Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/957f4629-8825-3597-999b-ff03241d485f.roa
File:                     957f4629-8825-3597-999b-ff03241d485f.roa (raw, json)
Hash identifier:          hychMXVcqaae04rQEcySv+EuvERqxZZ0zrCd6Fr3CoQ=
Subject key identifier:   16:2C:95:08:B9:6F:60:80:9E:5A:5C:7F:74:EC:BE:25:B6:42:AC:09
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B79BCB969FB2CE6E780C86980
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/957f4629-8825-3597-999b-ff03241d485f.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     397630
IP address blocks:        207.254.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:b9:69:fb:2c:e6:e7:80:c8:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=3919dba4-85ec-4794-9bef-85ed703d570b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:de:fa:75:4b:52:b8:c7:01:03:13:d8:2f:b5:
                    69:c6:aa:34:54:9e:0f:db:b2:40:45:d2:0f:82:e7:
                    67:80:84:b6:f2:6e:b6:f5:dd:c1:92:51:f9:b9:fa:
                    7d:43:7b:8b:48:a9:ee:8a:ce:ca:3f:b2:d7:7a:9f:
                    7d:29:39:02:eb:09:38:7c:92:66:93:3b:3c:9a:65:
                    26:13:6e:35:0a:dc:7e:60:18:09:f8:2d:38:e9:39:
                    d1:45:ff:f7:20:02:c0:b6:63:67:db:9b:ea:e6:8d:
                    d6:0a:b3:19:0d:4b:17:29:dc:f7:9a:b9:2d:49:90:
                    0a:fe:e2:c0:7a:8e:0c:78:67:87:a3:a9:66:0b:01:
                    e5:6e:05:6b:3c:a6:2c:e1:1a:a8:15:03:63:e4:5c:
                    ee:e6:eb:f8:3d:3d:14:a2:94:b1:bb:14:8d:c0:be:
                    77:39:26:b6:97:ee:58:67:b7:26:fc:93:63:e6:bb:
                    26:47:57:a3:1a:5c:b4:85:80:03:e8:53:d5:08:e9:
                    f1:ba:df:c4:32:5b:91:46:90:f9:0f:a6:05:aa:73:
                    ae:6f:55:83:3b:5f:e7:ad:9d:cf:90:b9:62:f0:f5:
                    ad:8f:fb:8e:2c:07:10:63:d4:43:6d:d3:2c:2e:20:
                    63:4b:e2:d8:42:44:38:fb:dd:eb:d2:b8:38:7b:c9:
                    95:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2C:95:08:B9:6F:60:80:9E:5A:5C:7F:74:EC:BE:25:B6:42:AC:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/957f4629-8825-3597-999b-ff03241d485f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.254.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:78:fe:c6:ce:59:22:d9:1a:c2:eb:09:18:29:bf:d2:7d:93:
         12:ae:55:fa:51:e3:13:62:0f:e9:e5:68:d7:85:6e:6c:9b:26:
         ad:c2:a3:77:d1:26:cb:b1:c6:ed:16:d6:53:a1:3e:d4:86:4c:
         55:1d:15:02:7d:a7:26:4f:41:eb:a0:02:b7:8c:9d:f1:01:8b:
         86:20:26:f6:db:ec:67:30:22:cb:fe:b8:6f:83:f7:c9:6f:98:
         15:20:cb:64:06:1e:6e:2e:f2:03:b9:bd:2d:b6:96:22:2e:28:
         0b:85:6d:35:d4:4d:f8:d4:08:21:62:50:2a:79:a3:82:c9:42:
         53:2e:ab:14:ab:9f:a9:cb:51:43:b3:1e:f2:67:64:57:4f:72:
         15:2c:a6:ba:40:86:66:d7:b6:5a:a2:18:ba:46:7d:77:39:9d:
         c0:a8:28:59:87:38:d7:38:81:6f:db:08:85:58:0b:ef:02:4a:
         59:87:81:4f:b1:20:f9:45:fa:23:1b:36:b8:3b:40:9d:b4:ae:
         a3:de:c8:5c:55:f4:b7:24:13:2b:42:44:dd:96:9c:c1:74:f6:
         7f:d3:61:8b:77:57:f1:73:5f:27:7e:a3:89:0d:51:36:4a:5c:
         fa:c6:63:26:23:42:44:ab:4e:11:95:19:53:a3:58:47:69:34:
         76:00:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:25:44 2025 by rpki-client