ba:e1:6f:
         d6:7a:c5:41:af:4c:5c:eb:6e:70:68:b5:79:87:4f:6f:38:08:
         45:c9:d0:0d:3b:0e:0e:de:70:d7:c1:30:1d:0d:5f:3f:6a:c8:
         62:f1:bf:3f:61:ee:9f:18:54:40:5a:5b:1a:13:16:ba:d4:c5:
         05:87:e5:4e:b0:ca:ee:ab:21:87:c8:55:c9:ab:83:79:d5:19:
         a9:6b:f9:d3:1a:44:ee:e1:bb:49:48:6d:4d:e6:34:da:75:75:
         65:2f:bb:3c:f2:e2:32:04:28:b2:ab:5d:9b:53:2f:e3:8d:8c:
         a3:dc:be:e7:cc:4d:4e:32:3f:1f:14:30:1e:bb:c7:8b:78:a8:
         cf:a2:05:ae:12:61:59:dd:67:47:de:fa:ab:23:a6:4a:5e:01:
         75:86:c9:ac:ae:80:47:c6:6a:46:ce:7b:c8:6f:3b:05:7a:c5:
         56:ee:99:5e:ca:2c:4d:8b:f2:0d:68:74:16:fc:30:94:63:f7:
         91:a5:4c:62:0c:0d:ca:91:43:8b:1f:75:b4:b8:88:d0:99:d3:
         eb:40:d4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:35:16 2025 by rpki-client